<?xml version="1.0" ?>
<rss version="2.0">
  <channel>
    <title>Most recent updated packages for CentOS 10-stream aarch64 AppStream</title>
    <link>http://www.centos.org</link>
    <description>Most recent updated packages for CentOS 10-stream aarch64 AppStream</description>
    <pubDate>Sat, 11 Apr 2026 05:41:01 AM GMT</pubDate>
    <generator>DNF</generator>
    <item>
      <title>capstone-5.0.1-8.el10.aarch64</title>
      <pubDate>Thu, 02 Apr 2026 01:07:47 PM GMT</pubDate>
      <guid isPermaLink="false">253c4dbe9b3095d10c425d206f908ee373b46cae1f9af21e7962739f69d36751</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/capstone-5.0.1-8.el10.aarch64.rpm</link>
      <description><p><strong>capstone</strong> - A lightweight multi-platform, multi-architecture disassembly framework&lt;br /&gt;</p>

<p>&lt;br /&gt;
Capstone is a disassembly framework with the target of becoming the ultimate&lt;br /&gt;
disasm engine for binary analysis and reversing in the security community.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Jon Maloy &amp;lt;jmaloy@redhat.com&amp;gt; - 5.0.1-8
- Rebuild for rhel-10.2

Fri, 13 Mar 2026 GMT - Jon Maloy &amp;lt;jmaloy@redhat.com&amp;gt; - 5.0.1-7
- Fix CVE-2025-67873 (heap buffer overflow)
  Resolves: RHEL-141553
- Fix CVE-2025-68114 (memory corruption)
  Resolves: RHEL-137749

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 5.0.1-6
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-server-rendezvous-1.0.0-2.el10.noarch</title>
      <pubDate>Thu, 02 Apr 2026 07:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">c39088773df1a86426ebcb7782a39cdd21ff2299916fbc3cc9e759740a4d6845</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/go-fdo-server-rendezvous-1.0.0-2.el10.noarch.rpm</link>
      <description><p><strong>go-fdo-server-rendezvous</strong> - A Go implementation of the FDO rendezvous server&lt;br /&gt;</p>

<p>This package provides the rendezvous server component of the FDO stack.&lt;br /&gt;
The rendezvous server acts as a trusted intermediary, redirecting devices&lt;br /&gt;
to their designated owner's on-boarding service based on their ownership&lt;br /&gt;
voucher.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Tue, 17 Feb 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Tue, 27 Jan 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.4-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-server-owner-1.0.0-2.el10.noarch</title>
      <pubDate>Thu, 02 Apr 2026 07:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">b3e79ee7e7d17b2611d0c7a879104065995b8bd9cdeea7ba7e3a9a08f8e55bb4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/go-fdo-server-owner-1.0.0-2.el10.noarch.rpm</link>
      <description><p><strong>go-fdo-server-owner</strong> - A Go implementation of the FDO owner server&lt;br /&gt;</p>

<p>This package provides the owner server component of the FDO stack. The owner&lt;br /&gt;
server is the final destination for a device during on-boarding. It verifies&lt;br /&gt;
the device's authenticity, establishes ownership, and provisions it with the&lt;br /&gt;
necessary credentials and configuration for operation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Tue, 17 Feb 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Tue, 27 Jan 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.4-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-server-manufacturer-1.0.0-2.el10.noarch</title>
      <pubDate>Thu, 02 Apr 2026 07:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">e56490c50514712a670b17b90fd6169c756c67bc7d271cf69234d146b6d33e20</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/go-fdo-server-manufacturer-1.0.0-2.el10.noarch.rpm</link>
      <description><p><strong>go-fdo-server-manufacturer</strong> - A Go implementation of the FDO manufacturer server&lt;br /&gt;</p>

<p>This package provides the manufacturer server component of the FDO stack.&lt;br /&gt;
The manufacturer server is responsible for creating ownership vouchers and&lt;br /&gt;
preparing devices for the on-boarding process during the manufacturing phase.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Tue, 17 Feb 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Tue, 27 Jan 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.4-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-server-1.0.0-2.el10.aarch64</title>
      <pubDate>Thu, 02 Apr 2026 07:21:37 AM GMT</pubDate>
      <guid isPermaLink="false">9fef8dc4c468053172ff43154194b7364fcdb8489c61178b48ec66cb889acef1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/go-fdo-server-1.0.0-2.el10.aarch64.rpm</link>
      <description><p><strong>go-fdo-server</strong> - A Go implementation of the FIDO Device Onboard Specification&lt;br /&gt;</p>

<p>This package provides a server-side implementation of the FIDO Device Onboard&lt;br /&gt;
(FDO) specification, written in Go. FDO is an open standard for the late&lt;br /&gt;
binding of device credentials, allowing for automated and secure on-boarding of&lt;br /&gt;
devices when they are first powered on in their final location.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Tue, 17 Feb 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Tue, 27 Jan 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.4-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-fdo-client-1.0.0-2.el10.aarch64</title>
      <pubDate>Thu, 02 Apr 2026 07:21:36 AM GMT</pubDate>
      <guid isPermaLink="false">49fceb7958841ed6280650dd11f581ee0d9c6a01c54e263cf9ce13add2abfb5b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/go-fdo-client-1.0.0-2.el10.aarch64.rpm</link>
      <description><p><strong>go-fdo-client</strong> - FIDO FDO compliant device on-boarding tool&lt;br /&gt;</p>

<p>go-fdo-client is the device-side implementation of FIDO Device Onboard&lt;br /&gt;
specification in Go. It provides an FDO client that interacts with&lt;br /&gt;
FDO manufacturer and owner servers to perform device on-boarding.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 02 Apr 2026 GMT - Antonio Murdaca &amp;lt;antoniomurdaca@gmail.com&amp;gt; - 1.0.0-2
- Rebuild to fix CVE-2026-25679 and CVE-2026-27137

Thu, 19 Feb 2026 GMT - Sarita Mahajan &amp;lt;sarmahaj@redhat.com&amp;gt; - 1.0.0-1
- Update to 1.0.0 upstream release

Mon, 02 Feb 2026 GMT - Paul Whalen &amp;lt;pwhalen@fedoraproject.org&amp;gt; - 0.0.3-2
- Add gating test for cs10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>fips-provider-next-1.5.0-7.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 10:20:57 PM GMT</pubDate>
      <guid isPermaLink="false">f0ea7efbdcacea9cc24167b9931dc6e33413c9190c87f9c7135366840c2ecfcb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/fips-provider-next-1.5.0-7.el10.aarch64.rpm</link>
      <description><p><strong>fips-provider-next</strong> - A FIPS provider built from the Kryoptic project&lt;br /&gt;</p>

<p>This package provides a cryptographic module that is both an OpenSSL provider&lt;br /&gt;
as well as a PKCS#11 software token. This is a preview of the next FIPS&lt;br /&gt;
validation.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Simo Sorce &amp;lt;simo@redhat.com&amp;gt; - 1.5.0-7
- Fix a bug in one of the FIPS patches

Wed, 25 Mar 2026 GMT - Simo Sorce &amp;lt;simo@redhat.com&amp;gt; - 1.5.0-6
- Add fix for getrandom flag in fips mode

Wed, 11 Mar 2026 GMT - Simo Sorce &amp;lt;simo@redhat.com&amp;gt; - 1.5.0-5
- Add missing indicator for SLH-DSA signature test facility

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>grafana-pcp-5.3.0-4.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 04:46:51 PM GMT</pubDate>
      <guid isPermaLink="false">0dbcfc6c6e88c352ec16d9eb476984c421088d2f5d33ed3a6c46dfda0484bb52</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/grafana-pcp-5.3.0-4.el10.aarch64.rpm</link>
      <description><p><strong>grafana-pcp</strong> - Performance Co-Pilot Grafana Plugin&lt;br /&gt;</p>

<p>This Grafana plugin for Performance Co-Pilot includes data sources for&lt;br /&gt;
scalable time series from pmseries(1) and Valkey, live PCP metrics and&lt;br /&gt;
bpftrace scripts from pmdabpftrace(1), as well as several dashboards.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; - 5.3.0-4
- Resolves RHEL-156598: CVE-2026-25679

Tue, 17 Feb 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; - 5.3.0-3
- Resolves RHEL-146074: CVE-2025-61726
- Resolves RHEL-149247: CVE-2025-68121

Mon, 26 Jan 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; - 5.3.0-2
- RHEL-140517: CVE-2025-61729

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>grafana-selinux-10.2.6-25.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 04:07:06 PM GMT</pubDate>
      <guid isPermaLink="false">fa9abd7d0ce366bee8172ed6e301facd0297db6f26de3e5119d351d26c05c81e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/grafana-selinux-10.2.6-25.el10.aarch64.rpm</link>
      <description><p><strong>grafana-selinux</strong> - SELinux policy module supporting grafana&lt;br /&gt;</p>

<p>SELinux policy module supporting grafana</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-25
- Resolves RHEL-156596: CVE-2026-25679

Mon, 16 Feb 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-24
- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121

Mon, 26 Jan 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-23
- Resolves RHEL-140516: CVE-2025-61729

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>grafana-10.2.6-25.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 04:07:06 PM GMT</pubDate>
      <guid isPermaLink="false">558357bbb27441c47968add8354c8f3e49a397d38d19cc2f946c44d0d9e1d610</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/grafana-10.2.6-25.el10.aarch64.rpm</link>
      <description><p><strong>grafana</strong> - Metrics dashboard and graph editor&lt;br /&gt;</p>

<p>Grafana is an open source, feature rich metrics dashboard and graph editor for&lt;br /&gt;
Graphite, InfluxDB &amp; OpenTSDB.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-25
- Resolves RHEL-156596: CVE-2026-25679

Mon, 16 Feb 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-24
- Resolves RHEL-144949: CVE-2026-21721
- Resolves RHEL-145413: CVE-2025-61728
- Resolves RHEL-146073: CVE-2025-61726
- Resolves RHEL-149246: CVE-2025-68121

Mon, 26 Jan 2026 GMT - Sam Feifer &amp;lt;sfeifer@redhat.com&amp;gt; 10.2.6-23
- Resolves RHEL-140516: CVE-2025-61729

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>delve-1.26.1-1.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 12:21:03 PM GMT</pubDate>
      <guid isPermaLink="false">e079ad0e9ecfda314ba9746b0fdbeef7d790179ea515929c07bfc2e5c5b8d995</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/delve-1.26.1-1.el10.aarch64.rpm</link>
      <description><p><strong>delve</strong> - A debugger for the Go programming language&lt;br /&gt;</p>

<p>&lt;br /&gt;
Delve is a debugger for the Go programming language. The goal of the project&lt;br /&gt;
is to provide a simple, full featured debugging tool for Go. Delve should be&lt;br /&gt;
easy to invoke and easy to use. Chances are if you're using a debugger, things&lt;br /&gt;
aren't going your way. With that in mind, Delve should stay out of your way as&lt;br /&gt;
much as possible.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.26.1-1
- Update Delve to version 1.26.1

Wed, 18 Mar 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.2-2
- Rebuild with latest Go

Fri, 05 Sep 2025 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.25.2-1
- Update Delve to 1.25.2

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-verifier-7.14.1-3.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">cf049ed7735a9e6b83e9fad6eb3477050ef815be46535cf0b601f77d286cbb31</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/keylime-verifier-7.14.1-3.el10.aarch64.rpm</link>
      <description><p><strong>keylime-verifier</strong> - The Python Keylime Verifier component&lt;br /&gt;</p>

<p>The Keylime Verifier continuously verifies the integrity state&lt;br /&gt;
of the machine that the agent is running on.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-tools-7.14.1-3.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">913a89790ae4e4d737b57a4f6477c2bced4579755fb155604eea5b14c413b292</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/keylime-tools-7.14.1-3.el10.aarch64.rpm</link>
      <description><p><strong>keylime-tools</strong> - Keylime tools&lt;br /&gt;</p>

<p>The keylime tools package includes miscelaneous tools.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-tenant-7.14.1-3.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">8755dd034c2ae33b6447c086ed68c7badc5a031a0bc303c8731fa1fd62710dd7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/keylime-tenant-7.14.1-3.el10.aarch64.rpm</link>
      <description><p><strong>keylime-tenant</strong> - The Python Keylime Tenant&lt;br /&gt;</p>

<p>The Keylime Tenant can be used to provision a Keylime Agent.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-selinux-7.14.1-3.el10.noarch</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">4aa908169b52afadc9067729d6591942ba3446dba766a7a868156a07c99d010e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/keylime-selinux-7.14.1-3.el10.noarch.rpm</link>
      <description><p><strong>keylime-selinux</strong> - keylime SELinux policy&lt;br /&gt;</p>

<p>Custom SELinux policy module</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-registrar-7.14.1-3.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">1a772de6b97cab1ce79c7983ded442681fad1c0a411c1665da2dac62c4a02a52</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/keylime-registrar-7.14.1-3.el10.aarch64.rpm</link>
      <description><p><strong>keylime-registrar</strong> - The Keylime Registrar component&lt;br /&gt;</p>

<p>The Keylime Registrar is a database of all agents registered&lt;br /&gt;
with Keylime and hosts the public keys of the TPM vendors.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-base-7.14.1-3.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">86c26d6e181114db6a184aec7bcf13400645f56ee0c401a16b5dd1a5b92c5c99</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/keylime-base-7.14.1-3.el10.aarch64.rpm</link>
      <description><p><strong>keylime-base</strong> - The base package contains the default configuration&lt;br /&gt;</p>

<p>The base package contains the Keylime default configuration</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>keylime-7.14.1-3.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">8d85e61f5a7c177f4dcd5b337e7b7be5ffc4a9e363fff60d7294c63007bc2f21</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/keylime-7.14.1-3.el10.aarch64.rpm</link>
      <description><p><strong>keylime</strong> - Open source TPM software for Bootstrapping and Maintaining Trust&lt;br /&gt;</p>

<p>Keylime is a TPM based highly scalable remote boot attestation&lt;br /&gt;
and runtime integrity measurement solution.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-keylime-7.14.1-3.el10.aarch64</title>
      <pubDate>Wed, 01 Apr 2026 09:21:31 AM GMT</pubDate>
      <guid isPermaLink="false">1bcd48bab9a78e0d1624c21e52093653b697d03752f5bb402fe83ff3e0b83342</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3-keylime-7.14.1-3.el10.aarch64.rpm</link>
      <description><p><strong>python3-keylime</strong> - The Python Keylime module&lt;br /&gt;</p>

<p>The python3-keylime module implements the functionality used&lt;br /&gt;
by Keylime components.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 01 Apr 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-3
- Remove unbounded functools.cache from latest_attestation

Mon, 23 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 7.14.1-2
- Add patches to fix DB connection leaks

Fri, 13 Feb 2026 GMT - Sergio Correia &amp;lt;scorreia@redhat.com&amp;gt; - 7.14.1-1
- Updating for Keylime release v7.14.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rv-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">44103ae304b95fa8d975d0a2bb1b5a668932937ea5a94c15cbebda4dbaa42690</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/rv-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>rv</strong> - RV: Runtime Verification&lt;br /&gt;</p>

<p>Runtime Verification (RV) is a lightweight (yet rigorous) method that&lt;br /&gt;
complements classical exhaustive verification techniques (such as model&lt;br /&gt;
checking and theorem proving) with a more practical approach for&lt;br /&gt;
complex systems.&lt;br /&gt;
The rv tool is the interface for a collection of monitors that aim&lt;br /&gt;
analysing the logical and timing behavior of Linux.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-headers-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">9343a2a2a101ec7c9f79ccec8a9fdbcc9ec432bae4071731f134489df46b6289</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-headers-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-headers</strong> - Header files for the Linux kernel for use by glibc&lt;br /&gt;</p>

<p>Kernel-headers includes the C header files that specify the interface&lt;br /&gt;
between the Linux kernel and userspace libraries and programs.  The&lt;br /&gt;
header files define structures and constants that are needed for&lt;br /&gt;
building most standard programs and are also needed for rebuilding the&lt;br /&gt;
glibc package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-devel-matched-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">74697715810b206ea207655c44723b388b7a603278f136533290490db32bcbd3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-devel-matched-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-devel-matched</strong> - Meta package to install matching core and devel packages for a given kernel&lt;br /&gt;</p>

<p>This meta package is used to install matching core and devel packages for a given kernel.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-devel-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">46f2c37fe3f0deef67cc5ce97b0a53a4abbf8a3fa325f6b492bfb55826bc0089</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-devel-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-devel</strong> - Development package for building kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides kernel headers and makefiles sufficient to build modules&lt;br /&gt;
against the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-devel-matched-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">38669fe9040519d465a4de8caa110f6567637610c9d646e03934bdd3b778fab5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-debug-devel-matched-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-debug-devel-matched</strong> - Meta package to install matching core and devel packages for a given kernel&lt;br /&gt;</p>

<p>This meta package is used to install matching core and devel packages for a given kernel.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-debug-devel-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">3aa0f6ef7fcaf81570c1f6f2ef39aecf4dcaf755325704843518ca911d01a593</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-debug-devel-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-debug-devel</strong> - Development package for building kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides kernel headers and makefiles sufficient to build modules&lt;br /&gt;
against the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-64k-devel-matched-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">6d5c8ccb313e21048adb3888c8e26b4f0863be116dce3f96755f94331f23c6da</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-64k-devel-matched-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-64k-devel-matched</strong> - Meta package to install matching core and devel packages for a given kernel&lt;br /&gt;</p>

<p>This meta package is used to install matching core and devel packages for a given kernel.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-64k-devel-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">df279cfd144c840226a316cd1ccbe3f8666f4d4c0c30b80b1406ef69f107baae</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-64k-devel-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-64k-devel</strong> - Development package for building kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides kernel headers and makefiles sufficient to build modules&lt;br /&gt;
against the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-64k-debug-devel-matched-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">8af53abd18db3ce08bd8d001fa5f61410df5a464b0ede8fcc7d1df984780dd10</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-64k-debug-devel-matched-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-64k-debug-devel-matched</strong> - Meta package to install matching core and devel packages for a given kernel&lt;br /&gt;</p>

<p>This meta package is used to install matching core and devel packages for a given kernel.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-64k-debug-devel-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">fcb206e67a387d2337a35ba91927afd7688e0a8a2ff3e763c224ce1bb65037c7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-64k-debug-devel-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>kernel-64k-debug-devel</strong> - Development package for building kernel modules to match the kernel&lt;br /&gt;</p>

<p>This package provides kernel headers and makefiles sufficient to build modules&lt;br /&gt;
against the kernel package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-perf-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">f19f5b6ea8b7e17e8cd67874936061b6fef5f6fa8cbf7d0686139353380fa0ad</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3-perf-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>python3-perf</strong> - Python bindings for apps which will manipulate perf events&lt;br /&gt;</p>

<p>The python3-perf package contains a module that permits applications&lt;br /&gt;
written in the Python programming language to use the interface&lt;br /&gt;
to manipulate perf events.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>perf-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">51468669b3823b0d8c25ffa1f594f98dda3a44b2f95ed39ccb062d3986a7898a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/perf-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>perf</strong> - Performance monitoring for the Linux kernel&lt;br /&gt;</p>

<p>This package contains the perf tool, which enables performance monitoring&lt;br /&gt;
of the Linux kernel.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rtla-6.12.0-218.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:39:14 AM GMT</pubDate>
      <guid isPermaLink="false">6a7c23d2911c1a730a876efbb56ccd820fb7dc00afe328c448bfee0c74b0eb23</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/rtla-6.12.0-218.el10.aarch64.rpm</link>
      <description><p><strong>rtla</strong> - Real-Time Linux Analysis tools&lt;br /&gt;</p>

<p>The rtla meta-tool includes a set of commands that aims to analyze&lt;br /&gt;
the real-time properties of Linux. Instead of testing Linux as a black box,&lt;br /&gt;
rtla leverages kernel tracing capabilities to provide precise information&lt;br /&gt;
about the properties and root causes of unexpected results.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>kernel-doc-6.12.0-218.el10.noarch</title>
      <pubDate>Tue, 31 Mar 2026 11:37:25 AM GMT</pubDate>
      <guid isPermaLink="false">f0af292f84f352ba16d0f4ed33c45dbd1ee2aa1482733bf0f5c15b46a522723a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/kernel-doc-6.12.0-218.el10.noarch.rpm</link>
      <description><p><strong>kernel-doc</strong> - Various documentation bits found in the kernel source&lt;br /&gt;</p>

<p>This package contains documentation files from the kernel&lt;br /&gt;
source. Various bits of information about the Linux kernel and the&lt;br /&gt;
device drivers shipped with it are documented in these files.&lt;br /&gt;
&lt;br /&gt;
You'll want to install this package if you need a reference to the&lt;br /&gt;
options that can be passed to Linux kernel modules at load time.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - CKI KWF Bot &amp;lt;cki-ci-bot+kwf-gitlab-com@redhat.com&amp;gt; [6.12.0-218.el10]
- x86/fpu: Ensure shadow stack is active before "getting" registers (Oleg Nesterov) [RHEL-152371]
- PCI: Validate window resource type in pbus_select_window_for_type() (Myron Stowe) [RHEL-139968]
- PCI: Don't claim disabled bridge windows (Myron Stowe) [RHEL-139968]
- PCI: Remove old_size limit from bridge window sizing (Myron Stowe) [RHEL-139968]
- PCI: Stop over-estimating bridge window size (Myron Stowe) [RHEL-139968]
- PCI: Rewrite bridge window head alignment function (Myron Stowe) [RHEL-139968]
- PCI: Fix bridge window alignment with optional resources (Myron Stowe) [RHEL-139968]
- sparc/PCI: Correct 64-bit non-pref -&amp;gt; pref BAR resources (Myron Stowe) [RHEL-139968]
- PCI: meson: Fix parsing the DBI register region (Myron Stowe) [RHEL-139968]
- PCI: Do not size non-existing prefetchable window (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Use pcibios_align_resource() to block io range (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix PCI southbridge legacy resource reservations (Myron Stowe) [RHEL-139968]
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Myron Stowe) [RHEL-139968]
- PCI: dwc: Use custom pci_ops for root bus DBI vs ECAM config access (Myron Stowe) [RHEL-139968]
- PCI: cadence: Search for MSI Capability with correct ID (Myron Stowe) [RHEL-139968]
- PCI: Fix regression in pci_bus_distribute_available_resources() (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Expose PCI device serial number (Myron Stowe) [RHEL-139968]
- PCI: xilinx-nwl: Fix ECAM programming (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix duplicate PLL disable in pex_ep_event_pex_rst_assert() (Myron Stowe) [RHEL-139968]
- PCI: tegra: Fix devm_kcalloc() argument order for port-&amp;gt;phys allocation (Myron Stowe) [RHEL-139968]
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-host: Drop PMSR spinlock (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix inverted break condition in PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Assure reset occurs before DBI access (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion (Myron Stowe) [RHEL-139968]
- PCI: rcar-gen4: Fix PHY initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support ECAM mechanism by enabling iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Prepare the driver for enabling ECAM mechanism using iATU 'CFG Shift Feature' (Myron Stowe) [RHEL-139968]
- PCI: dwc: Add support for ELBI resource mapping (Myron Stowe) [RHEL-139968]
- PCI: qcom: Move host bridge 'phy' and 'reset' pointers to struct qcom_pcie_port (Myron Stowe) [RHEL-139968]
- PCI: qcom: Fix macro typo for CURSOR (Myron Stowe) [RHEL-139968]
- PCI: qcom: Add equalization settings for 8.0 GT/s and 32.0 GT/s (Myron Stowe) [RHEL-139968]
- PCI: plda: Remove dev_err_probe() when the errno is -ENOMEM (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Add support for MediaTek MT8196 SoC (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: mediatek-gen3: Add support for MT6991/MT8196 (Myron Stowe) [RHEL-139968]
- PCI: mediatek-gen3: Implement sys clock ready time setting (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Myron Stowe) [RHEL-139968]
- PCI: keystone: Use kcalloc() instead of kzalloc() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix incorrect error message in probe() (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix programming sequence of "strap" settings (Myron Stowe) [RHEL-139968]
- PCI: j721e: Fix module autoloading (Myron Stowe) [RHEL-139968]
- PCI: imx6: Enable the Vaux supply if available (Myron Stowe) [RHEL-139968]
- PCI: qcom-ep: Remove redundant edma.nr_irqs initialization (Myron Stowe) [RHEL-139968]
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify() (Myron Stowe) [RHEL-139968]
- PCI: dwc: Support 16-lane operation (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Handle errors in BPMP response (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Set pci_epc_features::msi_capable to true (Myron Stowe) [RHEL-139968]
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (Myron Stowe) [RHEL-139968]
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs (Myron Stowe) [RHEL-139968]
- selftests: pci_endpoint: Skip IRQ test if IRQ is out of range. (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Cleanup extra 0 initialization (Myron Stowe) [RHEL-139968]
- misc: pci_endpoint_test: Skip IRQ tests if irq is out of range (Myron Stowe) [RHEL-139968]
- PCI: endpoint: Drop superfluous pci_epc_features initialization (Myron Stowe) [RHEL-139968]
- Documentation: PCI: endpoint: Document BAR assignment (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-x1e80100: Set clocks minItems for the fifth Glymur PCIe Controller (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: ti,am65: Extend for use with PVU (Myron Stowe) [RHEL-139968]
- dt-bindings: PCI: qcom,pcie-sm8550: Add SM8750 compatible (Myron Stowe) [RHEL-139968]
- PCI: cadence: Use cdns_pcie_find_*capability() to avoid hardcoding offsets (Myron Stowe) [RHEL-139968]
- PCI: cadence: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: dwc: ep: Implement capability search using PCI core APIs (Myron Stowe) [RHEL-139968]
- PCI: Refactor extended capability search into PCI_FIND_NEXT_EXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Refactor capability search into PCI_FIND_NEXT_CAP() (Myron Stowe) [RHEL-139968]
- PCI: Clean up __pci_find_next_cap_ttl() readability (Myron Stowe) [RHEL-139968]
- PCI: switchtec: Replace manual locks with guard (Myron Stowe) [RHEL-139968]
- PCI: Add lockdep assertion in pci_stop_and_remove_bus_device() (Myron Stowe) [RHEL-139968]
- PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (Myron Stowe) [RHEL-139968]
- PCI: Don't print stale information about resource (Myron Stowe) [RHEL-139968]
- PCI: Alter misleading recursion to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Pass bridge window to pci_bus_release_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add pci_setup_one_bridge_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor remove_dev_resources() to use pbus_select_window() (Myron Stowe) [RHEL-139968]
- PCI: Refactor distributing available memory to use loops (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during mem window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() in space available checker (Myron Stowe) [RHEL-139968]
- PCI: Rename resource variable from r to res (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window_for_type() during IO window sizing (Myron Stowe) [RHEL-139968]
- PCI: Use pbus_select_window() during BAR resize (Myron Stowe) [RHEL-139968]
- PCI: Warn if bridge window cannot be released when resizing BAR (Myron Stowe) [RHEL-139968]
- PCI: Fix finding bridge window in pci_reassign_bridge_resources() (Myron Stowe) [RHEL-139968]
- PCI: Add bridge window selection functions (Myron Stowe) [RHEL-139968]
- PCI: Add defines for bridge window indexing (Myron Stowe) [RHEL-139968]
- PCI: Preserve bridge window resource type flags (Myron Stowe) [RHEL-139968]
- PCI: Enable bridge even if bridge window fails to assign (Myron Stowe) [RHEL-139968]
- PCI: Use pci_release_resource() instead of release_resource() (Myron Stowe) [RHEL-139968]
- PCI: Disable non-claimed bridge window (Myron Stowe) [RHEL-139968]
- PCI: Always claim bridge window before its setup (Myron Stowe) [RHEL-139968]
- PCI: Refactor find_bus_resource_of_type() logic checks (Myron Stowe) [RHEL-139968]
- PCI: Move find_bus_resource_of_type() earlier (Myron Stowe) [RHEL-139968]
- MIPS: PCI: Use pci_enable_resources() (Myron Stowe) [RHEL-139968]
- sparc/PCI: Remove pcibios_enable_device() as they do nothing extra (Myron Stowe) [RHEL-139968]
- m68k/PCI: Use pci_enable_resources() in pcibios_enable_device() (Myron Stowe) [RHEL-139968]
- PCI: Fix failure detection during resource resize (Myron Stowe) [RHEL-139968]
- PCI: Fix pdev_resources_assignable() disparity (Myron Stowe) [RHEL-139968]
- PCI: Ensure relaxed tail alignment does not increase min_align (Myron Stowe) [RHEL-139968]
- PCI/sysfs: Ensure devices are powered for config reads (Myron Stowe) [RHEL-139968]
- PCI/PM: Skip resuming to D0 if device is disconnected (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Reduce scope of pci_has_p2pmem() (Myron Stowe) [RHEL-139968]
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Myron Stowe) [RHEL-139968]
- PCI: of: Update parent unit address generation in of_pci_prop_intr_map() (Myron Stowe) [RHEL-139968]
- PCI: Disable MSI on RDC PCI to PCIe bridges (Myron Stowe) [RHEL-139968]
- PCI: hotplug: Clean up spaces in messages (Myron Stowe) [RHEL-139968]
- PCI: Add Extended Tag + MRRS quirk for Xeon 6 (Myron Stowe) [RHEL-139968]
- PCI: Clean up pci_scan_child_bus_extend() loop (Myron Stowe) [RHEL-139968]
- PCI: Clean up early_dump_pci_device() (Myron Stowe) [RHEL-139968]
- PCI: Use header type defines in pci_setup_device() (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Fix typos (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Tidy error recovery doc's PCIe nomenclature (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Amend error recovery doc with DPC/AER specifics (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync error recovery doc with code (Myron Stowe) [RHEL-139968]
- Documentation: PCI: Sync AER doc with code (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix NULL pointer access by aer_info (Myron Stowe) [RHEL-139968]
- PCI/AER: Print TLP Log for errors introduced since PCIe r1.1 (Myron Stowe) [RHEL-139968]
- PCI/AER: Support errors introduced by PCIe r6.0 (Myron Stowe) [RHEL-139968]
- powerpc/eeh: Use result of error_detected() in uevent (Myron Stowe) [RHEL-139968]
- s390/pci: Use pci_uevent_ers() in PCI recovery (Myron Stowe) [RHEL-139968]
- PCI/AER: Fix missing uevent on recovery when a reset is requested (Myron Stowe) [RHEL-139968]
- PCI/ERR: Update device error_state already after reset (Myron Stowe) [RHEL-139968]
- PCI/ERR: Notify drivers on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/ERR: Fix uevent on failure to recover (Myron Stowe) [RHEL-139968]
- PCI/AER: Allow drivers to opt in to Bus Reset on Non-Fatal Errors (Myron Stowe) [RHEL-139968]
- MIPS: pci-legacy: Override pci_address_to_pio (Myron Stowe) [RHEL-139968]
- PCI: exynos: Switch to devm_clk_bulk_get_all_enabled() (Myron Stowe) [RHEL-139968]

Mon, 30 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-217.el10]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154397]
- smb/client: remove unused SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() (Paulo Alcantara) [RHEL-154397]
- smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() (Paulo Alcantara) [RHEL-154397]
- ACPI: AGDI: Add interrupt signaling mode support (Charles Mirabile) [RHEL-111893]
- add xxd to as BuildRequire for bpf selftests (Ines Qian) [RHEL-157473]
- selftests/net: test ipip packets in gro.sh (Antoine Tenart) [RHEL-123213]
- net: gro: remove unnecessary df checks (Antoine Tenart) [RHEL-123213]
- net: gso: restore ids of outer ip headers correctly (Antoine Tenart) [RHEL-123213]
- net: gro: only merge packets with incrementing or fixed outer ids (Antoine Tenart) [RHEL-123213]
- net: gro: remove is_ipv6 from napi_gro_cb (Antoine Tenart) [RHEL-123213]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161531]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161531]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-145154]
- allow finish_no_open(file, ERR_PTR(-E...)) (Roberto Bergantinos Corpas) [RHEL-155441]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156881] {CVE-2026-23243}
- iavf: fix incorrect reset handling in callbacks (Petr Oros) [RHEL-142546]
- IB/IPoIB: Add support for hwtstamp get/set ndos (CKI Backport Bot) [RHEL-154278]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148654] {CVE-2026-23040}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145936]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145936]

Thu, 26 Mar 2026 GMT - Alexandra Hájková &amp;lt;ahajkova@redhat.com&amp;gt; [6.12.0-216.el10]
- redhat/configs: add CONFIG_DEBUG_NET_SMALL_RTNL (Antoine Tenart) [RHEL-150155]
- net/sched: act_api: avoid dereferencing ERR_PTR in tcf_idrinfo_destroy (Antoine Tenart) [RHEL-150155]
- mpls: Drop RTNL for RTM_NEWROUTE, RTM_DELROUTE, and RTM_GETROUTE. (Antoine Tenart) [RHEL-150155]
- mpls: Protect net-&amp;gt;mpls.platform_label with a per-netns mutex. (Antoine Tenart) [RHEL-150155]
- mpls: Convert RTM_GETNETCONF to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Convert mpls_dump_routes() to RCU. (Antoine Tenart) [RHEL-150155]
- mpls: Use mpls_route_input() where appropriate. (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_route_input(). (Antoine Tenart) [RHEL-150155]
- mpls: Pass net to mpls_dev_get(). (Antoine Tenart) [RHEL-150155]
- mpls: Add mpls_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). (Antoine Tenart) [RHEL-150155]
- ipv6: Add in6_dev_rcu(). (Antoine Tenart) [RHEL-150155]
- mpls: Unify return paths in mpls_dev_notify(). (Antoine Tenart) [RHEL-150155]
- mpls: Hold dev refcnt for mpls_nh. (Antoine Tenart) [RHEL-150155]
- mpls: Return early in mpls_label_ok(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert rwlock of struct neigh_table to spinlock. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_SETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGHTBL to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to neigh_parms fields. (Antoine Tenart) [RHEL-150155]
- neighbour: Use RCU list helpers for neigh_parms.list writers. (Antoine Tenart) [RHEL-150155]
- sched_ext: Use rhashtable_lookup() instead of rhashtable_lookup_fast() (Antoine Tenart) [RHEL-150155]
- rhashtable: Use rcu_dereference_all and rcu_dereference_all_check (Antoine Tenart) [RHEL-150155]
- net_sched: add back BH safety to tcf_lock (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbmod: use RCU in tcf_skbmod_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_tunnel_key: use RCU in tunnel_key_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_vlan: use RCU in tcf_vlan_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: remove BH blocking in eight actions (Antoine Tenart) [RHEL-150155]
- ipv6: add a retry logic in net6_rt_notify() (Antoine Tenart) [RHEL-150155]
- net: s/dev_close_many/netif_close_many/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_flags/netif_get_flags/ (Antoine Tenart) [RHEL-150155]
- net: s/__dev_set_mtu/__netif_set_mtu/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_pre_changeaddr_notify/netif_pre_changeaddr_notify/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_mac_address/netif_get_mac_address/ (Antoine Tenart) [RHEL-150155]
- net: s/dev_get_port_parent_id/netif_get_port_parent_id/ (Antoine Tenart) [RHEL-150155]
- neighbour: Update pneigh_entry in pneigh_create(). (Antoine Tenart) [RHEL-150155]
- neighbour: Protect tbl-&amp;gt;phash_buckets[] with a dedicated mutex. (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Remove __pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rcu_dereference() in pneigh_get_{first,next}(). (Antoine Tenart) [RHEL-150155]
- neighbour: Drop read_lock_bh(&amp;amp;tbl-&amp;gt;lock) in pneigh_dump_table(). (Antoine Tenart) [RHEL-150155]
- neighbour: Convert RTM_GETNEIGH to RCU. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate access to struct pneigh_entry.{flags,protocol}. (Antoine Tenart) [RHEL-150155]
- neighbour: Free pneigh_entry after RCU grace period. (Antoine Tenart) [RHEL-150155]
- neighbour: Annotate neigh_table.phash_buckets and pneigh_entry.next with __rcu. (Antoine Tenart) [RHEL-150155]
- neighbour: Split pneigh_lookup(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move neigh_find_table() to neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Allocate skb in neigh_get(). (Antoine Tenart) [RHEL-150155]
- neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). (Antoine Tenart) [RHEL-150155]
- neighbour: Make neigh_valid_get_req() return ndmsg. (Antoine Tenart) [RHEL-150155]
- net_sched: act_skbedit: use RCU in tcf_skbedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_police: use RCU in tcf_police_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_pedit: use RCU in tcf_pedit_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_nat: use RCU in tcf_nat_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_mpls: use RCU in tcf_mpls_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use RCU in tcf_ctinfo_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_ctinfo: use atomic64_t for three counters (Antoine Tenart) [RHEL-150155]
- net_sched: act_ct: use RCU in tcf_ct_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_csum: use RCU in tcf_csum_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act_connmark: use RCU in tcf_connmark_dump() (Antoine Tenart) [RHEL-150155]
- net_sched: act: annotate data-races in tcf_lastuse_update() and tcf_tm_dump() (Antoine Tenart) [RHEL-150155]
- net/sched: acp_api: no longer acquire RTNL in tc_action_net_exit() (Antoine Tenart) [RHEL-150155]
- net: remove RTNL use for /proc/sys/net/core/rps_default_mask (Antoine Tenart) [RHEL-150155]
- net/sched: fix use-after-free in taprio_dev_notifier (Antoine Tenart) [RHEL-150155]
- ipv6: Move fib6_config_validate() to ip6_route_add(). (Antoine Tenart) [RHEL-150155]
- net: annotate data-races around cleanup_net_task (Antoine Tenart) [RHEL-150155]
- net: let lockdep compare instance locks (Antoine Tenart) [RHEL-150155]
- ipv6: Revert two per-cpu var allocation for RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Pass gfp_flags down to ip6_route_info_create_nh(). (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: Factorise ip6_route_multipath_add()." (Antoine Tenart) [RHEL-150155]
- Revert "ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup" (Antoine Tenart) [RHEL-150155]
- ipv6: Narrow down RCU critical section in inet6_rtm_newroute(). (Antoine Tenart) [RHEL-150155]
- inet: Remove rtnl_is_held arg of lwtunnel_valid_encap_type(_attr)?(). (Antoine Tenart) [RHEL-150155]
- ipv6: Remove rcu_read_lock() in fib6_get_table(). (Antoine Tenart) [RHEL-150155]
- ipv6: Restore fib6_config validation for SIOCADDRT. (Antoine Tenart) [RHEL-150155]
- ipv6: sr: switch to GFP_ATOMIC flag to allocate memory during seg6local LWT setup (Antoine Tenart) [RHEL-150155]
- net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCADDRT and RTM_NEWROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Protect nh-&amp;gt;f6i_list with spinlock and flag. (Antoine Tenart) [RHEL-150155]
- ipv6: Defer fib6_purge_rt() in fib6_add_rt2node() to fib6_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Protect fib6_link_table() with spinlock. (Antoine Tenart) [RHEL-150155]
- ipv6: Factorise ip6_route_multipath_add(). (Antoine Tenart) [RHEL-150155]
- ipv6: Rename rt6_nh.next to rt6_nh.list. (Antoine Tenart) [RHEL-150155]
- ipv6: Don't pass net to ip6_route_info_append(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate nhc_pcpu_rth_output in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Preallocate rt-&amp;gt;fib6_nh-&amp;gt;rt6i_pcpu in ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Split ip6_route_info_create(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move nexthop_find_by_id() after fib6_info_alloc(). (Antoine Tenart) [RHEL-150155]
- ipv6: Check GATEWAY in rtm_to_fib6_multipath_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Move some validation from ip6_route_info_create() to rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- ipv6: Get rid of RTNL for SIOCDELRT and RTM_DELROUTE. (Antoine Tenart) [RHEL-150155]
- ipv6: Validate RTA_GATEWAY of RTA_MULTIPATH in rtm_to_fib6_config(). (Antoine Tenart) [RHEL-150155]
- net: Remove -&amp;gt;exit_batch_rtnl(). (Antoine Tenart) [RHEL-150155]
- geneve: Convert geneve_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bareudp: Convert bareudp_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bonding: Convert bond_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- bridge: Convert br_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- xfrm: Convert xfrmi_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert tunnel devices' -&amp;gt;exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- ipv4: ip_tunnel: Convert ip_tunnel_delete_nets() callers to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- vxlan: Convert vxlan_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert nexthop_net_exit_batch_rtnl() to -&amp;gt;exit_rtnl(). (Antoine Tenart) [RHEL-150155]
- net: Add -&amp;gt;exit_rtnl() hook to struct pernet_operations. (Antoine Tenart) [RHEL-150155]
- net: Add ops_undo_single for module load/unload. (Antoine Tenart) [RHEL-150155]
- net: Factorise setup_net() and cleanup_net(). (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_DELNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Convert RTM_NEWNEXTHOP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- nexthop: Remove redundant group len check in nexthop_create_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Check NLM_F_REPLACE and NHA_ID in rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move NHA_OIF validation to rtm_to_nh_config_rtnl(). (Antoine Tenart) [RHEL-150155]
- nexthop: Split nh_check_attr_group(). (Antoine Tenart) [RHEL-150155]
- nexthop: Move nlmsg_parse() in rtm_to_nh_config() to rtm_new_nexthop(). (Antoine Tenart) [RHEL-150155]
- net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Antoine Tenart) [RHEL-150155]
- inet: fix lwtunnel_valid_encap_type() lock imbalance (Antoine Tenart) [RHEL-150155]
- net: plumb extack in __dev_change_net_namespace() (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Convert RTM_NEWROUTE and RTM_DELROUTE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Hold rtnl_net_lock() for ip_fib_net_exit(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Namespacify fib_info hash tables. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Add fib_info_hash_grow(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_hash_size. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Remove fib_info_laddrhash pointer. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Make fib_info_hashfn() return struct hlist_head. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] during netns initialisation. (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Allocate fib_info_hash[] and fib_info_laddrhash[] by kvcalloc(). (Antoine Tenart) [RHEL-150155]
- ipv4: fib: Use cached net in fib_inetaddr_event(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_net_dev_lock() in register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net-sysfs: restore behavior for not running devices (Antoine Tenart) [RHEL-150155]
- dev: Use rtnl_net_dev_lock() in unregister_netdev(). (Antoine Tenart) [RHEL-150155]
- net: Fix dev_net(dev) race in unregister_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Add net_passive_inc() and net_passive_dec(). (Antoine Tenart) [RHEL-150155]
- arp: Convert SIOCDARP and SIOCSARP to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_DELRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Add error_free label in fib_delrule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Convert RTM_NEWRULE to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Factorise fib_newrule() and fib_delrule(). (Antoine Tenart) [RHEL-150155]
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Split fib_nl2rule(). (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Pass net to fib_nl2rule() instead of skb. (Antoine Tenart) [RHEL-150155]
- net: fib_rules: Don't check net in rule_exists() and rule_find(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix netns leak with rtnl_setlink() (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from queue attributes (Antoine Tenart) [RHEL-150155]
- net-sysfs: prevent uncleared queues from being re-added (Antoine Tenart) [RHEL-150155]
- net-sysfs: move queue attribute groups outside the default groups (Antoine Tenart) [RHEL-150155]
- net-sysfs: remove rtnl_trylock from device attributes (Antoine Tenart) [RHEL-150155]
- net: revert RTNL changes in unregister_netdevice_many_notify() (Antoine Tenart) [RHEL-150155]
- dev: Hold rtnl_net_lock() for dev_ifsioc(). (Antoine Tenart) [RHEL-150155]
- dev: Remove devnet_rename_sem. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_deladdr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_rtm_newaddr() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Move lifetime validation to inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Set cfg.ifa_flags before device lookup in inet6_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert inet6_ioctl() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_init() and addrconf_cleanup(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_dad_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Hold rtnl_net_lock() in addrconf_verify_work(). (Antoine Tenart) [RHEL-150155]
- ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv6: Add __in6_dev_get_rtnl_net(). (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 2) (Antoine Tenart) [RHEL-150155]
- net: reduce RTNL hold duration in unregister_netdevice_many_notify() (part 1) (Antoine Tenart) [RHEL-150155]
- net: no longer hold RTNL while calling flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: no longer assume RTNL is held in flush_all_backlogs() (Antoine Tenart) [RHEL-150155]
- net: expedite synchronize_net() for cleanup_net() (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_dev_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold rtnl_net_lock() in (un)?register_netdevice_notifier_net(). (Antoine Tenart) [RHEL-150155]
- net: Hold __rtnl_net_lock() in (un)?register_netdevice_notifier(). (Antoine Tenart) [RHEL-150155]
- dev: Hold per-netns RTNL in (un)?register_netdev(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add rtnl_net_lock_killable(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix error code in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Antoine Tenart) [RHEL-150155]
- rtnetlink: fix rtnl_dump_ifinfo() error path (Antoine Tenart) [RHEL-150155]
- rtnetlink: Register rtnl_dellink() and rtnl_setlink() with RTNL_FLAG_DOIT_PERNET_WIP. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Convert RTM_NEWLINK to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- netkit: Set IFLA_NETKIT_PEER_INFO to netkit_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add peer_type in struct rtnl_link_ops. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Introduce struct rtnl_nets and helpers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_register() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect link_ops by mutex. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove __rtnl_link_unregister(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix an error handling path in rtnl_newlink() (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fix kdoc of rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_ioctl() to per-netns RTNL except for SIOCSIFFLAGS. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert devinet_sysctl_forward() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define rtnl_net_trylock(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert check_lifetime() to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_DELADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns RTNL helpers in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Convert RTM_NEWADDR to per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: Don't allocate ifa for 0.0.0.0 in inet_rtm_newaddr(). (Antoine Tenart) [RHEL-150155]
- ipv4: Factorise RTM_NEWADDR validation to inet_validate_rtm(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Define RTNL_FLAG_DOIT_PERNET for per-netns RTNL doit(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Make per-netns RTNL dereference helpers to macro. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Remove rtnl_register() and rtnl_register_module(). (Antoine Tenart) [RHEL-150155]
- can: gw: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- dcb: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipmr: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv6: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- ipv4: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- net: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- neighbour: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Use rtnl_register_many(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Panic when __rtnl_register_many() fails for builtin callers. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_af_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Return int from rtnl_af_register(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in do_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_setlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Clean up rtnl_dellink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Fetch IFLA_LINK_NETNSID in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Call rtnl_link_get_net_capable() in rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Protect struct rtnl_link_ops with SRCU. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move ops-&amp;gt;validate to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move rtnl_link_ops_get() and retry to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Move simple validation from __rtnl_newlink() to rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Factorise do_setlink() path from __rtnl_newlink(). (Antoine Tenart) [RHEL-150155]
- rtnetlink: Allocate linkinfo[] as struct rtnl_newlink_tbs. (Antoine Tenart) [RHEL-150155]
- net: do not acquire rtnl in fib_seq_sum() (Antoine Tenart) [RHEL-150155]
- ipmr: use READ_ONCE() to read net-&amp;gt;ipv[46].ipmr_seq (Antoine Tenart) [RHEL-150155]
- ipv6: use READ_ONCE()/WRITE_ONCE() on fib6_table-&amp;gt;fib_seq (Antoine Tenart) [RHEL-150155]
- ipv4: use READ_ONCE()/WRITE_ONCE() on net-&amp;gt;ipv4.fib_seq (Antoine Tenart) [RHEL-150155]
- fib: rules: use READ_ONCE()/WRITE_ONCE() on ops-&amp;gt;fib_rules_seq (Antoine Tenart) [RHEL-150155]
- ipv4: Retire global IPv4 hash table inet_addr_lst. (Antoine Tenart) [RHEL-150155]
- ipv4: Namespacify IPv4 address GC. (Antoine Tenart) [RHEL-150155]
- ipv4: Use per-netns hash table in inet_lookup_ifaddr_rcu(). (Antoine Tenart) [RHEL-150155]
- ipv4: Link IPv4 address to per-netns hash table. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add assertion helpers for per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- rtnetlink: Add per-netns RTNL. (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_devhash[] (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_info_lock (Antoine Tenart) [RHEL-150155]
- ipv4: use rcu in ip_fib_check_default() (Antoine Tenart) [RHEL-150155]
- ipv4: remove fib_devindex_hashfn() (Antoine Tenart) [RHEL-150155]
- ipv4: avoid quadratic behavior in FIB insertion of common address (Antoine Tenart) [RHEL-150155]
- cgroup/dmem: avoid pool UAF (Waiman Long) [RHEL-113305] {CVE-2026-23195}
- cgroup/dmem: avoid rcu warning when unregister region (Waiman Long) [RHEL-113305]
- cgroup/dmem: fix NULL pointer dereference when setting max (Waiman Long) [RHEL-113305] {CVE-2026-23183}
- cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated (Waiman Long) [RHEL-113305]
- cgroup/misc: fix misc_res_type kernel-doc warning (Waiman Long) [RHEL-113305]
- selftests: cgroup: Use values_close_report in test_cpu (Waiman Long) [RHEL-113305]
- selftests: cgroup: add values_close_report helper (Waiman Long) [RHEL-113305]
- cgroup: Fix seqcount lockdep assertion in cgroup freezer (Waiman Long) [RHEL-113305]
- cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-113305]
- cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-113305]
- cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-113305]
- cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-113305]
- cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-113305]
- cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-113305]
- Documentation: cgroup-v2: Sync manual toctree (Waiman Long) [RHEL-113305]
- cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-113305]
- cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-113305]
- cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-113305]
- cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-113305]
- cpuset: refactor out validate_partition (Waiman Long) [RHEL-113305]
- cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-113305]
- cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-113305]
- cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-113305]
- cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-113305]
- cpuset: remove unused assignment to trialcs-&amp;gt;partition_root_state (Waiman Long) [RHEL-113305]
- cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-113305]
- cgroup: replace global percpu_rwsem with per threadgroup resem when writing to cgroup.procs (Waiman Long) [RHEL-113305]
- cgroup: relocate cgroup_attach_lock within cgroup_procs_write_start (Waiman Long) [RHEL-113305]
- cgroup: refactor the cgroup_attach_lock code to make it clearer (Waiman Long) [RHEL-113305]
- cgroup: WQ_PERCPU added to alloc_workqueue users (Waiman Long) [RHEL-113305]
- cgroup: replace use of system_wq with system_percpu_wq (Waiman Long) [RHEL-113305]
- cgroup: Remove unused local variables from cgroup_procs_write_finish() (Waiman Long) [RHEL-113305]
- cgroup: Remove unused cgroup_subsys::post_attach (Waiman Long) [RHEL-113305]
- cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-113305]
- cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-113305]
- cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-113305]
- selftests: cgroup: Make test_pids backwards compatible (Waiman Long) [RHEL-113305]
- cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-113305]
- cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-113305]
- cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-113305]
- cgroup: Fix 64-bit division in cgroup.stat.local (Waiman Long) [RHEL-113305]
- cgroup: selftests: Add tests for freezer time (Waiman Long) [RHEL-113305]
- cgroup: cgroup.stat.local time accounting (Waiman Long) [RHEL-113305]
- cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-113305]
- cgroup: Replace deprecated strcpy() with strscpy() (Waiman Long) [RHEL-113305]
- cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-113305] {CVE-2025-39953}
- docs: cgroup: fixed spelling mistakes in documentation (Waiman Long) [RHEL-113305]
- cgroup: avoid null de-ref in css_rstat_exit() (Waiman Long) [RHEL-113305]
- cgroup: Add compatibility option for content of /proc/cgroups (Waiman Long) [RHEL-113305]
- selftests/cgroup: fix cpu.max tests (Waiman Long) [RHEL-113305]
- cgroup: llist: avoid memory tears for llist_node (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix missing newline in test_zswap_writeback_one (Waiman Long) [RHEL-113305]
- selftests: cgroup: Allow longer timeout for kmem_dead_cgroups cleanup (Waiman Long) [RHEL-113305]
- cgroup: remove per-cpu per-subsystem locks (Waiman Long) [RHEL-113305]
- cgroup: make css_rstat_updated nmi safe (Waiman Long) [RHEL-113305]
- cgroup: support to enable nmi-safe css_rstat_updated (Waiman Long) [RHEL-113305]
- selftests: cgroup: Fix compilation on pre-cgroupns kernels (Waiman Long) [RHEL-113305]
- selftests: cgroup: Optionally set up v1 environment (Waiman Long) [RHEL-113305]
- selftests: cgroup: Add support for named v1 hierarchies in test_core (Waiman Long) [RHEL-113305]
- selftests: cgroup_util: Add helpers for testing named v1 hierarchies (Waiman Long) [RHEL-113305]
- Documentation: cgroup: add section explaining controller availability (Waiman Long) [RHEL-113305]
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Waiman Long) [RHEL-113305]
- cgroup,freezer: fix incomplete freezing when attaching tasks (Waiman Long) [RHEL-113305]
- llist: make llist_add_batch() a static inline (Waiman Long) [RHEL-113305]
- sched_ext: Convert cgroup BPF support to use cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- sched_ext: Introduce cgroup_lifetime_notifier (Waiman Long) [RHEL-113305]
- cgroup: Minor reorganization of cgroup_create() (Waiman Long) [RHEL-113305]
- cgroup, docs: cpu controller's interaction with various scheduling policies (Waiman Long) [RHEL-113305]
- cgroup, docs: convert space indentation to tab indentation (Waiman Long) [RHEL-113305]
- cgroup: avoid per-cpu allocation of size zero rstat cpu locks (Waiman Long) [RHEL-113305]
- cgroup, docs: be specific about bandwidth control of rt processes (Waiman Long) [RHEL-113305]
- cgroup: document the rstat per-cpu initialization (Waiman Long) [RHEL-113305]
- cgroup: helper for checking rstat participation of css (Waiman Long) [RHEL-113305]
- cgroup: use subsystem-specific rstat locks to avoid contention (Waiman Long) [RHEL-113305]
- cgroup: use separate rstat trees for each subsystem (Waiman Long) [RHEL-113305]
- cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-113305]
- cgroup: warn on rstat usage by early init subsystems (Waiman Long) [RHEL-113305]
- cgroup/rstat: Improve cgroup_rstat_push_children() documentation (Waiman Long) [RHEL-113305]
- cgroup: fix goto ordering in cgroup_init() (Waiman Long) [RHEL-113305]
- cgroup: fix pointer check in css_rstat_init() (Waiman Long) [RHEL-113305]
- cgroup: add helper for checking when css is cgroup::self (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (Waiman Long) [RHEL-113305]
- cgroup: Fix compilation issue due to cgroup_mutex not being exported (Waiman Long) [RHEL-113305]
- mm/memcg: Introduce css_stat_barrier() for freeing percpu stats (Waiman Long) [RHEL-113305]
- cgroup: change rstat function signatures from cgroup-based to css-based (Waiman Long) [RHEL-113305]
- cgroup: move rstat base stat objects into their own struct (Waiman Long) [RHEL-113305]
- cgroup: rstat: call cgroup_rstat_updated_list with cgroup_rstat_lock (Waiman Long) [RHEL-113305]
- cgroup: rstat: Cleanup flushing functions and locking (Waiman Long) [RHEL-113305]
- mm: Fix a build breakage in memcontrol-v1.c (Waiman Long) [RHEL-113305]
- blk-cgroup: Simplify policy files registration (Waiman Long) [RHEL-113305]
- cgroup: Update file naming comment (Waiman Long) [RHEL-113305]
- cgroup: Add deprecation message to legacy freezer controller (Waiman Long) [RHEL-113305]
- mm: Add transformation message for per-memcg swappiness (Waiman Long) [RHEL-113305]
- RFC cgroup/cpuset-v1: Add deprecation messages to sched_relax_domain_level (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_migrate (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to mem_exclusive and mem_hardwall (Waiman Long) [RHEL-113305]
- cgroup: Print message when /proc/cgroups is read on v2-only system (Waiman Long) [RHEL-113305]
- cgroup/blkio: Add deprecation messages to reset_stats (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to memory_spread_page and memory_spread_slab (Waiman Long) [RHEL-113305]
- cgroup/cpuset-v1: Add deprecation messages to sched_load_balance and memory_pressure_enabled (Waiman Long) [RHEL-113305]
- cgroup, docs: Be explicit about independence of RT_GROUP_SCHED and non-cpu controllers (Waiman Long) [RHEL-113305]
- cgroup/rstat: Fix forceidle time in cpu.stat (Waiman Long) [RHEL-113305]
- cgroup/misc: Remove unused misc_cg_res_total_usage (Waiman Long) [RHEL-113305]
- cgroup: update comment about dropping cgroup kn refs (Waiman Long) [RHEL-113305]
- firmware: arm_scmi: Fix NULL dereference on notify error path (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Enable ARM_SCMI_QUIRKS (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_CPU_EXT (Steve Dunnagan) [RHEL-120360]
- redhat/configs: Disable IMX_SCMI_LMM_EXT (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Skip RAW initialization on failure (Steve Dunnagan) [RHEL-120360]
- include: trace: Fix inflight count helper on failed initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for failed debug initialization (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Simplify printks with pOF format (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC board info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Support retrieving MISC protocol configuration info (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Discover MISC build info from the system manager (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add documentation for MISC_BOARD_INFO (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Prevent writes to string constants (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix function name typo in scmi_perf_proto_ops struct (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Mark VirtIO ready before registering scmi_virtio_driver (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_transport_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Constify struct scmi_voltage_proto_ops (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Avoid notifier registration for unsupported events (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add power management operations to SCMI bus (Steve Dunnagan) [RHEL-120360]
- include: trace: Add tracepoint support for inflight xfer count (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Track number of inflight SCMI transfers (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add support for debug counter decrement (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix up turbo frequencies selection (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Force perf level get fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: quirk: Fix CLOCK_DESCRIBE_RATES triplet (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add common framework to handle firmware quirks (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure that the message-id supports fastchannel (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 CPU Protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add i.MX95 LMM protocol (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Add LMM and CPU documentation (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add polling support to raw mode (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Exclude transport devices from bus matching (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Assign correct parent to arm-scmi platform device (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor error logging from SCMI device creation to single helper (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Refactor device matching logic to eliminate duplication (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Ensure scmi_devices are always matched by name as well (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Fix timeout checks on polling path (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Balance device refcount when destroying devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: use ioread64() instead of ioread64_hi_lo() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Emit modalias for SCMI devices (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add name and protocol id attributes (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Steve Dunnagan) [RHEL-120360]
- arm_scmi: don't mess with -&amp;gt;d_parent-&amp;gt;d_name (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add aliases to transport modules (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Add module aliases to i.MX vendor protocols (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support vendor protocol modules autoloading (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Allow transport properties for multiple instances (Steve Dunnagan) [RHEL-120360]
- firmware: Switch back to struct platform_driver::remove() (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Relocate atomic_threshold to scmi_desc (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Use max_msg and max_msg_size devicetree properties (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Calculate virtio PDU max size dynamically (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Account for SHMEM memory overhead (Steve Dunnagan) [RHEL-120360]
- firmware: arm_scmi: Support 'reg-io-width' property for shared memory (Steve Dunnagan) [RHEL-120360]
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-141540]
- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek) [RHEL-102523]
- i2c: i801: Add support for Intel Nova Lake-S (Steve Best) [RHEL-129782]
- i2c: i801: Fix the Intel Diamond Rapids features (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Diamond Rapids (Steve Best) [RHEL-129782]
- i2c: i801: Add support for Intel Wildcat Lake-U (Steve Best) [RHEL-129782]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157932]
- tracing: Add NULL pointer check to trigger_data_free() (Jerome Marchand) [RHEL-151695]
- tracing: Wake up poll waiters for hist files when removing an event (Jerome Marchand) [RHEL-151695]
- tracing: Fix checking of freed trace_event_file for hist files (Jerome Marchand) [RHEL-151695]
- fgraph: Do not call handlers direct when not using ftrace_ops (Jerome Marchand) [RHEL-151695]
- tracing: ring-buffer: Fix to check event length before using (Jerome Marchand) [RHEL-151695]
- function_graph: Restore direct mode when callbacks drop to one (Jerome Marchand) [RHEL-151695]
- tracing: Fix to set write permission to per-cpu buffer_size_kb (Jerome Marchand) [RHEL-151695]
- tracing: Fix false sharing in hwlat get_sample() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Switch kprobe_multi program stack unwind to hw_regs path (Jerome Marchand) [RHEL-151695]
- x86/fgraph: Fix return_to_handler regs.rsp value (Jerome Marchand) [RHEL-151695]
- tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros (Jerome Marchand) [RHEL-151695]
- tracing: Properly process error handling in event_hist_trigger_parse() (Jerome Marchand) [RHEL-151695]
- x86/fgraph,bpf: Fix stack ORC unwind from kprobe_multi return probe (Jerome Marchand) [RHEL-151695]
- tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 (Jerome Marchand) [RHEL-151695]
- tracing: Fix ftrace event field alignments (Jerome Marchand) [RHEL-151695]
- tracing: Fix crash on synthetic stacktrace field usage (Jerome Marchand) [RHEL-151695] {CVE-2026-23088}
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free (Jerome Marchand) [RHEL-151695]
- selftests/ftrace: traceonoff_triggers: strip off names (Jerome Marchand) [RHEL-151695]
- tracing: Do not register unsupported perf events (Jerome Marchand) [RHEL-151695] {CVE-2025-71125}
- tracing: Fix fixed array of synthetic event (Jerome Marchand) [RHEL-151695]
- tracing: Fix enabling of tracing on file release (Jerome Marchand) [RHEL-151695]
- fgraph: Check ftrace_pids_enabled on registration for early filtering (Jerome Marchand) [RHEL-151695]
- fgraph: Initialize ftrace_ops-&amp;gt;private for function graph ops (Jerome Marchand) [RHEL-151695]
- ftrace: Avoid redundant initialization in register_ftrace_direct (Jerome Marchand) [RHEL-151695]
- tracefs: fix a leak in eventfs_create_events_dir() (Jerome Marchand) [RHEL-151695]
- tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (Jerome Marchand) [RHEL-151695] {CVE-2025-68329}
- selftests/tracing: Run sample events to clear page cache events (Jerome Marchand) [RHEL-151695]
- tracing/tools: Fix incorrcet short option in usage text for --threads (Jerome Marchand) [RHEL-151695]
- tracing: Fix memory leaks in create_field_var() (Jerome Marchand) [RHEL-151695]
- ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (Jerome Marchand) [RHEL-151695] {CVE-2025-68186}
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Jerome Marchand) [RHEL-151695]
- ftrace: Fix BPF fexit with livepatch (Jerome Marchand) [RHEL-151695]
- tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Jerome Marchand) [RHEL-151695] {CVE-2025-40042}
- ftrace: Fix softlockup in ftrace_module_enable (Jerome Marchand) [RHEL-151695] {CVE-2025-68173}
- Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Jerome Marchand) [RHEL-151695]
- tracing: dynevent: Add a missing lockdown check on dynevent (Jerome Marchand) [RHEL-151695] {CVE-2025-40021}
- ftrace/samples: Fix function size computation (Jerome Marchand) [RHEL-151695]
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Jerome Marchand) [RHEL-151695]
- selftests/tracing: Fix false failure of subsystem event test (Jerome Marchand) [RHEL-151695]
- selftests: tracing: Use mutex_unlock for testing glob filter (Jerome Marchand) [RHEL-151695]
- tracing: PM: Remove unused clock events (Jerome Marchand) [RHEL-151695]
- ring-buffer: Removed unnecessary if() goto out where out is the next line (Jerome Marchand) [RHEL-151695]
- Documentation: trace: Refactor toctree (Jerome Marchand) [RHEL-151695]
- arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-151695]
- atomic64: Use arch_spin_locks instead of raw_spin_locks (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_fill_perf_regs() for perf event (Jerome Marchand) [RHEL-151695]
- tracing: Add ftrace_partial_regs() for converting ftrace_regs to pt_regs (Jerome Marchand) [RHEL-151695]
- fgraph: Replace fgraph_ret_regs with ftrace_regs (Jerome Marchand) [RHEL-151695]
- tracing/kprobes: Fix to free objects when failed to copy a symbol (Jerome Marchand) [RHEL-151695]
- ftrace: Rename ftrace_regs_return_value to ftrace_regs_get_return_value (Jerome Marchand) [RHEL-151695]
- ftrace: Use arch_ftrace_regs() for ftrace_regs_*() macros (Jerome Marchand) [RHEL-151695]
- ftrace: Consolidate ftrace_regs accessor functions for archs using pt_regs (Jerome Marchand) [RHEL-151695]
- ftrace: Make ftrace_regs abstract from direct use (Jerome Marchand) [RHEL-151695]
- docs: fix WARNING document not included in any toctree (Jerome Marchand) [RHEL-151695]
- tracing: Add a comment about ftrace_regs definition (Jerome Marchand) [RHEL-151695]
- net: openvswitch: Avoid releasing netdev before teardown completes (Toke Høiland-Jørgensen) [RHEL-155383]
- ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() (Ondrej Mosnacek) [RHEL-145590]
- ipc: don't audit capability check in ipc_permissions() (Ondrej Mosnacek) [RHEL-145590]
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150879] {CVE-2026-23191}
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ming Lei) [RHEL-153616]
- md/raid0: convert raid0_make_request() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/md-linear: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid5: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: convert read/write to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid10: add a new r10bio flag R10BIO_Returned (Ming Lei) [RHEL-122816]
- md/raid1: convert to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- md/raid0: convert raid0_handle_discard() to use bio_submit_split_bioset() (Ming Lei) [RHEL-122816]
- nvme: fix admin queue leak on controller reset (Ming Lei) [RHEL-143907]
- block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-154184]
- block: fix race between set_blocksize and read paths (Ming Lei) [RHEL-153616]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150117] {CVE-2026-23156}
- powerpc, perf: Check that current-&amp;gt;mm is alive before getting user callchain (Michael Petlan) [RHEL-145265]
- accel/qaic: enable drivers/accel/qaic configuration in RHEL. (John Wiele) [RHEL-149722]
- accel/qaic: Merge from upstream v6.18..v6.19 (John Wiele) [RHEL-149722]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155461]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155461]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155461]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155461]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155461]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155461]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150249] {CVE-2026-23210}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150408] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150408]
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150482] {CVE-2026-23144}
- arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Charles Mirabile) [RHEL-143323]
- perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Charles Mirabile) [RHEL-143323]
- mshv: handle gpa intercepts for arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: add definitions for arm64 gpa intercepts (Paolo Bonzini) [RHEL-146632]
- mshv: Add __user attribute to argument passed to access_ok() (Paolo Bonzini) [RHEL-146632]
- mshv: Store the result of vfs_poll in a variable of type __poll_t (Paolo Bonzini) [RHEL-146632]
- mshv: Align huge page stride with guest mapping (Paolo Bonzini) [RHEL-146632]
- mshv: release mutex on region invalidation failure (Paolo Bonzini) [RHEL-146632]
- mshv: hide x86-specific functions on arm64 (Paolo Bonzini) [RHEL-146632]
- mshv: Initialize local variables early upon region invalidation (Paolo Bonzini) [RHEL-146632]
- mshv: Use PMD_ORDER instead of HPAGE_PMD_ORDER when processing regions (Paolo Bonzini) [RHEL-146632]
- mshv: Cleanly shutdown root partition with MSHV (Paolo Bonzini) [RHEL-146632]
- mshv: Use reboot notifier to configure sleep state (Paolo Bonzini) [RHEL-146632]
- mshv: Add definitions for MSHV sleep state configuration (Paolo Bonzini) [RHEL-146632]
- mshv: Add support for movable memory regions (Paolo Bonzini) [RHEL-146632]
- mshv: Add refcount and locking to mem regions (Paolo Bonzini) [RHEL-146632]
- mshv: Fix huge page handling in memory region traversal (Paolo Bonzini) [RHEL-146632]
- mshv: Move region management to mshv_regions.c (Paolo Bonzini) [RHEL-146632]
- mshv: Centralize guest memory region destruction (Paolo Bonzini) [RHEL-146632]
- mshv: Refactor and rename memory region handling functions (Paolo Bonzini) [RHEL-146632]
- mshv: adjust interrupt control structure for ARM64 (Paolo Bonzini) [RHEL-146632]
- mshv: Add ioctl for self targeted passthrough hvcalls (Paolo Bonzini) [RHEL-146632]
- mshv: Extend create partition ioctl to support cpu features (Paolo Bonzini) [RHEL-146632]
- mshv: Allow mappings that overlap in uaddr (Paolo Bonzini) [RHEL-146632]
- mshv: Fix create memory region overlap check (Paolo Bonzini) [RHEL-146632]
- mshv: add WQ_PERCPU to alloc_workqueue users (Paolo Bonzini) [RHEL-146632]
- hyperv: Add two new hypercall numbers to guest ABI public header (Paolo Bonzini) [RHEL-146632]
- mshv: Introduce new hypercall to map stats page for L1VH partitions (Paolo Bonzini) [RHEL-146632]
- mshv: Allocate vp state page for HVCALL_MAP_VP_STATE_PAGE on L1VH (Paolo Bonzini) [RHEL-146632]
- mshv: Get the vmm capabilities offered by the hypervisor (Paolo Bonzini) [RHEL-146632]
- mshv: Add the HVCALL_GET_PARTITION_PROPERTY_EX hypercall (Paolo Bonzini) [RHEL-146632]
- mshv: Only map vp-&amp;gt;vp_stats_pages if on root scheduler (Paolo Bonzini) [RHEL-146632]
- mshv: Fix deposit memory in MSHV_ROOT_HVCALL (Paolo Bonzini) [RHEL-146632]
- mshv: Fix VpRootDispatchThreadBlocked value (Paolo Bonzini) [RHEL-146632]
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (Michal Schmidt) [RHEL-155353]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120700]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153273] {CVE-2026-23231}
- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149753] {CVE-2026-23111}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150231]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150231] {CVE-2026-23209}
- smb: client: fix broken multichannel with krb5+signing (Paulo Alcantara) [RHEL-152652]
- smb: client: fix regression with signing (Paulo Alcantara) [RHEL-152652]
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145815]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145815]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147272] {CVE-2026-23097}

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-targeting-pack-8.0-8.0.25-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">4d0134165e8067e85ab72ba71c0a35be14f7db3db88d339a1d952945148be93d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-targeting-pack-8.0-8.0.25-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-targeting-pack-8.0</strong> - Targeting Pack for Microsoft.AspNetCore.App 8.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.AspNetCore.App 8.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.AspNetCore.App 8.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-dbg-8.0-8.0.25-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">3a7118253ffddd2afa3f7fffcf792615caf30e109dbe28a950a5984694a512a2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-runtime-dbg-8.0-8.0.25-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-runtime-dbg-8.0</strong> - Managed debug symbols for the ASP.NET Core 8.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the ASP.NET Core runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-8.0-8.0.25-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">e22403727ef043b9d209e32a6462ce8097b42c550bef274dabcb9cf51cdd3374</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-runtime-8.0-8.0.25-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-runtime-8.0</strong> - ASP.NET Core 8.0 runtime&lt;br /&gt;</p>

<p>The ASP.NET Core runtime contains everything needed to run .NET&lt;br /&gt;
web applications. It includes a high performance Virtual Machine as&lt;br /&gt;
well as the framework libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
ASP.NET Core is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform web applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-templates-8.0-8.0.125-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">4b7adbd141a59301d7fdf7aa840cca11748557ab9ad92c6e0447c7a1ea3ca4a7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-templates-8.0-8.0.125-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-templates-8.0</strong> - .NET 8.0 templates&lt;br /&gt;</p>

<p>This package contains templates used by the .NET SDK.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-targeting-pack-8.0-8.0.25-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">e60fa287e095c1453dbd8e3f90de2befaca9c44ecba9c6c7ee1764690876e1c4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-targeting-pack-8.0-8.0.25-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-targeting-pack-8.0</strong> - Targeting Pack for Microsoft.NETCore.App 8.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 8.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 8.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-dbg-8.0-8.0.125-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">58030c60f50c2c1f748625c4f9176c8ade0045da0557788079224d88f0434ab5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-sdk-dbg-8.0-8.0.125-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-dbg-8.0</strong> - Managed debug symbols for the .NET 8.0 Software Development Kit&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the .NET&lt;br /&gt;
Software Development Kit (SDK) itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-8.0-8.0.125-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">62f6ec9944bb03479d442b64f9fffc88ec2cfc46a660b23ad0cdff6b02403ce4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-sdk-8.0-8.0.125-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-8.0</strong> - .NET 8.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET SDK is a collection of command line applications to&lt;br /&gt;
create, build, publish and run .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-dbg-8.0-8.0.25-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">58b29b1916aedf43616d0dd067f999df6a1783de76902d52cb79b72d868eb4a8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-runtime-dbg-8.0-8.0.25-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-runtime-dbg-8.0</strong> - Managed debug symbols NET 8.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the .NET runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-8.0-8.0.25-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">fab9a79c00784959357ef53fa89dcc60d78de68e2ac375c94256b0a4a7c59205</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-runtime-8.0-8.0.25-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-runtime-8.0</strong> - NET 8.0 runtime&lt;br /&gt;</p>

<p>The .NET runtime contains everything needed to run .NET applications.&lt;br /&gt;
It includes a high performance Virtual Machine as well as the framework&lt;br /&gt;
libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-hostfxr-8.0-8.0.25-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">7b064c9b41ee1a8005996908d836e53f41be87822f750a8986897383325d48b8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-hostfxr-8.0-8.0.25-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-hostfxr-8.0</strong> - .NET command line host resolver&lt;br /&gt;</p>

<p>The .NET host resolver contains the logic to resolve and select&lt;br /&gt;
the right version of the .NET SDK or runtime to use.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-apphost-pack-8.0-8.0.25-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:16:04 AM GMT</pubDate>
      <guid isPermaLink="false">7f87dc1687a00c4c578ecf8600ee44ba887c658fce9ee19a7823550769942bcc</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-apphost-pack-8.0-8.0.25-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-apphost-pack-8.0</strong> - Targeting Pack for Microsoft.NETCore.App 8.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 8.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 8.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 8.0.125-2
- Update to .NET SDK 8.0.125 and Runtime 8.0.25
- Resolves: RHEL-152933

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.124-2
- Update to .NET SDK 8.0.124 and Runtime 8.0.24
- Resolves: RHEL-144967

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 8.0.123-2
- Update to .NET SDK 8.0.123 and Runtime 8.0.23
- Resolves: RHEL-138653

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-dbg-9.0-9.0.14-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">b42b23ae58e1051658a36ca4882dbc6040e6673a610f5939c8be5a136b2e6308</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-runtime-dbg-9.0-9.0.14-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-runtime-dbg-9.0</strong> - Managed debug symbols for the ASP.NET Core 9.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the ASP.NET Core runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-9.0-9.0.14-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">fdfd5f867f66488ebbafddc01d40a5ecf1e8869a58350fde26504e60c26d62fc</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-runtime-9.0-9.0.14-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-runtime-9.0</strong> - ASP.NET Core 9.0 runtime&lt;br /&gt;</p>

<p>The ASP.NET Core runtime contains everything needed to run .NET&lt;br /&gt;
web applications. It includes a high performance Virtual Machine as&lt;br /&gt;
well as the framework libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
ASP.NET Core is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform web applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-templates-9.0-9.0.115-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">09e05d706a6d2aad8ea4c55f1d9b7a1b01e3872784d5688dcaa769bd99fa0920</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-templates-9.0-9.0.115-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-templates-9.0</strong> - .NET 9.0 templates&lt;br /&gt;</p>

<p>This package contains templates used by the .NET SDK.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-targeting-pack-9.0-9.0.14-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">a33122a94f18a8834868365c47e669d378b2f66cfac85c9f570628153862962b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-targeting-pack-9.0-9.0.14-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-targeting-pack-9.0</strong> - Targeting Pack for Microsoft.NETCore.App 9.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 9.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 9.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-dbg-9.0-9.0.115-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">f3b8d18d35ca7c724de974e451a7c9a710d9ad4ce5b7098d8d41a2861e7ec393</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-sdk-dbg-9.0-9.0.115-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-dbg-9.0</strong> - Managed debug symbols for the .NET 9.0 Software Development Kit&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the .NET&lt;br /&gt;
Software Development Kit (SDK) itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-aot-9.0-9.0.115-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">3e38b66a9264d83bf6ca5e1ba911406fc00d69296a4cade1a9faaee9b041f9eb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-sdk-aot-9.0-9.0.115-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-aot-9.0</strong> - Ahead-of-Time (AOT) support for the .NET 9.0 Software Development Kit&lt;br /&gt;</p>

<p>This package provides Ahead-of-time (AOT) compilation support for the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>netstandard-targeting-pack-2.1-9.0.115-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">3b6622751019088904c8daa70243ce63d1404c33ac365147036a1361841f843f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/netstandard-targeting-pack-2.1-9.0.115-2.el10.aarch64.rpm</link>
      <description><p><strong>netstandard-targeting-pack-2.1</strong> - Targeting Pack for NETStandard.Library 2.1&lt;br /&gt;</p>

<p>This package provides a targeting pack for NETStandard.Library 2.1&lt;br /&gt;
that allows developers to compile against and target NETStandard.Library 2.1&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-9.0-9.0.115-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">ea8538878f63f2bad730b5e62cb92976b1d312b4332f2f45789bf37895f17bb8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-sdk-9.0-9.0.115-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-9.0</strong> - .NET 9.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET SDK is a collection of command line applications to&lt;br /&gt;
create, build, publish and run .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-dbg-9.0-9.0.14-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">3b5097d499f496758e76fab385c45bc6ef8a2d6239d835a3f3a89876ab6ee5c9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-runtime-dbg-9.0-9.0.14-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-runtime-dbg-9.0</strong> - Managed debug symbols NET 9.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the .NET runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-9.0-9.0.14-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">1b83319c8fd403181e53ba1bf2cb6df27baa09d5d55cdfa72466e3ef98ec1f80</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-runtime-9.0-9.0.14-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-runtime-9.0</strong> - NET 9.0 runtime&lt;br /&gt;</p>

<p>The .NET runtime contains everything needed to run .NET applications.&lt;br /&gt;
It includes a high performance Virtual Machine as well as the framework&lt;br /&gt;
libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-hostfxr-9.0-9.0.14-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">0efab72ec959a39d221742a9103af1fd531383c35fd1aff63357fbb548d491bd</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-hostfxr-9.0-9.0.14-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-hostfxr-9.0</strong> - .NET command line host resolver&lt;br /&gt;</p>

<p>The .NET host resolver contains the logic to resolve and select&lt;br /&gt;
the right version of the .NET SDK or runtime to use.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-apphost-pack-9.0-9.0.14-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">02680d40ead6a2272ac554020f22693f5286087fc2685c17a5e8c396498b4fcb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-apphost-pack-9.0-9.0.14-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-apphost-pack-9.0</strong> - Targeting Pack for Microsoft.NETCore.App 9.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 9.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 9.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-targeting-pack-9.0-9.0.14-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 11:08:15 AM GMT</pubDate>
      <guid isPermaLink="false">63ca103c5e75ef13ee163632259f4629d0b9154d6a319c42e5667e061c389216</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-targeting-pack-9.0-9.0.14-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-targeting-pack-9.0</strong> - Targeting Pack for Microsoft.AspNetCore.App 9.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.AspNetCore.App 9.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.AspNetCore.App 9.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 9.0.115-2
- Update to .NET SDK 9.0.115 and Runtime 9.0.14
- Resolves: RHEL-152947

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.114-2
- Update to .NET SDK 9.0.114 and Runtime 9.0.13
- Resolves: RHEL-144971

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 9.0.113-2
- Update to .NET SDK 9.0.113 and Runtime 9.0.12
- Resolves: RHEL-138646

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-connections-47.2.1-6.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 10:43:39 AM GMT</pubDate>
      <guid isPermaLink="false">21c4439ff965586d01fcace9fa480f35f1362d99868476763007ae9d0d26b1f3</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gnome-connections-47.2.1-6.el10.aarch64.rpm</link>
      <description><p><strong>gnome-connections</strong> - A remote desktop client for the GNOME desktop environment&lt;br /&gt;</p>

<p>Connections is a remote desktop client for the GNOME desktop environment.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Marek Kasik &amp;lt;mkasik@redhat.com&amp;gt; - 47.2.1-6
- Propagate cursor changes
- Resolves: RHEL-153847

Fri, 20 Mar 2026 GMT - Marek Kasik &amp;lt;mkasik@redhat.com&amp;gt; - 47.2.1-5
- Fix focus chain of authentication dialog
- Resolves: RHEL-153842

Fri, 27 Feb 2026 GMT - Marek Kasik &amp;lt;mkasik@redhat.com&amp;gt; - 47.2.1-4
- Check initialization of RDP
- Resolves: RHEL-143806

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-ugly-free-1.26.7-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 10:01:22 AM GMT</pubDate>
      <guid isPermaLink="false">fb727298297a563f2f56dd4613bdfc31590c1ea06fe18504b690216132a42e52</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gstreamer1-plugins-ugly-free-1.26.7-2.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-ugly-free</strong> - GStreamer streaming media framework "ugly" plugins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
This package contains plug-ins whose license is not fully compatible with LGPL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patches for CVE-2026-2920 and CVE-2026-2922
  Resolves: RHEL-156045, RHEL-156176

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-bad-free-libs-1.26.7-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 09:55:29 AM GMT</pubDate>
      <guid isPermaLink="false">7c25dfc640229024bbe22952a54cf048f6aa607b2aaba93977eb1cc0cbba1bdc</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gstreamer1-plugins-bad-free-libs-1.26.7-2.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-bad-free-libs</strong> - Runtime libraries for the GStreamer media framework "bad" plug-ins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
This package contains the runtime libraries for plugins that&lt;br /&gt;
aren't tested well enough, or the code is not of good enough quality.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156118, RHEL-156189

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-bad-free-1.26.7-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 09:55:29 AM GMT</pubDate>
      <guid isPermaLink="false">2e16c327307f8e34b7db3dba5ce9fc32e1beb85540025c452fe8950358d14304</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gstreamer1-plugins-bad-free-1.26.7-2.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-bad-free</strong> - GStreamer streaming media framework "bad" plugins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
This package contains plug-ins that aren't tested well enough, or the code&lt;br /&gt;
is not of good enough quality.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patches for CVE-2026-2923 and CVE-2026-3082
  Resolves: RHEL-156118, RHEL-156189

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-good-gtk-1.26.7-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 09:48:35 AM GMT</pubDate>
      <guid isPermaLink="false">be02b2b6fb0f6f009ecc0388eae3908ea94d06d0942b4c3b9545606fc1dcc826</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gstreamer1-plugins-good-gtk-1.26.7-2.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-good-gtk</strong> - GStreamer "good" plugins gtk plugin&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of elements which&lt;br /&gt;
operate on media data.&lt;br /&gt;
&lt;br /&gt;
GStreamer Good Plugins is a collection of well-supported plugins of&lt;br /&gt;
good quality and under the LGPL license.&lt;br /&gt;
&lt;br /&gt;
This package (gstreamer1-plugins-good-gtk) contains the gtksink output plugin.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156142, RHEL-156119

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-good-1.26.7-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 09:48:35 AM GMT</pubDate>
      <guid isPermaLink="false">25b2ce0253794245921584d5700a0b2595be5f3c844086810741c3bbb0106036</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gstreamer1-plugins-good-1.26.7-2.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-good</strong> - GStreamer plugins with good code and licensing&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of filters which&lt;br /&gt;
operate on media data. Applications using this library can do anything&lt;br /&gt;
from real-time sound processing to playing videos, and just about anything&lt;br /&gt;
else media-related.  Its plugin-based architecture means that new data&lt;br /&gt;
types or processing capabilities can be added simply by installing new&lt;br /&gt;
plugins.&lt;br /&gt;
&lt;br /&gt;
GStreamer Good Plugins is a collection of well-supported plugins of&lt;br /&gt;
good quality and under the LGPL license.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 31 Mar 2026 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-3083 and CVE-2026-3085
  Resolves: RHEL-156142, RHEL-156119

Tue, 04 Nov 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-1
- Update to 1.26.7
  Resolves: RHEL-126057

Tue, 17 Jun 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.2-1
- Update to 1.26.2
  Resolves: DESKTOP-1858

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dnf-bootc-4.20.0-23.el10.noarch</title>
      <pubDate>Tue, 31 Mar 2026 09:48:18 AM GMT</pubDate>
      <guid isPermaLink="false">0861de9448d7a2815bd26eb4903e0e11d8b666ac1d8731acd51eeb6b535af851</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dnf-bootc-4.20.0-23.el10.noarch.rpm</link>
      <description><p><strong>dnf-bootc</strong> - Package manager - additional bootc dependencies&lt;br /&gt;</p>

<p>Additional dependencies needed to perform transactions on booted bootc (bootable containers) systems.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Petr Pisar &amp;lt;ppisar@redhat.com&amp;gt; - 4.20.0-23
- Preserve ACL when rotating logs (RHEL-123670)

Wed, 25 Mar 2026 GMT - Evan Goode &amp;lt;egoode@redhat.com&amp;gt; - 4.20.0-22
- bootc: unlock only if /usr is read-only (RHEL-145780)

Mon, 16 Feb 2026 GMT - Ales Matej &amp;lt;amatej@redhat.com&amp;gt; - 4.20.0-21
- autoremove: when a dangling protected dependency is found produce a warning
  and skip it (RHEL-128445)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-base-tools-1.26.7-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 09:25:21 AM GMT</pubDate>
      <guid isPermaLink="false">487334473d58796ca41abc1526ee10fbd8099c61cfde3afcd6543ab088f0b339</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gstreamer1-plugins-base-tools-1.26.7-2.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-base-tools</strong> - Tools for GStreamer streaming media framework base plugins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of filters which&lt;br /&gt;
operate on media data. Applications using this library can do anything&lt;br /&gt;
from real-time sound processing to playing videos, and just about anything&lt;br /&gt;
else media-related.  Its plugin-based architecture means that new data&lt;br /&gt;
types or processing capabilities can be added simply by installing new&lt;br /&gt;
plug-ins.&lt;br /&gt;
&lt;br /&gt;
This package contains the command-line tools for the base plugins.&lt;br /&gt;
These include:&lt;br /&gt;
&lt;br /&gt;
* gst-discoverer</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Mar 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-2921
  Resolves: RHEL-156137

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-base-devel-1.26.7-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 09:25:21 AM GMT</pubDate>
      <guid isPermaLink="false">06c872b1b1491c834712722c353833b40699b4a7683d72883731d188a029a221</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gstreamer1-plugins-base-devel-1.26.7-2.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-base-devel</strong> - GStreamer Base Plugins Development files&lt;br /&gt;</p>

<p>The gstreamer1-plugins-base-devel package contains libraries and header files&lt;br /&gt;
for developing applications that use gstreamer1-plugins-base.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Mar 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-2921
  Resolves: RHEL-156137

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gstreamer1-plugins-base-1.26.7-2.el10.aarch64</title>
      <pubDate>Tue, 31 Mar 2026 09:25:21 AM GMT</pubDate>
      <guid isPermaLink="false">8716912f81b4c1ee97307628631a027a3fa45590a5939a4ca85d0db69fa5ba22</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gstreamer1-plugins-base-1.26.7-2.el10.aarch64.rpm</link>
      <description><p><strong>gstreamer1-plugins-base</strong> - GStreamer streaming media framework base plugins&lt;br /&gt;</p>

<p>GStreamer is a streaming media framework, based on graphs of filters which&lt;br /&gt;
operate on media data. Applications using this library can do anything&lt;br /&gt;
from real-time sound processing to playing videos, and just about anything&lt;br /&gt;
else media-related.  Its plugin-based architecture means that new data&lt;br /&gt;
types or processing capabilities can be added simply by installing new&lt;br /&gt;
plug-ins.&lt;br /&gt;
&lt;br /&gt;
This package contains a set of well-maintained base plug-ins.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 31 Mar 2025 GMT - Wim Taymans &amp;lt;wtaymans@redhat.com&amp;gt; - 1.26.7-2
- Add patch for CVE-2026-2921
  Resolves: RHEL-156137

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-targeting-pack-10.0-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">c4a45291c74e467b2bbb4d82059006fe94af64d10f023a379db27d60cdd1e625</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-targeting-pack-10.0-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-targeting-pack-10.0</strong> - Targeting Pack for Microsoft.AspNetCore.App 10.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.AspNetCore.App 10.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.AspNetCore.App 10.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-dbg-10.0-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">af1f21278ac217b5163a01e071aac7edebb0926b5385d8047c38a876d0cbfe2e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-runtime-dbg-10.0-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-runtime-dbg-10.0</strong> - Managed debug symbols for the ASP.NET Core 10.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the ASP.NET Core runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>aspnetcore-runtime-10.0-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">ad62515005c1b787773dab1dccb88b6c14abb0b0d163d7ee4986d5a5d39422d6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/aspnetcore-runtime-10.0-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>aspnetcore-runtime-10.0</strong> - ASP.NET Core 10.0 runtime&lt;br /&gt;</p>

<p>The ASP.NET Core runtime contains everything needed to run .NET&lt;br /&gt;
web applications. It includes a high performance Virtual Machine as&lt;br /&gt;
well as the framework libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
ASP.NET Core is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform web applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-templates-10.0-10.0.104-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">1e7f22def8f6d90457a1fa75517e3a82e352cf38d2e44f990f29e016dc160bfd</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-templates-10.0-10.0.104-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-templates-10.0</strong> - .NET 10.0 templates&lt;br /&gt;</p>

<p>This package contains templates used by the .NET SDK.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-targeting-pack-10.0-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">fa0d9dc869cea851bbb047cc5bc4103b726e61a0cd815558cdabde98d2c30404</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-targeting-pack-10.0-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-targeting-pack-10.0</strong> - Targeting Pack for Microsoft.NETCore.App 10.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 10.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 10.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-dbg-10.0-10.0.104-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">654b273f54a24e7781cc4ab508cb915b9856e0e50cda2f2746081ab31b578526</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-sdk-dbg-10.0-10.0.104-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-dbg-10.0</strong> - Managed debug symbols for the .NET 10.0 Software Development Kit&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the .NET&lt;br /&gt;
Software Development Kit (SDK) itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-aot-10.0-10.0.104-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">c2c9e231f52b0b1e5cb1d116073f3336507e51c350025ad15b5434e1997234ce</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-sdk-aot-10.0-10.0.104-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-aot-10.0</strong> - Ahead-of-Time (AOT) support for the .NET 10.0 Software Development Kit&lt;br /&gt;</p>

<p>This package provides Ahead-of-time (AOT) compilation support for the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-sdk-10.0-10.0.104-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">726f9520bce51c0d4d09ba73da92122f9fb795c46e86ca8f923f9e610e386188</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-sdk-10.0-10.0.104-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-sdk-10.0</strong> - .NET 10.0 Software Development Kit&lt;br /&gt;</p>

<p>The .NET SDK is a collection of command line applications to&lt;br /&gt;
create, build, publish and run .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-dbg-10.0-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">afc3e496f11c912597b0fe61626450f811cc2a073d3a871be3469e28105124df</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-runtime-dbg-10.0-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-runtime-dbg-10.0</strong> - Managed debug symbols NET 10.0 runtime&lt;br /&gt;</p>

<p>This package contains the managed symbol (pdb) files useful to debug the&lt;br /&gt;
managed parts of the .NET runtime itself.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-runtime-10.0-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">b658a05dd032dd63205326fb182226b9f3951106dfa0aa6a3c51bb59eceb385c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-runtime-10.0-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-runtime-10.0</strong> - NET 10.0 runtime&lt;br /&gt;</p>

<p>The .NET runtime contains everything needed to run .NET applications.&lt;br /&gt;
It includes a high performance Virtual Machine as well as the framework&lt;br /&gt;
libraries used by .NET applications.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-hostfxr-10.0-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">7bd11576996656b5b48b9658926abfeb55e36191b008cf439bf50ccd015a397c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-hostfxr-10.0-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-hostfxr-10.0</strong> - .NET command line host resolver&lt;br /&gt;</p>

<p>The .NET host resolver contains the logic to resolve and select&lt;br /&gt;
the right version of the .NET SDK or runtime to use.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-host-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">cd43f13b8e1c2d14d74707ffec32fb7b296dbbdcb9aafd7b2d78f3e5bf6055ba</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-host-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-host</strong> - .NET command line launcher&lt;br /&gt;</p>

<p>The .NET host is a command line program that runs a standalone&lt;br /&gt;
.NET application or launches the SDK.&lt;br /&gt;
&lt;br /&gt;
.NET is a fast, lightweight and modular platform for creating&lt;br /&gt;
cross platform applications that work on Linux, Mac and Windows.&lt;br /&gt;
&lt;br /&gt;
It particularly focuses on creating console applications, web&lt;br /&gt;
applications and micro-services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>dotnet-apphost-pack-10.0-10.0.4-2.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 05:18:58 PM GMT</pubDate>
      <guid isPermaLink="false">53390781150335e4ddae886c9e41baedd63b250204378d9a41fba00d92918744</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/dotnet-apphost-pack-10.0-10.0.4-2.el10.aarch64.rpm</link>
      <description><p><strong>dotnet-apphost-pack-10.0</strong> - Targeting Pack for Microsoft.NETCore.App 10.0&lt;br /&gt;</p>

<p>This package provides a targeting pack for Microsoft.NETCore.App 10.0&lt;br /&gt;
that allows developers to compile against and target Microsoft.NETCore.App 10.0&lt;br /&gt;
applications using the .NET SDK.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Dominik Rehák &amp;lt;drehak@redhat.com&amp;gt; - 10.0.104-2
- Update to .NET SDK 10.0.104 and Runtime 10.0.4
- Resolves: RHEL-152955

Wed, 11 Feb 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.103-2
- Update to .NET SDK 10.0.103 and Runtime 10.0.3
- Resolves: RHEL-144975

Wed, 14 Jan 2026 GMT - Omair Majid &amp;lt;omajid@redhat.com&amp;gt; - 10.0.102-2
- Update to .NET SDK 10.0.102 and Runtime 10.0.2
- Resolves: RHEL-138641

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-block-curl-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">478fda4ea1794a969b2c8d608e5a2a9f88e0747d4707453612936c8404415410</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-block-curl-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-block-curl</strong> - QEMU CURL block driver&lt;br /&gt;</p>

<p>This package provides the additional CURL block driver for QEMU.&lt;br /&gt;
&lt;br /&gt;
Install this package if you want to access remote disks over&lt;br /&gt;
http, https, ftp and other transports provided by the CURL library.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-block-blkio-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">4d51e8bfdbf16151db353c78636e53c763e453b99ff1588b09ae731367a959e4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-block-blkio-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-block-blkio</strong> - QEMU libblkio block drivers&lt;br /&gt;</p>

<p>This package provides the additional libblkio block drivers for QEMU.&lt;br /&gt;
&lt;br /&gt;
Install this package if you want to use virtio-blk-vdpa-blk,&lt;br /&gt;
virtio-blk-vfio-pci, virtio-blk-vhost-user, io_uring, and nvme-io_uring block&lt;br /&gt;
drivers provided by libblkio.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-audio-pa-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">077ec6512a74f3b8123a7eeeb0d43f2545433e00c8f56328b6d6bb361cc7b539</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-audio-pa-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-audio-pa</strong> - QEMU PulseAudio audio driver&lt;br /&gt;</p>

<p>This package provides the additional PulseAudio audio driver for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">1b7f62f68aef68d4c0c64af0bf5f4266cee8d1c1b8b199743cc526fa4a9b9cf2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm</strong> - QEMU is a machine emulator and virtualizer&lt;br /&gt;</p>

<p>qemu-kvm is an open source virtualizer that provides hardware&lt;br /&gt;
emulation for the KVM hypervisor. qemu-kvm acts as a virtual&lt;br /&gt;
machine monitor together with the KVM kernel modules, and emulates the&lt;br /&gt;
hardware for a full system such as a PC and its associated peripherals.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-img-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">9279c23060ea1f173fb3b7dbf8c142af3d8bde3a930431eb37f231d7623d24ee</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-img-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-img</strong> - QEMU command line tool for manipulating disk images&lt;br /&gt;</p>

<p>This package provides a command line tool for manipulating disk images.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-guest-agent-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">33096649d3ca2415c94e3f1a05ccccca234a303fa4abee45d1c409d0e1b570be</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-guest-agent-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-guest-agent</strong> - QEMU guest agent&lt;br /&gt;</p>

<p>qemu-kvm is an open source virtualizer that provides hardware emulation for&lt;br /&gt;
the KVM hypervisor.&lt;br /&gt;
&lt;br /&gt;
This package provides an agent to run inside guests, which communicates&lt;br /&gt;
with the host over a virtio-serial channel named "org.qemu.guest_agent.0"&lt;br /&gt;
&lt;br /&gt;
This package does not need to be installed on the host OS.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-core-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">f077a3ae3f7fc41a67677df0314cf9cb040970b89530c804ea8c73ab02f24fb0</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-core-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-core</strong> - qemu-kvm core components&lt;br /&gt;</p>

<p>qemu-kvm is an open source virtualizer that provides hardware&lt;br /&gt;
emulation for the KVM hypervisor. qemu-kvm acts as a virtual&lt;br /&gt;
machine monitor together with the KVM kernel modules, and emulates the&lt;br /&gt;
hardware for a full system such as a PC and its associated peripherals.&lt;br /&gt;
This is a minimalistic installation of qemu-kvm. Functionality provided by&lt;br /&gt;
this package is not ensured and it can change in a future version as some&lt;br /&gt;
functionality can be split out to separate package.&lt;br /&gt;
Before updating this package, it is recommended to check the package&lt;br /&gt;
changelog for information on functionality which might have been moved to&lt;br /&gt;
a separate package to prevent issues due to the moved functionality.&lt;br /&gt;
If apps opt-in to minimalist packaging by depending on qemu-kvm-core, they&lt;br /&gt;
explicitly accept that features may disappear from qemu-kvm-core in future&lt;br /&gt;
updates.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-common-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">999bfc52b553259d6126f3b832e5f5fc573db0deca2d04892d5383608f0697b0</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-common-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-common</strong> - QEMU common files needed by all QEMU targets&lt;br /&gt;</p>

<p>qemu-kvm is an open source virtualizer that provides hardware emulation for&lt;br /&gt;
the KVM hypervisor.&lt;br /&gt;
&lt;br /&gt;
This package provides documentation and auxiliary programs used with qemu-kvm.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-block-rbd-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">5e7718559f1c070ec5e7ec919c1026cdcd0f3b91b5608885d5471ec25aa3142d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-block-rbd-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-block-rbd</strong> - QEMU Ceph/RBD block driver&lt;br /&gt;</p>

<p>This package provides the additional Ceph/RBD block driver for QEMU.&lt;br /&gt;
&lt;br /&gt;
Install this package if you want to access remote Ceph volumes&lt;br /&gt;
using the rbd protocol.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-pr-helper-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">433ff6d5171fcec5aca7281ab2e6fcd229b314dbbcdd5c83836d25b2c6f2fb00</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-pr-helper-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-pr-helper</strong> - qemu-pr-helper utility for qemu-kvm&lt;br /&gt;</p>

<p>This package provides the qemu-pr-helper utility that is required for certain&lt;br /&gt;
SCSI features.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-tools-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">eea559eff06021d00d627363796d0b9a83476b9addc9546cb10bdcb614fdd923</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-tools-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-tools</strong> - qemu-kvm support tools&lt;br /&gt;</p>

<p>qemu-kvm-tools provides various tools related to qemu-kvm usage.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-docs-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">ef054a61de0b83d77d4a11c95838ca8042093c14c09329e146f864c55cce3d47</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-docs-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-docs</strong> - qemu-kvm documentation&lt;br /&gt;</p>

<p>qemu-kvm-docs provides documentation files regarding qemu-kvm.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-usb-redirect-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">d7479a3bf0364a8bf2cd29c8689f96536b9785cfb789a8a73aa7039ae4d5b183</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-device-usb-redirect-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-device-usb-redirect</strong> - QEMU usbredir support&lt;br /&gt;</p>

<p>This package provides usbredir support.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-usb-host-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">4e0770bc09a020b012669f43845394403aa4b5ed10208af03cc3948060b9d6b4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-device-usb-host-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-device-usb-host</strong> - QEMU usb host device&lt;br /&gt;</p>

<p>This package provides the USB pass through driver for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-display-virtio-gpu-pci-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">af8c19d6d6234c3131e3a1a3ca6f35eca1a5a375c34e8815e27a64640f239045</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-device-display-virtio-gpu-pci-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-device-display-virtio-gpu-pci</strong> - QEMU virtio-gpu-pci display device&lt;br /&gt;</p>

<p>This package provides the virtio-gpu-pci display device for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>qemu-kvm-device-display-virtio-gpu-18:10.1.0-16.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 02:50:01 PM GMT</pubDate>
      <guid isPermaLink="false">460591f9cd68168cf9daa10c87e4f24e73e7095be5d47bd6321c304c473c1c97</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/qemu-kvm-device-display-virtio-gpu-10.1.0-16.el10.aarch64.rpm</link>
      <description><p><strong>qemu-kvm-device-display-virtio-gpu</strong> - QEMU virtio-gpu display device&lt;br /&gt;</p>

<p>This package provides the virtio-gpu display device for QEMU.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-16
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-158224]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-158224]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-158224]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-158224]
- Resolves: RHEL-158224
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-10.2])

Thu, 26 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-15
- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155601]
- Resolves: RHEL-155601
  (Mirror job can miss writes during startup, corrupting the copy [rhel-10.2])

Wed, 18 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 10.1.0-14
- kvm-hw-uefi-add-variable-digest-to-vmstate.patch [RHEL-153058]
- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-144004]
- Resolves: RHEL-153058
  (Qemu crashes with "double free" during restore --reset-nvram with uefi-vars secure boot)
- Resolves: RHEL-144004
  ([rhel-10] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>go-toolset-1.26.1-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">468c579d9822f5c8a3bc19bb6fa609c32a76bd29be94a403a016d5483838653e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/go-toolset-1.26.1-1.el10.aarch64.rpm</link>
      <description><p><strong>go-toolset</strong> - Package that installs go-toolset&lt;br /&gt;</p>

<p>This is the main package for go-toolset.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-tests-1.26.1-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">39d8e4de363de000d7d4dec5d689c9c68e7c5e114dc0d1f75234f57049ece4f6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/golang-tests-1.26.1-1.el10.noarch.rpm</link>
      <description><p><strong>golang-tests</strong> - Golang compiler tests for stdlib&lt;br /&gt;</p>

<p>Golang compiler tests for stdlib.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-src-1.26.1-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">622d6af7646556afcfb0eaafae378ee93fbaa34ead243c28f6fa25a118ceecb6</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/golang-src-1.26.1-1.el10.noarch.rpm</link>
      <description><p><strong>golang-src</strong> - Golang compiler source tree&lt;br /&gt;</p>

<p>Golang compiler source tree</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-race-1.26.1-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">dbf6494512943d7f92f9ae2b13c595cc2da3413812c0df7c2c8ddf2777bf6178</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/golang-race-1.26.1-1.el10.aarch64.rpm</link>
      <description><p><strong>golang-race</strong> - Race detetector library object files.&lt;br /&gt;</p>

<p>Binary library objects for Go's race detector.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-misc-1.26.1-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">1f4bca5bfb88a8954696dc866c212c3432118c5c7c44fb8911fcef0344db8c5c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/golang-misc-1.26.1-1.el10.noarch.rpm</link>
      <description><p><strong>golang-misc</strong> - Golang compiler miscellaneous sources&lt;br /&gt;</p>

<p>Golang compiler miscellaneous sources.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-docs-1.26.1-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">c395c2770c88696e23bfd3cdf3585693a9c1bb158f226dbcd427eb72ed6fa2c0</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/golang-docs-1.26.1-1.el10.noarch.rpm</link>
      <description><p><strong>golang-docs</strong> - Golang compiler docs&lt;br /&gt;</p>

<p>Golang compiler docs.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-bin-1.26.1-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">71e9f785ac102eee2de19c0b81602f355124d5951a398af326764d2905b0b4ee</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/golang-bin-1.26.1-1.el10.aarch64.rpm</link>
      <description><p><strong>golang-bin</strong> - Golang core compiler tools&lt;br /&gt;</p>

<p>Golang core compiler tools</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>golang-1.26.1-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 01:20:39 PM GMT</pubDate>
      <guid isPermaLink="false">0f2fb0bf2459bdfbaaad59997bdb064bc5de6394c0e10515fc9fbdbcda9713f8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/golang-1.26.1-1.el10.aarch64.rpm</link>
      <description><p><strong>golang</strong> - The Go Programming Language&lt;br /&gt;</p>

<p>The Go Programming Language.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Alejandro Sáez &amp;lt;asm@redhat.com&amp;gt; - 1.26.1-1
- Update to Go 1.26.1

Thu, 12 Feb 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.7-1
- Update to Go 1.25.7 (fips-1)

Mon, 19 Jan 2026 GMT - dbenoit &amp;lt;dbenoit@redhat.com&amp;gt; - 1.25.5-1
- Update to Go 1.25.5 (fips-1)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mysql-selinux-1.0.15-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 12:09:35 PM GMT</pubDate>
      <guid isPermaLink="false">550fe40aa28f312fc6712e3555514601d198d78ca6944b687d80082bc42d3f93</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mysql-selinux-1.0.15-1.el10.noarch.rpm</link>
      <description><p><strong>mysql-selinux</strong> - SELinux policy modules for MySQL and MariaDB packages&lt;br /&gt;</p>

<p>SELinux policy modules for MySQL and MariaDB packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 24 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 1.0.15-1
- Update to version 1.0.15
- Fixes mysql-selinux issue
- Related: RHEL-119660

Tue, 15 Jul 2025 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 1.0.14-1
- Update to version 1.0.14
- Resolves: rhbz#2380217

Tue, 04 Feb 2025 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 1.0.13-2
- Rebase to 1.0.13

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-npm-1:10.9.7-1.22.22.2.1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:47 AM GMT</pubDate>
      <guid isPermaLink="false">9f198adb4a1b864fbb517dfd1569660def3945b77fdebf1e1d0b46aee32eb930</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/nodejs-npm-10.9.7-1.22.22.2.1.el10.aarch64.rpm</link>
      <description><p><strong>nodejs-npm</strong> - Node.js Package Manager&lt;br /&gt;</p>

<p>npm is a package manager for node.js. You can use it to install and publish&lt;br /&gt;
your node programs. It manages dependencies and does other cool stuff.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-libs-1:22.22.2-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:47 AM GMT</pubDate>
      <guid isPermaLink="false">94204457778e72ab267fe29abb2e7e63dd5685d5157c022a669f0cd84dd4c562</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/nodejs-libs-22.22.2-1.el10.aarch64.rpm</link>
      <description><p><strong>nodejs-libs</strong> - Node.js and v8 libraries&lt;br /&gt;</p>

<p>Libraries to support Node.js and provide stable v8 interfaces.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-full-i18n-1:22.22.2-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:47 AM GMT</pubDate>
      <guid isPermaLink="false">6baec565b83c9a1562fba19d8e708d99dbc320aecfae025dca20660d36a18999</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/nodejs-full-i18n-22.22.2-1.el10.aarch64.rpm</link>
      <description><p><strong>nodejs-full-i18n</strong> - Non-English locale data for Node.js&lt;br /&gt;</p>

<p>Optional data files to provide full-icu support for Node.js. Remove this&lt;br /&gt;
package to save space if non-English locales are not needed.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-docs-1:22.22.2-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 09:27:47 AM GMT</pubDate>
      <guid isPermaLink="false">197c9d115b5eb035bfd3ca29f01b5526c324b66fc1031e0e130479ca81f38275</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/nodejs-docs-22.22.2-1.el10.noarch.rpm</link>
      <description><p><strong>nodejs-docs</strong> - Node.js API documentation&lt;br /&gt;</p>

<p>The API documentation for the Node.js JavaScript runtime.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-devel-1:22.22.2-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:47 AM GMT</pubDate>
      <guid isPermaLink="false">9884d305a1c1d5736eb8f66ec15233337771d622f3643f265b80504b772329ae</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/nodejs-devel-22.22.2-1.el10.aarch64.rpm</link>
      <description><p><strong>nodejs-devel</strong> - JavaScript runtime - development headers&lt;br /&gt;</p>

<p>Development headers for the Node.js JavaScript runtime.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nodejs-1:22.22.2-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 09:27:47 AM GMT</pubDate>
      <guid isPermaLink="false">614c16f06e4055a06879b79c5e7b124cd25f16f33965772d4d958b5f01805a47</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/nodejs-22.22.2-1.el10.aarch64.rpm</link>
      <description><p><strong>nodejs</strong> - JavaScript runtime&lt;br /&gt;</p>

<p>Node.js is a platform built on Chrome's JavaScript runtime \&lt;br /&gt;
for easily building fast, scalable network applications. \&lt;br /&gt;
Node.js uses an event-driven, non-blocking I/O model that \&lt;br /&gt;
makes it lightweight and efficient, perfect for data-intensive \&lt;br /&gt;
real-time applications that run across distributed devices.}</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 30 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.2-1
- Update to version 22.22.2
- introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
- disabled failing tests in nghttp2 due to newer version
- patch for npm/braces CVE-2026-25547

Wed, 25 Mar 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-4
- sources: changed ICU version syntax

Tue, 20 Jan 2026 GMT - Andrei Radchenko &amp;lt;aradchen@redhat.com&amp;gt; - 1:22.22.0-3
- Bump release to get correct RHEL build

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>thunderbird-140.9.0-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 08:43:29 AM GMT</pubDate>
      <guid isPermaLink="false">b8555becf46e3144c89aea30b20395d691b053bc589ccab9bcc0562249632ec2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/thunderbird-140.9.0-1.el10.aarch64.rpm</link>
      <description><p><strong>thunderbird</strong> - Mozilla Thunderbird mail/newsgroup client&lt;br /&gt;</p>

<p>Mozilla Thunderbird is a standalone mail and newsgroup client.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.9.0-1
- Update to 140.9.0 ESR

Mon, 23 Feb 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.8.0-1
- Update to 140.8.0 ESR

Mon, 12 Jan 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.7.0-1
- Update to 140.7.0 ESR

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>firefox-140.9.0-1.el10.aarch64</title>
      <pubDate>Mon, 30 Mar 2026 08:42:34 AM GMT</pubDate>
      <guid isPermaLink="false">22469e38222a4f708bd9e62f1bca87f8e15391fcf4f4cdc2d5bfe7492be31624</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/firefox-140.9.0-1.el10.aarch64.rpm</link>
      <description><p><strong>firefox</strong> - Mozilla Firefox Web browser&lt;br /&gt;</p>

<p>Mozilla Firefox is an open-source web browser, designed for standards&lt;br /&gt;
compliance, performance and portability.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.9.0-1
- Update to 140.9.0 ESR

Tue, 17 Feb 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.8.0-2
- Update to 140.8.0 ESR

Wed, 07 Jan 2026 GMT - Jan Horak &amp;lt;jhorak@redhat.com&amp;gt; - 140.7.0-1
- Update to 140.7.0 ESR

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cockpit-storaged-359-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 07:44:37 AM GMT</pubDate>
      <guid isPermaLink="false">dbc8aeb3220e8b65fafcf2797178fe9e941199efec8228fc726f76fa82b7bddc</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/cockpit-storaged-359-1.el10.noarch.rpm</link>
      <description><p><strong>cockpit-storaged</strong> - Cockpit user interface for storage, using udisks&lt;br /&gt;</p>

<p>The Cockpit component for managing storage.  This package uses udisks.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 359-1
- Bug fixes and translation updates

Wed, 18 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 358-1
- Networking: Add Wi-Fi support
- Cockpit Client updated to GTK 4
- Bugfixes and translation updates

Fri, 27 Feb 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 357-1
- lib: Use browser context menu on shift
- bridge: support Python 3.14 on old kernels (RHEL 8)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cockpit-packagekit-359-1.el10.noarch</title>
      <pubDate>Mon, 30 Mar 2026 07:44:37 AM GMT</pubDate>
      <guid isPermaLink="false">ff5e9dbce67bff24e60d872a3f5bc7bd43dbd74578f9981a96b90edbef3de954</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/cockpit-packagekit-359-1.el10.noarch.rpm</link>
      <description><p><strong>cockpit-packagekit</strong> - Cockpit user interface for packages&lt;br /&gt;</p>

<p>The Cockpit components for installing OS updates and Cockpit add-ons,&lt;br /&gt;
via PackageKit.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 359-1
- Bug fixes and translation updates

Wed, 18 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 358-1
- Networking: Add Wi-Fi support
- Cockpit Client updated to GTK 4
- Bugfixes and translation updates

Fri, 27 Feb 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 357-1
- lib: Use browser context menu on shift
- bridge: support Python 3.14 on old kernels (RHEL 8)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>selinux-policy-devel-42.1.19-1.el10.noarch</title>
      <pubDate>Fri, 27 Mar 2026 03:41:25 PM GMT</pubDate>
      <guid isPermaLink="false">2788a666dd1d82efab615c6cfa57c3bdb1f067c51c3ccef2f5d7039b9dfa583e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/selinux-policy-devel-42.1.19-1.el10.noarch.rpm</link>
      <description><p><strong>selinux-policy-devel</strong> - SELinux policy development files&lt;br /&gt;</p>

<p>SELinux policy development package.&lt;br /&gt;
This package contains:&lt;br /&gt;
- interfaces, macros, and patterns for policy development&lt;br /&gt;
- a policy example&lt;br /&gt;
- the macro-expander utility&lt;br /&gt;
and some additional files.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Zdenek Pytela &amp;lt;zpytela@redhat.com&amp;gt; - 42.1.19-1
- Label the greetd login manager framework as a display manager
Resolves: RHEL-147638
- Allow sysadm user connect to lvm over a unix stream socket
Resolves: RHEL-153729
- Allow virtqemud map vhost net device
Resolves: RHEL-141541
- Allow virtqemud_t send kill signal to svirt_tcg_t
Resolves: RHEL-69913
- Allow virtqemud_t get priority of a svirt_t process
Resolves: RHEL-69920
- Dontaudit tlshd write generic certificate dirs
Resolves: RHEL-152619
- Allow redis_t to create netlink_rdma_socket
Resolves: RHEL-154814
- Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
Resolves: RHEL-140212

Tue, 10 Mar 2026 GMT - Vit Mojzis &amp;lt;vmojzis@redhat.com&amp;gt; - 42.1.18.4
- Rebuild because of a missing target tag
Resolves: RHEL-152308

Fri, 27 Feb 2026 GMT - Vit Mojzis &amp;lt;vmojzis@redhat.com&amp;gt; - 42.1.18-2
- Rebuild for SELinux userspace 3.10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-libnvme-1.16.1-3.el10.aarch64</title>
      <pubDate>Fri, 27 Mar 2026 12:59:56 PM GMT</pubDate>
      <guid isPermaLink="false">ddc36c4a4863023e1de6dfa97325d799dbdbeda9cb7cebe4980602396db71c02</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3-libnvme-1.16.1-3.el10.aarch64.rpm</link>
      <description><p><strong>python3-libnvme</strong> - Python3 bindings for libnvme&lt;br /&gt;</p>

<p>This package contains Python bindings for libnvme.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Maurizio Lombardi &amp;lt;mlombard@redhat.com&amp;gt; - 1.16.1-3
- Fix linked list corruption (RHEL-156539)

Wed, 19 Nov 2025 GMT - Maurizio Lombardi &amp;lt;mlombard@redhat.com&amp;gt; - 1.16.1-2
- Fix gating tests for RHEL-127740

Wed, 12 Nov 2025 GMT - Maurizio Lombardi &amp;lt;mlombard@redhat.com&amp;gt; - 1.16.1-1
- Rebase to version 1.16.1 (RHEL-127740)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cockpit-files-39-1.el10.noarch</title>
      <pubDate>Fri, 27 Mar 2026 10:30:48 AM GMT</pubDate>
      <guid isPermaLink="false">75036c360734e67259072517771882fcd0f83e5fa1275e1e15535536d4c49078</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/cockpit-files-39-1.el10.noarch.rpm</link>
      <description><p><strong>cockpit-files</strong> - A filesystem browser for Cockpit&lt;br /&gt;</p>

<p>A filesystem browser for Cockpit</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 39-1
- Bugfixes and translation updates

Wed, 18 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 38-1
- Add discard changes dialog
- Bugfixes and translation updates

Thu, 26 Feb 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 37-1
- Bug fixes and translation updates

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cockpit-podman-124-1.el10.noarch</title>
      <pubDate>Fri, 27 Mar 2026 10:30:25 AM GMT</pubDate>
      <guid isPermaLink="false">d14f6956c76e482943fba2c237e4f5870b66bfd2bc8df5d875dedf44fbf53f50</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/cockpit-podman-124-1.el10.noarch.rpm</link>
      <description><p><strong>cockpit-podman</strong> - Cockpit component for Podman containers&lt;br /&gt;</p>

<p>The Cockpit user interface for Podman containers.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 124-1
- Translation and dependency updates

Wed, 18 Mar 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 123-1
- Don't show Quadlet template units
- Handle quadlet lifecycle errors
- Translation update

Thu, 26 Feb 2026 GMT - Packit &amp;lt;hello@packit.dev&amp;gt; - 122-1
- Show description, version and documentation image labels
- Bug fixes and translation updates

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssh-keysign-9.9p1-24.el10.aarch64</title>
      <pubDate>Fri, 27 Mar 2026 09:02:06 AM GMT</pubDate>
      <guid isPermaLink="false">5033285b36418e61f5b317608b6904f58b3705a1df91dbfccc21d42046d95fb7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/openssh-keysign-9.9p1-24.el10.aarch64.rpm</link>
      <description><p><strong>openssh-keysign</strong> - A helper program used for host-based authentication&lt;br /&gt;</p>

<p>OpenSSH is a free version of SSH (Secure SHell), a program for logging&lt;br /&gt;
into and executing commands on a remote machine. ssh-keysign is a&lt;br /&gt;
helper program used for host-based authentication disabled by default.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-24
- Fix typo in SPDX license name
  Resolves: RHEL-161464

Wed, 18 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-23
- Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
  Resolves: RHEL-88565
- Fix duplicate audit log entry when destroying ed25519 private keys
  Resolves: RHEL-46782
- Fix typo in GSSAPIProxyS4U2Services
  Related: RHEL-92932

Thu, 12 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-22
- Remove recommendation of p11-kit
  Resolves: RHEL-139070
- Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
  in sshd_config should count when defined multiple times
  Resolves: RHEL-150365
- Fix mistracking of MaxStartups process exits in some situations
  Resolves: RHEL-121768
- Fix GSSAPI authentication indicator issues found by AI
  Resolves: RHEL-154309
- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155813

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openssh-askpass-9.9p1-24.el10.aarch64</title>
      <pubDate>Fri, 27 Mar 2026 09:02:06 AM GMT</pubDate>
      <guid isPermaLink="false">0d9fa25e238f47a308fc5a742d66726fad6e34f2ed7e90e9e5b084aac10a6d89</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/openssh-askpass-9.9p1-24.el10.aarch64.rpm</link>
      <description><p><strong>openssh-askpass</strong> - A passphrase dialog for OpenSSH and X&lt;br /&gt;</p>

<p>OpenSSH is a free version of SSH (Secure SHell), a program for logging&lt;br /&gt;
into and executing commands on a remote machine. This package contains&lt;br /&gt;
an X11 passphrase dialog for OpenSSH.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-24
- Fix typo in SPDX license name
  Resolves: RHEL-161464

Wed, 18 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-23
- Don't negotiate non-FIPS algorithms in ssh-keyscan key exchange in FIPS mode
  Resolves: RHEL-88565
- Fix duplicate audit log entry when destroying ed25519 private keys
  Resolves: RHEL-46782
- Fix typo in GSSAPIProxyS4U2Services
  Related: RHEL-92932

Thu, 12 Mar 2026 GMT - Zoltan Fridrich &amp;lt;zfridric@redhat.com&amp;gt; - 9.9p1-22
- Remove recommendation of p11-kit
  Resolves: RHEL-139070
- Only the first value of MaxStartups, PerSourceNetBlockSize and IPQoS
  in sshd_config should count when defined multiple times
  Resolves: RHEL-150365
- Fix mistracking of MaxStartups process exits in some situations
  Resolves: RHEL-121768
- Fix GSSAPI authentication indicator issues found by AI
  Resolves: RHEL-154309
- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155813

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python-unversioned-command-3.12.12-6.el10.noarch</title>
      <pubDate>Fri, 27 Mar 2026 08:06:00 AM GMT</pubDate>
      <guid isPermaLink="false">dc97241935e6c79694755419b945d2c654d9f68c1f3aa27bd921f9a85b379b53</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python-unversioned-command-3.12.12-6.el10.noarch.rpm</link>
      <description><p><strong>python-unversioned-command</strong> - The "python" command that runs Python 3&lt;br /&gt;</p>

<p>This package contains /usr/bin/python - the "python" command that runs Python 3.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-6
- Security fix for CVE-2026-4519
Resolves: RHEL-158079

Mon, 09 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-5
- Rebuilding previous fixes for different build target
Related: RHEL-143057, RHEL-143109, RHEL-144854

Fri, 27 Feb 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-4
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143057
Resolves: RHEL-143109
Resolves: RHEL-144854

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-tkinter-3.12.12-6.el10.aarch64</title>
      <pubDate>Fri, 27 Mar 2026 08:06:00 AM GMT</pubDate>
      <guid isPermaLink="false">aadd5389e2b1dab7976eb24eb728991c0eb109b73360c0ec78df765cbb073050</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3-tkinter-3.12.12-6.el10.aarch64.rpm</link>
      <description><p><strong>python3-tkinter</strong> - A GUI toolkit for Python&lt;br /&gt;</p>

<p>The Tkinter (Tk interface) library is a graphical user interface toolkit for&lt;br /&gt;
the Python programming language.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-6
- Security fix for CVE-2026-4519
Resolves: RHEL-158079

Mon, 09 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-5
- Rebuilding previous fixes for different build target
Related: RHEL-143057, RHEL-143109, RHEL-144854

Fri, 27 Feb 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-4
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143057
Resolves: RHEL-143109
Resolves: RHEL-144854

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-devel-3.12.12-6.el10.aarch64</title>
      <pubDate>Fri, 27 Mar 2026 08:06:00 AM GMT</pubDate>
      <guid isPermaLink="false">be7ab7652957606bbb40ea5b40d7288c41b9764ce23612271011208d6e33c771</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3-devel-3.12.12-6.el10.aarch64.rpm</link>
      <description><p><strong>python3-devel</strong> - Libraries and header files needed for Python development&lt;br /&gt;</p>

<p>This package contains the header files and configuration needed to compile&lt;br /&gt;
Python extension modules (typically written in C or C++), to embed Python&lt;br /&gt;
into other programs, and to make binary distributions for Python libraries.&lt;br /&gt;
&lt;br /&gt;
It also contains the necessary macros to build RPM packages with Python modules&lt;br /&gt;
and 2to3 tool, an automatic source converter from Python 2.X.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-6
- Security fix for CVE-2026-4519
Resolves: RHEL-158079

Mon, 09 Mar 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-5
- Rebuilding previous fixes for different build target
Related: RHEL-143057, RHEL-143109, RHEL-144854

Fri, 27 Feb 2026 GMT - Tomáš Hrnčiar &amp;lt;thrnciar@redhat.com&amp;gt; - 3.12.12-4
- Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
Resolves: RHEL-143057
Resolves: RHEL-143109
Resolves: RHEL-144854

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>NetworkManager-libreswan-gnome-1.2.30-2.el10.aarch64</title>
      <pubDate>Fri, 27 Mar 2026 02:33:16 AM GMT</pubDate>
      <guid isPermaLink="false">b0e5ed72f46eadfcc76a7a0387ab8b58175aa9149d9aa5edf292ef470ec3f626</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/NetworkManager-libreswan-gnome-1.2.30-2.el10.aarch64.rpm</link>
      <description><p><strong>NetworkManager-libreswan-gnome</strong> - NetworkManager VPN plugin for libreswan - GNOME files&lt;br /&gt;</p>

<p>This package contains software for integrating VPN capabilities with&lt;br /&gt;
the libreswan server with NetworkManager (GNOME files).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Gris Ge &amp;lt;fge@redhat.com&amp;gt; - 1.2.30-2
- Fix support of leftsubnets and rightsubnets. (RHEL-155372)

Mon, 12 Jan 2026 GMT - Vladimír Beneš &amp;lt;vbenes@redhat.com&amp;gt; - 1.2.30-1
- Upgrade to 1.2.30
- Declare supports-safe-private-file-access (RHEL-140608)

Tue, 09 Dec 2025 GMT - Gris Ge &amp;lt;fge@redhat.com&amp;gt; - 1.2.29-1
- Upgrade to 1.2.29
- Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
- Support leftprotoport and rightprotoport options. (RHEL-130888)
- Fix error on duplicate key 'phase2alg'. (RHEL-128213)
- Fix import connection with RSA key. (RHEL-125174)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>NetworkManager-libreswan-1.2.30-2.el10.aarch64</title>
      <pubDate>Fri, 27 Mar 2026 02:33:16 AM GMT</pubDate>
      <guid isPermaLink="false">3209c7ab52d55518bffa3bd127ffe0df6df6e4774163584fa8fafd6f33e0b9f5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/NetworkManager-libreswan-1.2.30-2.el10.aarch64.rpm</link>
      <description><p><strong>NetworkManager-libreswan</strong> - NetworkManager VPN plug-in for IPsec VPN&lt;br /&gt;</p>

<p>This package contains software for integrating the libreswan VPN software&lt;br /&gt;
with NetworkManager and the GNOME desktop</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 27 Mar 2026 GMT - Gris Ge &amp;lt;fge@redhat.com&amp;gt; - 1.2.30-2
- Fix support of leftsubnets and rightsubnets. (RHEL-155372)

Mon, 12 Jan 2026 GMT - Vladimír Beneš &amp;lt;vbenes@redhat.com&amp;gt; - 1.2.30-1
- Upgrade to 1.2.30
- Declare supports-safe-private-file-access (RHEL-140608)

Tue, 09 Dec 2025 GMT - Gris Ge &amp;lt;fge@redhat.com&amp;gt; - 1.2.29-1
- Upgrade to 1.2.29
- Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-67307)
- Support leftprotoport and rightprotoport options. (RHEL-130888)
- Fix error on duplicate key 'phase2alg'. (RHEL-128213)
- Fix import connection with RSA key. (RHEL-125174)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3.14-tkinter-3.14.3-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 10:19:30 PM GMT</pubDate>
      <guid isPermaLink="false">60ccbe04e7d04e791782e93bf38ad713969b995ced8a7316666fe8f54a54cccb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3.14-tkinter-3.14.3-2.el10.aarch64.rpm</link>
      <description><p><strong>python3.14-tkinter</strong> - A GUI toolkit for Python&lt;br /&gt;</p>

<p>The Tkinter (Tk interface) library is a graphical user interface toolkit for&lt;br /&gt;
the Python programming language.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Lumír Balhar &amp;lt;lbalhar@redhat.com&amp;gt; - 3.14.3-2
- Security fix for CVE-2026-4519
Resolves: RHEL-158114

Wed, 04 Feb 2026 GMT - Karolina Surma &amp;lt;ksurma@redhat.com&amp;gt; - 3.14.3-1
- Update to Python 3.14.3
- Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
CVE-2025-15367
Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Mon, 19 Jan 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.14.2-3
- Support OpenSSL FIPS mode
- Disable the builtin hashlib hashes except blake2
Related: RHEL-120788

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3.14-libs-3.14.3-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 10:19:30 PM GMT</pubDate>
      <guid isPermaLink="false">0c5c85c59a013cd9299f1143fc32bade954a1912ee4c670678e4c4f1a40af2cf</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3.14-libs-3.14.3-2.el10.aarch64.rpm</link>
      <description><p><strong>python3.14-libs</strong> - Python runtime libraries&lt;br /&gt;</p>

<p>This package contains runtime libraries for use by Python:&lt;br /&gt;
- the majority of the Python standard library&lt;br /&gt;
- a dynamically linked library for use by applications that embed Python as&lt;br /&gt;
  a scripting language, and by the main "python3.14" executable</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Lumír Balhar &amp;lt;lbalhar@redhat.com&amp;gt; - 3.14.3-2
- Security fix for CVE-2026-4519
Resolves: RHEL-158114

Wed, 04 Feb 2026 GMT - Karolina Surma &amp;lt;ksurma@redhat.com&amp;gt; - 3.14.3-1
- Update to Python 3.14.3
- Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
CVE-2025-15367
Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Mon, 19 Jan 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.14.2-3
- Support OpenSSL FIPS mode
- Disable the builtin hashlib hashes except blake2
Related: RHEL-120788

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3.14-devel-3.14.3-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 10:19:30 PM GMT</pubDate>
      <guid isPermaLink="false">d5be1f704f3f1f406d416e718e983087e2d367fd22b0cc0f0efda987fadaed8b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3.14-devel-3.14.3-2.el10.aarch64.rpm</link>
      <description><p><strong>python3.14-devel</strong> - Libraries and header files needed for Python development&lt;br /&gt;</p>

<p>This package contains the header files and configuration needed to compile&lt;br /&gt;
Python extension modules (typically written in C or C++), to embed Python&lt;br /&gt;
into other programs, and to make binary distributions for Python libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Lumír Balhar &amp;lt;lbalhar@redhat.com&amp;gt; - 3.14.3-2
- Security fix for CVE-2026-4519
Resolves: RHEL-158114

Wed, 04 Feb 2026 GMT - Karolina Surma &amp;lt;ksurma@redhat.com&amp;gt; - 3.14.3-1
- Update to Python 3.14.3
- Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
CVE-2025-15367
Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Mon, 19 Jan 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.14.2-3
- Support OpenSSL FIPS mode
- Disable the builtin hashlib hashes except blake2
Related: RHEL-120788

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3.14-3.14.3-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 10:19:30 PM GMT</pubDate>
      <guid isPermaLink="false">e2819bbd302b2c517141303cfcce0a4246714759a137492641041cd0399d5e64</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3.14-3.14.3-2.el10.aarch64.rpm</link>
      <description><p><strong>python3.14</strong> - Version 3.14 of the Python interpreter&lt;br /&gt;</p>

<p>Python 3.14 is an accessible, high-level, dynamically typed, interpreted&lt;br /&gt;
programming language, designed with an emphasis on code readability.&lt;br /&gt;
It includes an extensive standard library, and has a vast ecosystem of&lt;br /&gt;
third-party libraries.&lt;br /&gt;
&lt;br /&gt;
The python3.14 package provides the "python3.14" executable: the reference&lt;br /&gt;
interpreter for the Python language, version 3.&lt;br /&gt;
The majority of its standard library is provided in the python3.14-libs package,&lt;br /&gt;
which should be installed automatically along with python3.14.&lt;br /&gt;
The remaining parts of the Python standard library are broken out into the&lt;br /&gt;
python3.14-tkinter and python3.14-test packages, which may need to be installed&lt;br /&gt;
separately.&lt;br /&gt;
&lt;br /&gt;
Documentation for Python is provided in the python3.14-docs package.&lt;br /&gt;
&lt;br /&gt;
Packages containing additional libraries for Python are generally named with&lt;br /&gt;
the "python3.14-" prefix.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 26 Mar 2026 GMT - Lumír Balhar &amp;lt;lbalhar@redhat.com&amp;gt; - 3.14.3-2
- Security fix for CVE-2026-4519
Resolves: RHEL-158114

Wed, 04 Feb 2026 GMT - Karolina Surma &amp;lt;ksurma@redhat.com&amp;gt; - 3.14.3-1
- Update to Python 3.14.3
- Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
CVE-2025-15367
Resolves: RHEL-144855, RHEL-143058, RHEL-143111

Mon, 19 Jan 2026 GMT - Charalampos Stratakis &amp;lt;cstratak@redhat.com&amp;gt; - 3.14.2-3
- Support OpenSSL FIPS mode
- Disable the builtin hashlib hashes except blake2
Related: RHEL-120788

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>cscope-15.9-31.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 08:12:50 PM GMT</pubDate>
      <guid isPermaLink="false">cad26237f332bb97f1a40f702ef7ad968f6206756059a1a1b28da99dfd8f17d7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/cscope-15.9-31.el10.aarch64.rpm</link>
      <description><p><strong>cscope</strong> - C source code tree search and browse tool&lt;br /&gt;</p>

<p>cscope is a mature, ncurses based, C source code tree browsing tool.  It&lt;br /&gt;
allows users to search large source code bases for variables, functions,&lt;br /&gt;
macros, etc, as well as perform general regex and plain text searches.&lt;br /&gt;
Results are returned in lists, from which the user can select individual&lt;br /&gt;
matches for use in file editing.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Vladislav Dronov &amp;lt;vdronov@redhat.com&amp;gt; - 15.9-31
- Add two latest distribution patches (RHEL-158207)
- Correct the erroneous brace count caused by the unbalanced { }
- Make it possible to add the new keywords

Thu, 31 Oct 2024 GMT - Vladis Dronov &amp;lt;vdronov@redhat.com&amp;gt; - 15.9-26
- Update cscope to 15.9-26 from Fedora (RHEL-65464)
- Fix signal handling at exit
- Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
- Minor edits in the rpm scripts
- Make xemacs a bcond

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 15.9-25
- Bump release for October 2024 mass rebuild (RHEL-64018)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>virt-firmware-rs-26.4-1.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 07:48:38 PM GMT</pubDate>
      <guid isPermaLink="false">3b60b1eaafd222bc2bc09fd45b49aada1afe7abb74a046f476521393ff6a6d67</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/virt-firmware-rs-26.4-1.el10.aarch64.rpm</link>
      <description><p><strong>virt-firmware-rs</strong> - Tools for EFI and virtual machine firmware&lt;br /&gt;</p>

<p>A collection of tools to deal with efi and virtual machine&lt;br /&gt;
firmware.  This package has linux tools.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Gerd Hoffmann &amp;lt;kraxel@redhat.com&amp;gt; - 26.4-1
- update to version 26.4

Wed, 14 Jan 2026 GMT - Gerd Hoffmann &amp;lt;kraxel@redhat.com&amp;gt; - 26.1-1
- update to version v26.1

Thu, 18 Dec 2025 GMT - Gerd Hoffmann &amp;lt;kraxel@redhat.com&amp;gt; - 25.12-3
- add tmt config

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-test-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">f0784843a648afd6b756645b2a872f522cd510d5d7bc3f076c91395d2af39278</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-test-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-test</strong> - The test suite distributed with MariaDB&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server.&lt;br /&gt;
MariaDB is a community developed fork from MySQL.&lt;br /&gt;
This package contains the regression test suite distributed with the MariaDB&lt;br /&gt;
sources.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-server-utils-3:11.8.6-2.el10.noarch</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">3bbdca0baf9cc28132f3453f5c156bb911d0163cc2d39be16062edc8d76d77c4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-server-utils-11.8.6-2.el10.noarch.rpm</link>
      <description><p><strong>mariadb11.8-server-utils</strong> - Non-essential server utilities for MariaDB/MySQL applications&lt;br /&gt;</p>

<p>This package contains all non-essential server utilities and scripts for&lt;br /&gt;
managing databases. It also contains all utilities requiring Perl and it is&lt;br /&gt;
the only MariaDB sub-package with the corresponding client-utils one, except&lt;br /&gt;
test subpackage, that depends on Perl.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-server-galera-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">dc5d350c67a4040238f0b1291e2101df464c86a8a53ab1018c3e75e5931c9780</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-server-galera-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-server-galera</strong> - The configuration files and scripts for galera replication&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server. It is a&lt;br /&gt;
client/server implementation consisting of a server daemon (mariadbd)&lt;br /&gt;
and many different client programs and libraries. This package contains&lt;br /&gt;
added files to allow MariaDB server to operate as a Galera cluster&lt;br /&gt;
member. MariaDB is a community developed fork originally from MySQL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-server-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">d7bf7e1ef17ca169f654c4fbfaae6d80e8512ce008f6309af900ebb955940f2e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-server-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-server</strong> - The MariaDB server and related files&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server. It is a&lt;br /&gt;
client/server implementation consisting of a server daemon (mariadbd)&lt;br /&gt;
and many different client programs and libraries. This package contains&lt;br /&gt;
the MariaDB server and some accompanying files and directories.&lt;br /&gt;
MariaDB is a community developed fork from MySQL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-pam-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">2dfb97b07a651236166963fa33e959c4bc486e12f9bd83d82b2e5f9da86a2989</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-pam-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-pam</strong> - PAM authentication plugin for the MariaDB server&lt;br /&gt;</p>

<p>PAM authentication server-side plugin for MariaDB.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-oqgraph-engine-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">c162ad506e7ba9593f1172adee23013ca647f99649f9e0a71289af1d476e61d0</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-oqgraph-engine-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-oqgraph-engine</strong> - The Open Query GRAPH engine for MariaDB&lt;br /&gt;</p>

<p>The package provides Open Query GRAPH engine (OQGRAPH) as plugin for MariaDB&lt;br /&gt;
database server. OQGRAPH is a computation engine allowing hierarchies and more&lt;br /&gt;
complex graph structures to be handled in a relational fashion. In a nutshell,&lt;br /&gt;
tree structures and friend-of-a-friend style searches can now be done using&lt;br /&gt;
standard SQL syntax, and results joined onto other tables.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-gssapi-server-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">8818b6dcbe6dbbfd3a0852fed54dfd0222953b29c0c5fbc74c027d98ce4d899a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-gssapi-server-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-gssapi-server</strong> - GSSAPI authentication plugin for server&lt;br /&gt;</p>

<p>GSSAPI authentication server-side plugin for MariaDB for passwordless login.&lt;br /&gt;
This plugin includes support for Kerberos on Unix.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-errmsg-3:11.8.6-2.el10.noarch</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">d0e1b0d6045f4e01ce9a46af78654d0d9180658a85b3323768f3c75e0176e48b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-errmsg-11.8.6-2.el10.noarch.rpm</link>
      <description><p><strong>mariadb11.8-errmsg</strong> - The error messages files required by server and embedded&lt;br /&gt;</p>

<p>The package provides error messages files for the MariaDB daemon and the&lt;br /&gt;
embedded server. You will need to install this package to use any of those&lt;br /&gt;
MariaDB packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-embedded-devel-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">2cd45ef5bdce1ea9dfae03eb54e890239844872d3f9f4ebd1f244612626c68b4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-embedded-devel-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-embedded-devel</strong> - Development files for MariaDB as an embeddable library&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server.&lt;br /&gt;
MariaDB is a community developed fork from MySQL.&lt;br /&gt;
This package contains files needed for developing and testing with&lt;br /&gt;
the embedded version of the MariaDB server.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-embedded-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">2b15ce8ced27299901d5e889bfdca5c5f692a9edb462b5e87fc7bea34797c983</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-embedded-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-embedded</strong> - MariaDB as an embeddable library&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server. This&lt;br /&gt;
package contains a version of the MariaDB server that can be embedded&lt;br /&gt;
into a client application instead of running as a separate process.&lt;br /&gt;
MariaDB is a community developed fork from MySQL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-devel-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">c24a95d2a3a47159509eb9a4c4c9e6179723c7ffd7849e0123a66be7bd93412a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-devel-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-devel</strong> - Files for development of MariaDB/MySQL applications&lt;br /&gt;</p>

<p>MariaDB is a multi-user, multi-threaded SQL database server.&lt;br /&gt;
MariaDB is a community developed branch of MySQL.&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
&lt;br /&gt;
This package contains everything needed for developing MariaDB/MySQL server&lt;br /&gt;
plugins and applications. For developing client applications, use&lt;br /&gt;
mariadb-connector-c package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-common-3:11.8.6-2.el10.noarch</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">86df2bf9655b5270c32582190e0100f003ad203fc97a550b3717344b567065ea</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-common-11.8.6-2.el10.noarch.rpm</link>
      <description><p><strong>mariadb11.8-common</strong> - The shared files required by server and client&lt;br /&gt;</p>

<p>The package provides the essential shared files for any MariaDB program.&lt;br /&gt;
You will need to install this package to use any other MariaDB package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-client-utils-3:11.8.6-2.el10.noarch</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">1db77cda6c60045779368dac3485a73e239a0f843cd1cfaffb6b572c60443dc8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-client-utils-11.8.6-2.el10.noarch.rpm</link>
      <description><p><strong>mariadb11.8-client-utils</strong> - Non-essential client utilities for MariaDB/MySQL applications&lt;br /&gt;</p>

<p>This package contains all non-essential client utilities and scripts for&lt;br /&gt;
managing databases. It also contains all utilities requiring Perl and it is the&lt;br /&gt;
only MariaDB sub-package with the corresponding server-utils one, except test&lt;br /&gt;
subpackage, that depends on Perl.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-backup-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">16e1e2f805adc2c9603dcc73b761beedaf0e73c301c6db5ce5e01a337cab6ca1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-backup-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8-backup</strong> - The mariabackup tool for physical online backups&lt;br /&gt;</p>

<p>MariaDB Backup is an open source tool provided by MariaDB for performing&lt;br /&gt;
physical online backups of InnoDB, Aria and MyISAM tables.&lt;br /&gt;
For InnoDB, "hot online" backups are possible.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mariadb11.8-3:11.8.6-2.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 03:14:58 PM GMT</pubDate>
      <guid isPermaLink="false">8d91bf62a46695023e71f76ebb3d77ae2555f00acd11adef0d127bb5cdc857d7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mariadb11.8-11.8.6-2.el10.aarch64.rpm</link>
      <description><p><strong>mariadb11.8</strong> - A very fast and robust SQL database server&lt;br /&gt;</p>

<p>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded&lt;br /&gt;
SQL database server. It is a client/server implementation consisting of&lt;br /&gt;
a server daemon (mariadbd) and many different client programs and libraries.&lt;br /&gt;
The base package contains the standard MariaDB/MySQL client programs and&lt;br /&gt;
utilities.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Feb 2026 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.6-2
- Added a fix for SIGSEGV when using skip-grant-tables
- Resolves: RHBZ#2438390

Fri, 06 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 3:11.8.6-1
- Rebase to 11.8.6

Mon, 01 Dec 2025 GMT - Pavol Sloboda &amp;lt;psloboda@redhat.com&amp;gt; - 3:11.8.5-1
- Rebase to 11.8.5

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>galera-26.4.25-1.el10.aarch64</title>
      <pubDate>Thu, 26 Mar 2026 12:59:07 PM GMT</pubDate>
      <guid isPermaLink="false">d88ea509259f8b2b2def4a4124779e5712a9a04246e62828a0484dd6f3736a2b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/galera-26.4.25-1.el10.aarch64.rpm</link>
      <description><p><strong>galera</strong> - Synchronous multi-master wsrep provider (replication engine)&lt;br /&gt;</p>

<p>Galera is a fast synchronous multimaster wsrep provider (replication engine)&lt;br /&gt;
for transactional databases and similar applications. For more information&lt;br /&gt;
about wsrep API see https://github.com/codership/wsrep-API repository. For a&lt;br /&gt;
description of Galera replication engine see https://www.galeracluster.com web.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Sun, 08 Feb 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 26.4.25-1
- Rebased to 26.4.25

Tue, 06 Jan 2026 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 26.4.24-1
- Rebase to 26.4.24

Fri, 08 Aug 2025 GMT - Michal Schorm &amp;lt;mschorm@redhat.com&amp;gt; - 26.4.23-1
- Rebase to 26.4.23

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-shell-49.5-1.el10.aarch64</title>
      <pubDate>Wed, 25 Mar 2026 11:29:30 PM GMT</pubDate>
      <guid isPermaLink="false">090a503fdebc2a11c7b29b07773a1fcd5108f031a4787aaba1d38291b8730300</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gnome-shell-49.5-1.el10.aarch64.rpm</link>
      <description><p><strong>gnome-shell</strong> - Window management and application launching for GNOME&lt;br /&gt;</p>

<p>GNOME Shell provides core user interface functions for the GNOME 3 desktop,&lt;br /&gt;
like switching to windows and launching applications. GNOME Shell takes&lt;br /&gt;
advantage of the capabilities of modern graphics hardware and introduces&lt;br /&gt;
innovative user interface concepts to provide a visually attractive and&lt;br /&gt;
easy to use experience.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Florian Müllner &amp;lt;fmuellner@redhat.com&amp;gt; - 49.5-1
- Update to 49.5

Wed, 25 Mar 2026 GMT - Florian Müllner &amp;lt;fmuellner@redhat.com&amp;gt; - 49.4-3
- rpminspect: Use correct paths in runpath exception

Tue, 17 Feb 2026 GMT - Joan Torres Lopez &amp;lt;joantolo@redhat.com&amp;gt; - 49.4-2
- Update passwordless GDM implementation to match upstream

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libarchive-devel-3.7.7-7.el10.aarch64</title>
      <pubDate>Wed, 25 Mar 2026 12:35:42 PM GMT</pubDate>
      <guid isPermaLink="false">431531be9825c2a6256b95b291591acbaacc79fd629174abf51cd4d67441b877</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/libarchive-devel-3.7.7-7.el10.aarch64.rpm</link>
      <description><p><strong>libarchive-devel</strong> - Development files for libarchive&lt;br /&gt;</p>

<p>The libarchive-devel package contains libraries and header files for&lt;br /&gt;
developing applications that use libarchive.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-7
- Release bump for typo in dist

Tue, 24 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-6
- Release bump

Mon, 16 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-5
- Resolves: CVE-2026-4111

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>bsdtar-3.7.7-7.el10.aarch64</title>
      <pubDate>Wed, 25 Mar 2026 12:35:42 PM GMT</pubDate>
      <guid isPermaLink="false">9c9e674f5bebdda2d3c6498d1f5743da6519b394a00d3df0452dd5e8dd5ee8c9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/bsdtar-3.7.7-7.el10.aarch64.rpm</link>
      <description><p><strong>bsdtar</strong> - Manipulate tape archives&lt;br /&gt;</p>

<p>The bsdtar package contains standalone bsdtar utility split off regular&lt;br /&gt;
libarchive packages.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 25 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-7
- Release bump for typo in dist

Tue, 24 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-6
- Release bump

Mon, 16 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 3.7.7-5
- Resolves: CVE-2026-4111

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-webapps-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">74d65380bc273bb51a8e4d405fa60f3b76c9b3f01c3fbf48583673ccd83a9c7a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/tomcat9-webapps-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-webapps</strong> - The ROOT web application for Apache Tomcat&lt;br /&gt;</p>

<p>The ROOT web application for Apache Tomcat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-servlet-4.0-api-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">9fb89df4e40225c8281068b61e9cd20ae425774e68e6a3c6dcba54ada49ef9a9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/tomcat9-servlet-4.0-api-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-servlet-4.0-api</strong> - Apache Tomcat Java Servlet v4.0 API Implementation Classes&lt;br /&gt;</p>

<p>Apache Tomcat Servlet API Implementation Classes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-lib-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">d001fd353997ab5679fe22065b96fa5c51d93e36ccc6609a6ccc2aefafff7643</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/tomcat9-lib-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-lib</strong> - Libraries needed to run the Tomcat Web container&lt;br /&gt;</p>

<p>Libraries needed to run the Tomcat Web container.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-jsp-2.3-api-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">b5fe0bd8c6f6408c2f3d1cfb0da7ebe54fe2ba4d1344c90dda71f35c3e43561b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/tomcat9-jsp-2.3-api-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-jsp-2.3-api</strong> - Apache Tomcat JavaServer Pages v2.3 API Implementation Classes&lt;br /&gt;</p>

<p>Apache Tomcat JSP API Implementation Classes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-el-3.0-api-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">1849a4f5c41c3e574377a50a8517c7c35b2cdfd755288c6b73af764fdc6bdd1b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/tomcat9-el-3.0-api-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-el-3.0-api</strong> - Apache Tomcat Expression Language v3.0 API Implementation Classes&lt;br /&gt;</p>

<p>Apache Tomcat EL API Implementation Classes.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-docs-webapp-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">af8dc44bc3599b312a7a9ad53d79458eee4de70c99da89dc7e8b2d6a5be302d9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/tomcat9-docs-webapp-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-docs-webapp</strong> - The docs web application for Apache Tomcat&lt;br /&gt;</p>

<p>The docs web application for Apache Tomcat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-admin-webapps-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">984daf9446ec16397866923951f3e0464b1082a79e5a7f023c54003248bad66e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/tomcat9-admin-webapps-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9-admin-webapps</strong> - The host-manager and manager web applications for Apache Tomcat&lt;br /&gt;</p>

<p>The host-manager and manager web applications for Apache Tomcat.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>tomcat9-1:9.0.110-2.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 05:51:27 PM GMT</pubDate>
      <guid isPermaLink="false">e08a5af68e378b21017151e73bef197cb112c9019905dcee40ac5532ae6f740a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/tomcat9-9.0.110-2.el10.noarch.rpm</link>
      <description><p><strong>tomcat9</strong> - Apache Servlet/JSP Engine, RI for Servlet 4.0/JSP 2.3 API&lt;br /&gt;</p>

<p>Tomcat is the servlet container that is used in the official Reference&lt;br /&gt;
Implementation for the Java Servlet and JavaServer Pages technologies.&lt;br /&gt;
The Java Servlet and JavaServer Pages specifications are developed by&lt;br /&gt;
Sun under the Java Community Process.&lt;br /&gt;
&lt;br /&gt;
Tomcat is developed in an open and participatory environment and&lt;br /&gt;
released under the Apache Software License version 2.0. Tomcat is intended&lt;br /&gt;
to be a collaboration of the best-of-breed developers from around the world.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-2
- Resolves: RHEL-158962 NPE in tomcat9 when used with TLS enabled custom connector

Wed, 11 Feb 2026 GMT - Coty Sutherland &amp;lt;csutherl@redhat.com&amp;gt; - 1:9.0.110-1
- Resolves: RHEL-148687
  Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support

Fri, 23 Jan 2026 GMT - Pietro Meloni &amp;lt;pmeloni@redhat.com&amp;gt; - 1:9.0.87-9
- Resolves: RHEL-124496
  tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
- Resolves: RHEL-132559
  tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>scap-security-guide-doc-0.1.80-1.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 02:49:56 PM GMT</pubDate>
      <guid isPermaLink="false">500da6931e009029b710cee10dd540c1e268ef8c3bbd6eb437f7792ba5dde953</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/scap-security-guide-doc-0.1.80-1.el10.noarch.rpm</link>
      <description><p><strong>scap-security-guide-doc</strong> - HTML formatted security guides generated from XCCDF benchmarks&lt;br /&gt;</p>

<p>The scap-security-guide-doc package contains HTML formatted documents containing&lt;br /&gt;
hardening guidances that have been generated from XCCDF benchmarks&lt;br /&gt;
present in scap-security-guide package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Vojtech Polasek &amp;lt;vpolasek@redhat.com&amp;gt; - 0.1.80-1
- Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300)
- Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647)
- Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
- Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722)
- Corrected version in the description of CIS profiles (RHEL-143955)
- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059)

Mon, 05 Jan 2026 GMT - Jan Černý &amp;lt;jcerny@redhat.com&amp;gt; - 0.1.79-2
- Bump version and rebuild

Mon, 15 Dec 2025 GMT - Jan Černý &amp;lt;jcerny@redhat.com&amp;gt; - 0.1.79-1
- Update to the latest upstream release (RHEL-135774)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>scap-security-guide-0.1.80-1.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 02:49:56 PM GMT</pubDate>
      <guid isPermaLink="false">24759642f84630063c8cea14e15587a2181596eeba97bcccafe37935d3522dfa</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/scap-security-guide-0.1.80-1.el10.noarch.rpm</link>
      <description><p><strong>scap-security-guide</strong> - Security guidance and baselines in SCAP formats&lt;br /&gt;</p>

<p>The scap-security-guide project provides a guide for configuration of the&lt;br /&gt;
system from the final system's security point of view. The guidance is specified&lt;br /&gt;
in the Security Content Automation Protocol (SCAP) format and constitutes&lt;br /&gt;
a catalog of practical hardening advice, linked to government requirements&lt;br /&gt;
where applicable. The project bridges the gap between generalized policy&lt;br /&gt;
requirements and specific implementation guidelines. The system&lt;br /&gt;
administrator can use the oscap CLI tool from openscap-scanner package, or the&lt;br /&gt;
scap-workbench GUI tool from scap-workbench package to verify that the system&lt;br /&gt;
conforms to provided guideline. Refer to scap-security-guide(8) manual page for&lt;br /&gt;
further information.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Vojtech Polasek &amp;lt;vpolasek@redhat.com&amp;gt; - 0.1.80-1
- Import Red Hat quantum-resistant keys using sequoia commands (RHEL-127300)
- Rule audit_rules_privileged_commands adds architecture filters in audit rules (RHEL-142647)
- Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
- Add a new BSI profile to RHEL 10 that aligns to the BSI (Federal Office for Security Information in Germany) IT-Grundschutz Basic-Protection. (RHEL-134722)
- Corrected version in the description of CIS profiles (RHEL-143955)
- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-152059)

Mon, 05 Jan 2026 GMT - Jan Černý &amp;lt;jcerny@redhat.com&amp;gt; - 0.1.79-2
- Bump version and rebuild

Mon, 15 Dec 2025 GMT - Jan Černý &amp;lt;jcerny@redhat.com&amp;gt; - 0.1.79-1
- Update to the latest upstream release (RHEL-135774)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ncurses-term-6.4-15.20240127.el10.noarch</title>
      <pubDate>Tue, 24 Mar 2026 09:18:48 AM GMT</pubDate>
      <guid isPermaLink="false">a7541701dd34762f83d2fd4f2dc02b8c99d1aaa0bb989b262fcafcc1ecaa72df</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ncurses-term-6.4-15.20240127.el10.noarch.rpm</link>
      <description><p><strong>ncurses-term</strong> - Terminal descriptions&lt;br /&gt;</p>

<p>This package contains additional terminal descriptions not found in&lt;br /&gt;
the ncurses-base package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 24 Mar 2026 GMT - Miroslav Lichvar &amp;lt;mlichvar@redhat.com&amp;gt; 6.4-15.20240127
- fix buffer overflow in infocmp -i (CVE-2025-69720)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-14.20240127
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Mon, 24 Jun 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-13.20240127
- Bump release for June 2024 mass rebuild

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ncurses-devel-6.4-15.20240127.el10.aarch64</title>
      <pubDate>Tue, 24 Mar 2026 09:18:48 AM GMT</pubDate>
      <guid isPermaLink="false">cc3fa3e69b04508c2a0b8af4d3c9480841a7ed8706b3eee84132e163e079d0e1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ncurses-devel-6.4-15.20240127.el10.aarch64.rpm</link>
      <description><p><strong>ncurses-devel</strong> - Development files for the ncurses library&lt;br /&gt;</p>

<p>The header files and libraries for developing applications that use&lt;br /&gt;
the ncurses terminal handling library.&lt;br /&gt;
&lt;br /&gt;
Install the ncurses-devel package if you want to develop applications&lt;br /&gt;
which will use ncurses.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 24 Mar 2026 GMT - Miroslav Lichvar &amp;lt;mlichvar@redhat.com&amp;gt; 6.4-15.20240127
- fix buffer overflow in infocmp -i (CVE-2025-69720)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-14.20240127
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Mon, 24 Jun 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-13.20240127
- Bump release for June 2024 mass rebuild

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ncurses-c++-libs-6.4-15.20240127.el10.aarch64</title>
      <pubDate>Tue, 24 Mar 2026 09:18:48 AM GMT</pubDate>
      <guid isPermaLink="false">9e345abb329912229c89636e15ecc3665c81a85f242fe4b93f34c4164a152072</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ncurses-c++-libs-6.4-15.20240127.el10.aarch64.rpm</link>
      <description><p><strong>ncurses-c++-libs</strong> - Ncurses C++ bindings&lt;br /&gt;</p>

<p>The curses library routines are a terminal-independent method of&lt;br /&gt;
updating character screens with reasonable optimization.  The ncurses&lt;br /&gt;
(new curses) library is a freely distributable replacement for the&lt;br /&gt;
discontinued 4.4 BSD classic curses library.&lt;br /&gt;
&lt;br /&gt;
This package contains C++ bindings of the ncurses ABI version 6 libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 24 Mar 2026 GMT - Miroslav Lichvar &amp;lt;mlichvar@redhat.com&amp;gt; 6.4-15.20240127
- fix buffer overflow in infocmp -i (CVE-2025-69720)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-14.20240127
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Mon, 24 Jun 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 6.4-13.20240127
- Bump release for June 2024 mass rebuild

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-tools-11.9.0-3.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">bbff87663e5e431e4a0360f160ee5ade1d342d70ab6cd23c27a434dfebc14f66</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-pki-tools-11.9.0-3.el10.aarch64.rpm</link>
      <description><p><strong>idm-pki-tools</strong> - IdM PKI Tools Package&lt;br /&gt;</p>

<p>This package provides tools that can be used to help make&lt;br /&gt;
IdM PKI into a more complete and robust PKI solution.&lt;br /&gt;
&lt;br /&gt;
The utility "tpsclient" is a test tool that interacts with TPS.&lt;br /&gt;
This tool is useful to test TPS server without risking an actual smart card.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-server-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">8b5c6f0462b39aa725a8384263f1672e7720ffdd288c913904242a504379ff79</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-pki-server-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-server</strong> - IdM PKI Server Package&lt;br /&gt;</p>

<p>This package provides libraries and utilities needed by IdM PKI services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-kra-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">c6c150c0506707b84c6510e40868b5ee1bddccd6dc7089c63830c0db9265c2e9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-pki-kra-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-kra</strong> - IdM PKI KRA Package&lt;br /&gt;</p>

<p>IdM PKI Key Recovery Authority (KRA) is an optional subsystem that can act&lt;br /&gt;
as a key archival facility.  When configured in conjunction with the&lt;br /&gt;
Certificate Authority (CA), the KRA stores private encryption keys as part of&lt;br /&gt;
the certificate enrollment process.  The key archival mechanism is triggered&lt;br /&gt;
when a user enrolls in the PKI and creates the certificate request.  Using the&lt;br /&gt;
Certificate Request Message Format (CRMF) request format, a request is&lt;br /&gt;
generated for the user's private encryption key.  This key is then stored in&lt;br /&gt;
the KRA which is configured to store keys in an encrypted format that can only&lt;br /&gt;
be decrypted by several agents requesting the key at one time, providing for&lt;br /&gt;
protection of the public encryption keys for the users in the PKI deployment.&lt;br /&gt;
&lt;br /&gt;
Note that the KRA archives encryption keys; it does NOT archive signing keys,&lt;br /&gt;
since such archival would undermine non-repudiation properties of signing keys.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-java-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">cbeaf99b27e68b2bc26f43e6d059e84c4e90912dce16b98861d0be641331d246</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-pki-java-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-java</strong> - IdM PKI Base Java Package&lt;br /&gt;</p>

<p>This package provides common and client libraries for Java.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-ca-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">81124103de77948e3e9e133fbcc64568c875b6976b91c2a8ed48c5bc2dd2778d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-pki-ca-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-ca</strong> - IdM PKI CA Package&lt;br /&gt;</p>

<p>IdM PKI Certificate Authority (CA) is a required subsystem which issues,&lt;br /&gt;
renews, revokes, and publishes certificates as well as compiling and&lt;br /&gt;
publishing Certificate Revocation Lists (CRLs).&lt;br /&gt;
&lt;br /&gt;
The Certificate Authority can be configured as a self-signing Certificate&lt;br /&gt;
Authority, where it is the root CA, or it can act as a subordinate CA,&lt;br /&gt;
where it obtains its own signing certificate from a public CA.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-base-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">29d15ac51bde25c265abfd08dcb7519d9754a3ab0c26a790c3aab14570f97001</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-pki-base-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-base</strong> - IdM PKI Base Package&lt;br /&gt;</p>

<p>This package provides default configuration files for IdM PKI client.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-pki-acme-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">d057e16644c4d0a16d8970dfd66649bd709a6fba197dec2d9dbfec2dadddd6cf</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-pki-acme-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>idm-pki-acme</strong> - IdM PKI ACME Package&lt;br /&gt;</p>

<p>IdM PKI ACME responder is a service that provides an automatic certificate&lt;br /&gt;
management via ACME v2 protocol defined in RFC 8555.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-idm-pki-11.9.0-3.el10.noarch</title>
      <pubDate>Mon, 23 Mar 2026 11:14:36 AM GMT</pubDate>
      <guid isPermaLink="false">4e5b5ad8e5abe54b1efb772118a95e51c18a269bbed55742789cb488dc52f7f8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3-idm-pki-11.9.0-3.el10.noarch.rpm</link>
      <description><p><strong>python3-idm-pki</strong> - IdM PKI Python 3 Package&lt;br /&gt;</p>

<p>This package provides common and client library for Python 3.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 11.9.0-1
- Rebase to PKI 11.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openexr-libs-3.1.10-9.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 11:12:32 AM GMT</pubDate>
      <guid isPermaLink="false">f5693dbd47456f64d72889fd8af108c449397675954435142dd4328bc0055cac</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/openexr-libs-3.1.10-9.el10.aarch64.rpm</link>
      <description><p><strong>openexr-libs</strong> - OpenEXR Libraries&lt;br /&gt;</p>

<p>OpenEXR is an open-source high-dynamic-range floating-point image file format&lt;br /&gt;
for high-quality image processing and storage. This document presents a brief&lt;br /&gt;
overview of OpenEXR and explains concepts that are specific to this format.&lt;br /&gt;
&lt;br /&gt;
OpenEXR Features:&lt;br /&gt;
&lt;br /&gt;
* High dynamic range and color precision.  Support for 16-bit floating-point,&lt;br /&gt;
* 32-bit floating-point, and 32-bit integer pixels.&lt;br /&gt;
* Multiple image compression algorithms, both lossless and lossy. Some of&lt;br /&gt;
  the included codecs can achieve 2:1 lossless compression ratios on images&lt;br /&gt;
  with film grain.  The lossy codecs have been tuned for visual quality and&lt;br /&gt;
  decoding performance.&lt;br /&gt;
* Extensibility. New compression codecs and image types can easily be added&lt;br /&gt;
  by extending the C++ classes included in the OpenEXR software distribution.&lt;br /&gt;
  New image attributes (strings, vectors, integers, etc.) can be added to&lt;br /&gt;
  OpenEXR image headers without affecting backward compatibility with existing&lt;br /&gt;
  OpenEXR applications.&lt;br /&gt;
* Support for stereoscopic image workflows and a generalization&lt;br /&gt;
  to multi-views.&lt;br /&gt;
* Flexible support for deep data: pixels can store a variable-length list&lt;br /&gt;
  of samples and, thus, it is possible to store multiple values at different&lt;br /&gt;
  depths for each pixel. Hard surfaces and volumetric data representations are&lt;br /&gt;
  accommodated.&lt;br /&gt;
* Multipart: ability to encode separate, but related, images in one file.&lt;br /&gt;
  This allows for access to individual parts without the need to read other&lt;br /&gt;
  parts in the file.&lt;br /&gt;
* Versioning: OpenEXR source allows for user configurable C++&lt;br /&gt;
  namespaces to provide protection when using multiple versions of the library&lt;br /&gt;
  in the same process space.&lt;br /&gt;
&lt;br /&gt;
The IlmBase Library:&lt;br /&gt;
&lt;br /&gt;
Also a part of OpenEXR, the IlmBase library is a basic, light-weight, and&lt;br /&gt;
efficient representation of 2D and 3D vectors and matrices and other simple but&lt;br /&gt;
useful mathematical objects, functions, and data types common in computer&lt;br /&gt;
graphics applications, including the “half” 16-bit floating-point type.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-9
- fix CVE-2026-27622

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 3.1.10-8
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Wed, 26 Jun 2024 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-7
- Add gating.yaml file

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>openexr-3.1.10-9.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 11:12:32 AM GMT</pubDate>
      <guid isPermaLink="false">38b8204a32697454327d97957ff4f41aa6fe08d23c932e9aedc8709bd5e512a8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/openexr-3.1.10-9.el10.aarch64.rpm</link>
      <description><p><strong>openexr</strong> - Provides the specification and reference implementation of the EXR file format&lt;br /&gt;</p>

<p>OpenEXR is an open-source high-dynamic-range floating-point image file format&lt;br /&gt;
for high-quality image processing and storage. This document presents a brief&lt;br /&gt;
overview of OpenEXR and explains concepts that are specific to this format.&lt;br /&gt;
&lt;br /&gt;
This package containes the binaries for OpenEXR.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-9
- fix CVE-2026-27622

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 3.1.10-8
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Wed, 26 Jun 2024 GMT - Josef Ridky &amp;lt;jridky@redhat.com&amp;gt; - 3.1.10-7
- Add gating.yaml file

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-pin-pkcs11-22-1.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:06 AM GMT</pubDate>
      <guid isPermaLink="false">34bf9880a968c616abc0d3e57674b2c37cd6db089ba170c242ac7e96c906423b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/clevis-pin-pkcs11-22-1.el10.aarch64.rpm</link>
      <description><p><strong>clevis-pin-pkcs11</strong> - PKCS#11 for clevis&lt;br /&gt;</p>

<p>Automatically unlocks LUKS block devices through a PKCS#11 device.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-luks-22-1.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:06 AM GMT</pubDate>
      <guid isPermaLink="false">1197f9650a5adfa132fb58d251b34b13fd4f2500525b573c6ea927a4d27a1574</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/clevis-luks-22-1.el10.aarch64.rpm</link>
      <description><p><strong>clevis-luks</strong> - LUKS integration for clevis&lt;br /&gt;</p>

<p>LUKS integration for clevis. This package allows you to bind a LUKS&lt;br /&gt;
volume to a clevis unlocking policy. For automated unlocking, an unlocker&lt;br /&gt;
will also be required. See, for example, clevis-dracut and clevis-udisks2.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-dracut-22-1.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:06 AM GMT</pubDate>
      <guid isPermaLink="false">6092f31162282d3798b467c737a9300f615f0feecc15623016b13990af3ab5f4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/clevis-dracut-22-1.el10.aarch64.rpm</link>
      <description><p><strong>clevis-dracut</strong> - Dracut integration for clevis&lt;br /&gt;</p>

<p>Automatically unlocks LUKS block devices in early boot.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-22-1.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:06 AM GMT</pubDate>
      <guid isPermaLink="false">b246a0979f5db05aef8187a3ad146af1ff2f355b1b1d33b8a9a178d64a0f9dc5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/clevis-22-1.el10.aarch64.rpm</link>
      <description><p><strong>clevis</strong> - Automated decryption framework&lt;br /&gt;</p>

<p>Clevis is a framework for automated decryption. It allows you to encrypt&lt;br /&gt;
data using sophisticated unlocking policies which enable decryption to&lt;br /&gt;
occur automatically.&lt;br /&gt;
&lt;br /&gt;
The clevis package provides basic encryption/decryption policy support.&lt;br /&gt;
Users can use this directly; but most commonly, it will be used as a&lt;br /&gt;
building block for other packages. For example, see the clevis-luks&lt;br /&gt;
and clevis-dracut packages for automatic root volume unlocking of&lt;br /&gt;
LUKSv1/LUKSv2 volumes during early boot.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-udisks2-22-1.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:06 AM GMT</pubDate>
      <guid isPermaLink="false">00d25d1c7d18ae2e1f023e8956b52de0703fdcfe872fa2950daa127436ba7171</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/clevis-udisks2-22-1.el10.aarch64.rpm</link>
      <description><p><strong>clevis-udisks2</strong> - UDisks2/Storaged integration for clevis&lt;br /&gt;</p>

<p>Automatically unlocks LUKS block devices in desktop environments that&lt;br /&gt;
use UDisks2 or storaged (like GNOME).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>clevis-systemd-22-1.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 10:46:06 AM GMT</pubDate>
      <guid isPermaLink="false">19ada76553716046ca977fc19ce203a807727da3844d07c7d9e85d6ebc8ae328</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/clevis-systemd-22-1.el10.aarch64.rpm</link>
      <description><p><strong>clevis-systemd</strong> - systemd integration for clevis&lt;br /&gt;</p>

<p>Automatically unlocks LUKS _netdev block devices from /etc/crypttab.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 22-1
- Rebase to clevis-22 upstream version

Thu, 08 Jan 2026 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-9
- Add clevis user to tss group via sysusers

Thu, 09 Jan 2025 GMT - Sergio Arroutbi &amp;lt;sarroutb@redhat.com&amp;gt; - 21-8
- Include socat, openssl as PKCS#11 pin requirements

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-jss-tomcat-5.9.0-3.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 09:27:21 AM GMT</pubDate>
      <guid isPermaLink="false">d2712f224fa37d42a2c6965c8d3b208d54d4181a2e209fc0c4e20fba9f2e6312</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-jss-tomcat-5.9.0-3.el10.aarch64.rpm</link>
      <description><p><strong>idm-jss-tomcat</strong> - Java Security Services (JSS) Connector for Tomcat&lt;br /&gt;</p>

<p>JSS Connector for Tomcat is a Java Secure Socket Extension (JSSE)&lt;br /&gt;
module for Apache Tomcat that uses Java Security Services (JSS),&lt;br /&gt;
a Java interface to Network Security Services (NSS).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-1
- Rebase to JSS 5.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>idm-jss-5.9.0-3.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 09:27:21 AM GMT</pubDate>
      <guid isPermaLink="false">a1d49953cd25c59251127f5e28f1a7802b4cef53806d7b369936dd80038065a2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/idm-jss-5.9.0-3.el10.aarch64.rpm</link>
      <description><p><strong>idm-jss</strong> - Java Security Services (JSS)&lt;br /&gt;</p>

<p>Java Security Services (JSS) is a java native interface which provides a bridge&lt;br /&gt;
for java-based applications to use native Network Security Services (NSS).&lt;br /&gt;
This only works with gcj. Other JREs require that JCE providers be signed.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-3
- Revert to tomcat 9
- Resolves: RHEL-155406

Tue, 10 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-2
- Rebuilt for exception target

Fri, 06 Mar 2026 GMT - Red Hat PKI Team &amp;lt;rhcs-maint@redhat.com&amp;gt; - 5.9.0-1
- Rebase to JSS 5.9.0
- Resolves: RHEL-150666

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>lldpd-1.0.21-1.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 05:37:41 AM GMT</pubDate>
      <guid isPermaLink="false">2ed6f88f408deadffd07815a5540c3cee88b3b9f3cc736260e54f6655324bb9d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/lldpd-1.0.21-1.el10.aarch64.rpm</link>
      <description><p><strong>lldpd</strong> - ISC-licensed implementation of LLDP&lt;br /&gt;</p>

<p>LLDP is an industry standard protocol designed to supplant proprietary&lt;br /&gt;
Link-Layer protocols such as EDP or CDP. The goal of LLDP is to provide&lt;br /&gt;
an inter-vendor compatible mechanism to deliver Link-Layer notifications&lt;br /&gt;
to adjacent network devices.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Hangbin Liu &amp;lt;haliu@redhat.com&amp;gt; - 1.0.21-1
- Rebased to 1.0.21 (RHEL-158236)

Mon, 13 Jan 2025 GMT - Hangbin Liu &amp;lt;haliu@redhat.com&amp;gt; - 1.0.19-1
- Rebased to 1.0.19 (RHEL-73629)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.0.18-4
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>lldpd-devel-1.0.21-1.el10.aarch64</title>
      <pubDate>Mon, 23 Mar 2026 05:37:41 AM GMT</pubDate>
      <guid isPermaLink="false">4a180cdec171ae84f4c6d781be5dcb2b555d00551ac36830001b84b9a4500bdb</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/lldpd-devel-1.0.21-1.el10.aarch64.rpm</link>
      <description><p><strong>lldpd-devel</strong> - ISC-licensed implementation of LLDP&lt;br /&gt;</p>

<p>lldpd development libraries and headers</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 23 Mar 2026 GMT - Hangbin Liu &amp;lt;haliu@redhat.com&amp;gt; - 1.0.21-1
- Rebased to 1.0.21 (RHEL-158236)

Mon, 13 Jan 2025 GMT - Hangbin Liu &amp;lt;haliu@redhat.com&amp;gt; - 1.0.19-1
- Rebased to 1.0.19 (RHEL-73629)

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.0.18-4
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ignition-validate-2.26.0-2.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 06:28:15 PM GMT</pubDate>
      <guid isPermaLink="false">b1fc622bce63494cdc62a062e495662f8091f47d02f1d9af1e45932a23ff4000</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ignition-validate-2.26.0-2.el10.aarch64.rpm</link>
      <description><p><strong>ignition-validate</strong> - Validation tool for Ignition configs&lt;br /&gt;</p>

<p>Ignition is a utility used to manipulate systems during the initramfs.&lt;br /&gt;
This includes partitioning disks, formatting partitions, writing files&lt;br /&gt;
(regular files, systemd units, etc.), and configuring users. On first&lt;br /&gt;
boot, Ignition reads its configuration from a source of truth (remote&lt;br /&gt;
URL, network metadata service, hypervisor bridge, etc.) and applies&lt;br /&gt;
the configuration.&lt;br /&gt;
&lt;br /&gt;
This package contains a tool for validating Ignition configurations.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 2.26.0-2
- spec: rebuild for 10.2

Wed, 11 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.26.0-1
- spec: new upstream version 2.26.0

Tue, 13 Jan 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.25.1-1
- spec: new upstream version 2.25.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ignition-grub-2.26.0-2.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 06:28:15 PM GMT</pubDate>
      <guid isPermaLink="false">98ba6f5822b0c76448876bd72aef84059d5547be2fca4e7294ba7e3ffa7c74a2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ignition-grub-2.26.0-2.el10.aarch64.rpm</link>
      <description><p><strong>ignition-grub</strong> - Enablement glue for bootupd's grub2 config&lt;br /&gt;</p>

<p>This package contains the grub2 config which is compatable with bootupd.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 2.26.0-2
- spec: rebuild for 10.2

Wed, 11 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.26.0-1
- spec: new upstream version 2.26.0

Tue, 13 Jan 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.25.1-1
- spec: new upstream version 2.25.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ignition-edge-2.26.0-2.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 06:28:15 PM GMT</pubDate>
      <guid isPermaLink="false">af771fdd203019586f055f6b5657744869338005147ecf50f0e88a3058c413c5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ignition-edge-2.26.0-2.el10.aarch64.rpm</link>
      <description><p><strong>ignition-edge</strong> - Enablement glue for Ignition on IoT/Edge systems&lt;br /&gt;</p>

<p>This package contains dracut modules, services and binaries needed to enable&lt;br /&gt;
Ignition on IoT/Edge systems.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 2.26.0-2
- spec: rebuild for 10.2

Wed, 11 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.26.0-1
- spec: new upstream version 2.26.0

Tue, 13 Jan 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.25.1-1
- spec: new upstream version 2.25.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ignition-2.26.0-2.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 06:28:15 PM GMT</pubDate>
      <guid isPermaLink="false">83adce6ad1eb805d98369c5c7fb9b6d963a4ea9dfe88c69e02aa58aca81303da</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ignition-2.26.0-2.el10.aarch64.rpm</link>
      <description><p><strong>ignition</strong> - First boot installer and configuration tool&lt;br /&gt;</p>

<p>Ignition is a utility used to manipulate systems during the initramfs.&lt;br /&gt;
This includes partitioning disks, formatting partitions, writing files&lt;br /&gt;
(regular files, systemd units, etc.), and configuring users. On first&lt;br /&gt;
boot, Ignition reads its configuration from a source of truth (remote&lt;br /&gt;
URL, network metadata service, hypervisor bridge, etc.) and applies&lt;br /&gt;
the configuration.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 2.26.0-2
- spec: rebuild for 10.2

Wed, 11 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.26.0-1
- spec: new upstream version 2.26.0

Tue, 13 Jan 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 2.25.1-1
- spec: new upstream version 2.25.1

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>butane-0.27.0-1.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 05:27:31 PM GMT</pubDate>
      <guid isPermaLink="false">e8939ba600401391af7ead3e8a0ad47d02d4445073154a50fd1d28d3027f2a87</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/butane-0.27.0-1.el10.aarch64.rpm</link>
      <description><p><strong>butane</strong> - Butane config transpiler&lt;br /&gt;</p>

<p>&lt;br /&gt;
Butane translates human-readable Butane Configs into machine-readable Ignition&lt;br /&gt;
configs for provisioning operating systems that use Ignition.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 09 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 0.27.0-1
- new version

Tue, 20 Jan 2026 GMT - Steven Presti &amp;lt;spresti@redhat.com&amp;gt; - 0.26.0-1
- new version

Wed, 08 Oct 2025 GMT - Tiago Bueno &amp;lt;tbueno@redhat.com&amp;gt; - 0.25.1-1
- new version

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreos-installer-dracut-0.26.0-1.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 05:24:26 PM GMT</pubDate>
      <guid isPermaLink="false">0c913bca2eb932f5550cfaf634cc087cd0dc63722e490bc0e6adefe967e48077</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/coreos-installer-dracut-0.26.0-1.el10.aarch64.rpm</link>
      <description><p><strong>coreos-installer-dracut</strong> - Dracut module for running coreos-installer in the initrd&lt;br /&gt;</p>

<p>This subpackage contains files and configuration to run coreos-installer&lt;br /&gt;
from the initramfs.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 0.26.0-1
- new version

Fri, 24 Oct 2025 GMT - Aashish Radhakrishnan - 0.25.0-1
- New upstream release

Wed, 16 Apr 2025 GMT - Joel Capitao &amp;lt;jcapitao@redhat.com&amp;gt; - 0.24.0-1
- Update to latest upstream

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreos-installer-bootinfra-0.26.0-1.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 05:24:26 PM GMT</pubDate>
      <guid isPermaLink="false">153b21df30afd1a4047b6d6272cc7a8d3238e6121aedb24aef95af08422a6e4c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/coreos-installer-bootinfra-0.26.0-1.el10.aarch64.rpm</link>
      <description><p><strong>coreos-installer-bootinfra</strong> - coreos-installer boot-time infrastructure for use on Fedora/RHEL CoreOS&lt;br /&gt;</p>

<p>This subpackage contains boot-time infrastructure for Fedora CoreOS and&lt;br /&gt;
RHEL CoreOS.  It is not needed on other platforms.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 0.26.0-1
- new version

Fri, 24 Oct 2025 GMT - Aashish Radhakrishnan - 0.25.0-1
- New upstream release

Wed, 16 Apr 2025 GMT - Joel Capitao &amp;lt;jcapitao@redhat.com&amp;gt; - 0.24.0-1
- Update to latest upstream

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>coreos-installer-0.26.0-1.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 05:24:26 PM GMT</pubDate>
      <guid isPermaLink="false">1b4e9d74ce60b56b859723e8eebf9bb19fb0672cf0e1752d0c7463e807b4a653</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/coreos-installer-0.26.0-1.el10.aarch64.rpm</link>
      <description><p><strong>coreos-installer</strong> - Installer for Fedora CoreOS and RHEL CoreOS&lt;br /&gt;</p>

<p>coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal&lt;br /&gt;
machines (or, occasionally, to virtual machines).</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Yasmin de Souza &amp;lt;ydesouza@redhat.com&amp;gt; - 0.26.0-1
- new version

Fri, 24 Oct 2025 GMT - Aashish Radhakrishnan - 0.25.0-1
- New upstream release

Wed, 16 Apr 2025 GMT - Joel Capitao &amp;lt;jcapitao@redhat.com&amp;gt; - 0.24.0-1
- Update to latest upstream

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rpm-ostree-libs-2026.1-4.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 04:04:51 PM GMT</pubDate>
      <guid isPermaLink="false">619139bee5a93d11f5879b3e5fc75fb08f900d247903904ab47e158e9dce25c7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/rpm-ostree-libs-2026.1-4.el10.aarch64.rpm</link>
      <description><p><strong>rpm-ostree-libs</strong> - Shared library for rpm-ostree&lt;br /&gt;</p>

<p>The rpm-ostree-libs package includes the shared library for rpm-ostree.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-4
- Backport: https://github.com/coreos/rpm-ostree/pull/5575

Tue, 10 Mar 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-3
- Backport https://github.com/coreos/rpm-ostree/pull/5569

Thu, 05 Feb 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-2
- Backport https://github.com/coreos/rpm-ostree/pull/5558

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>rpm-ostree-2026.1-4.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 04:04:51 PM GMT</pubDate>
      <guid isPermaLink="false">ce6ba5bcbf70209c66af264fe5e6aa7f9437b363becf60e684ffcc68101f5e8f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/rpm-ostree-2026.1-4.el10.aarch64.rpm</link>
      <description><p><strong>rpm-ostree</strong> - Hybrid image/package system&lt;br /&gt;</p>

<p>rpm-ostree is a hybrid image/package system.  It supports&lt;br /&gt;
"composing" packages on a build server into an OSTree repository,&lt;br /&gt;
which can then be replicated by client systems with atomic upgrades.&lt;br /&gt;
Additionally, unlike many "pure" image systems, with rpm-ostree&lt;br /&gt;
each client system can layer on additional packages, providing&lt;br /&gt;
a "best of both worlds" approach.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-4
- Backport: https://github.com/coreos/rpm-ostree/pull/5575

Tue, 10 Mar 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-3
- Backport https://github.com/coreos/rpm-ostree/pull/5569

Thu, 05 Feb 2026 GMT - Joseph Marrero Corchado &amp;lt;jmarrero@redhat.com&amp;gt; - 2026.1-2
- Backport https://github.com/coreos/rpm-ostree/pull/5558

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ansible-collection-redhat-leapp-1.7.4-1.el10.noarch</title>
      <pubDate>Fri, 20 Mar 2026 12:57:39 PM GMT</pubDate>
      <guid isPermaLink="false">74f917a8174bc4ad57f50da3cc7695bc866f0b0c64fb30785c4cd27843ee6690</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ansible-collection-redhat-leapp-1.7.4-1.el10.noarch.rpm</link>
      <description><p><strong>ansible-collection-redhat-leapp</strong> - redhat.leapp Ansible collection that handles RHEL upgrades&lt;br /&gt;</p>

<p>redhat.leapp Ansible collection that handles RHEL upgrades.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 09 Mar 2026 GMT - Sergei Petrosian &amp;lt;spetrosi@redhat.com&amp;gt; - 1.7.4-1
- Update to latest upstream version 1.7.4
- Resolves: RHEL-153382 : Fix the role failing on steps that copy logs to the controller EL10

Tue, 24 Feb 2026 GMT - Sergei Petrosian &amp;lt;spetrosi@redhat.com&amp;gt; - 1.7.1-2
- Fix spec file to require rhel-system-roles package
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10

Mon, 23 Feb 2026 GMT - Sergei Petrosian &amp;lt;spetrosi@redhat.com&amp;gt; - 1.7.1-1
- Update to latest upstream version via commit hash
- Resolves: RHEL-141757 : [RFE] Add ansible-collection-redhat-leapp to RHEL10

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>greenboot-default-health-checks-0.16.3-0.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 12:07:00 PM GMT</pubDate>
      <guid isPermaLink="false">ae219b61e7c0b6521c52358410dcb16bd66b3c5fdb2c3d00db81a4e1872f2ac4</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/greenboot-default-health-checks-0.16.3-0.el10.aarch64.rpm</link>
      <description><p><strong>greenboot-default-health-checks</strong> - Series of optional and curated health checks&lt;br /&gt;</p>

<p>%{description}.&lt;br /&gt;
&lt;br /&gt;
This package adds some default healthchecks for greenboot.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 21 Jan 2026 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.2
- restrict manual restart of healthcheck service
- fixed error while running healtcheck inside container
- removed bootupd dependency
- fixed CI tests

Wed, 03 Dec 2025 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.1
- Ensure rollback trigger runs before systemd-update-done and only on updates
- Log the correct system type when reporting rollback decisions
- Fix CI/tests (Ansible callback config, GI deps) to keep gating green
- Refresh Packit release config for Fedora delivery

Wed, 15 Oct 2025 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.0-6
- Fix OS type detection
- Do not remount /boot superblock/filesystem readonly

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>greenboot-0.16.3-0.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 12:07:00 PM GMT</pubDate>
      <guid isPermaLink="false">36a87ca7ccf678bb8a74d03d3edc6a5ea49b705f6673fe8d569f52772456fc86</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/greenboot-0.16.3-0.el10.aarch64.rpm</link>
      <description><p><strong>greenboot</strong> - Generic Health Check Framework for systemd&lt;br /&gt;</p>

<p>&lt;br /&gt;
%{description}.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 21 Jan 2026 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.2
- restrict manual restart of healthcheck service
- fixed error while running healtcheck inside container
- removed bootupd dependency
- fixed CI tests

Wed, 03 Dec 2025 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.1
- Ensure rollback trigger runs before systemd-update-done and only on updates
- Log the correct system type when reporting rollback decisions
- Fix CI/tests (Ansible callback config, GI deps) to keep gating green
- Refresh Packit release config for Fedora delivery

Wed, 15 Oct 2025 GMT - Sayan Paul &amp;lt;saypaul@redhat.com&amp;gt; - 0.16.0-6
- Fix OS type detection
- Do not remount /boot superblock/filesystem readonly

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>sisu-1:0.3.5-15.el10.noarch</title>
      <pubDate>Fri, 20 Mar 2026 11:48:46 AM GMT</pubDate>
      <guid isPermaLink="false">d21f39167635e3ab00bfc25da4a40872110da1efa6e4d23ade12b71880b47188</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/sisu-0.3.5-15.el10.noarch.rpm</link>
      <description><p><strong>sisu</strong> - Eclipse dependency injection framework&lt;br /&gt;</p>

<p>Java dependency injection framework with backward support for plexus and bean&lt;br /&gt;
style dependency injection.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Marian Koncek &amp;lt;mkoncek@redhat.com&amp;gt; - 1:0.3.5-15
- Update-bundled-ASM-bytecode-versions-up-to-Java-25.patch

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1:0.3.5-14
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018

Thu, 01 Aug 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1:0.3.5-13
- Bump release for Aug 2024 java mass rebuild

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>insights-core-selinux-3.7.5-1.el10.noarch</title>
      <pubDate>Fri, 20 Mar 2026 05:33:52 AM GMT</pubDate>
      <guid isPermaLink="false">aaea3d7874012f2b145aa999e7062927e1e7696377a770b0ecd2e439f46be0f8</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/insights-core-selinux-3.7.5-1.el10.noarch.rpm</link>
      <description><p><strong>insights-core-selinux</strong> - Insights Core SELinux policy&lt;br /&gt;</p>

<p>Insights Core Custom SELinux policy module</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.5-1
- Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
- feat: Malware Detection wildcards support and fix concurrent scan false
  positives (#4746) (63891960+mtclinton@users.noreply.github.com)
- chore(pre-commit): update and add new hook conventional-pre-commit
  (xiangceliu@redhat.com)
- chore(build): enable packit building for release branch
  (xiangceliu@redhat.com)
- feat: add all rules scanned to malware detection upload (#4735)
  (63891960+mtclinton@users.noreply.github.com)
- fix(data-processing): fix unpredictable behavior of --context (#4740)
  (71874510+jholecek-rh@users.noreply.github.com)
- chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
- fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
  core-selinux (xiangceliu@redhat.com)
- feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
- chore(spec): New spec "podman system info --json" for data analysis
  (huali@redhat.com)
- chore(manifests): remove/merge remained useless components (#4747)
  (xiangceliu@redhat.com)
- chore(manifests): use the base module instead of component (#4730)
  (xiangceliu@redhat.com)
- chore: add egg_release back to collection with a condition (#4729)
  (xiangceliu@redhat.com)
- fix(build): prepare the filters.yaml before setting up  (#4745)
  (xiangceliu@redhat.com)
- chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
- chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
  (xiangceliu@redhat.com)
- chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
- chore(test): don't pass context when root is passed to initialize_broker
  (#4720) (xiangceliu@redhat.com)
- chore: update PR template and remove RPM/Egg delivery guide (#4723)
  (xiangceliu@redhat.com)
- feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
  (#4705) (44796653+huali027@users.noreply.github.com)
- feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
  (44796653+huali027@users.noreply.github.com)
- fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
- feat: add CoreEgg/CoreRpm to identify current collector (#4724)
  (xiangceliu@redhat.com)

Thu, 26 Feb 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.4-1
- Revert "fix: handle no account_number in response data (#4687)" (#4736)
  (xiangceliu@redhat.com)

Fri, 20 Feb 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.3-1
- fix: don't collect teamd specs when SELinux is enabled (#4734)
  (xiangceliu@redhat.com)
- chore(build): add build_client_egg script back to master (#4722)
  (xiangceliu@redhat.com)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>insights-core-3.7.5-1.el10.noarch</title>
      <pubDate>Fri, 20 Mar 2026 05:33:52 AM GMT</pubDate>
      <guid isPermaLink="false">e60335cff0505cefb713a0ffd3df78067a5f91b8eeddd61d39ed06dc3cd9c111</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/insights-core-3.7.5-1.el10.noarch.rpm</link>
      <description><p><strong>insights-core</strong> - Insights Core is a data collection and analysis framework.&lt;br /&gt;</p>

<p>Insights Core is a data collection and analysis framework.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.5-1
- Fix: Update ls to handle special lines (#4750) (986222045@qq.com)
- feat: Malware Detection wildcards support and fix concurrent scan false
  positives (#4746) (63891960+mtclinton@users.noreply.github.com)
- chore(pre-commit): update and add new hook conventional-pre-commit
  (xiangceliu@redhat.com)
- chore(build): enable packit building for release branch
  (xiangceliu@redhat.com)
- feat: add all rules scanned to malware detection upload (#4735)
  (63891960+mtclinton@users.noreply.github.com)
- fix(data-processing): fix unpredictable behavior of --context (#4740)
  (71874510+jholecek-rh@users.noreply.github.com)
- chore: remove planned deprecations for v3.7.0 (xiangceliu@redhat.com)
- fix(rpm-build): add 'BuildRequires: pkgconfig(systemd)' back for insights-
  core-selinux (xiangceliu@redhat.com)
- feat: New spec "/etc/modules-load.d/*.conf" and its parser (shlao@redhat.com)
- chore(spec): New spec "podman system info --json" for data analysis
  (huali@redhat.com)
- chore(manifests): remove/merge remained useless components (#4747)
  (xiangceliu@redhat.com)
- chore(manifests): use the base module instead of component (#4730)
  (xiangceliu@redhat.com)
- chore: add egg_release back to collection with a condition (#4729)
  (xiangceliu@redhat.com)
- fix(build): prepare the filters.yaml before setting up  (#4745)
  (xiangceliu@redhat.com)
- chore(spec): update SELinux relevant specs (#4728) (xiangceliu@redhat.com)
- chore(spec): remove SELinuxDisable depdencies from ansible_telemetry (#4731)
  (xiangceliu@redhat.com)
- chore: remove unused lines from PR template (#4725) (xiangceliu@redhat.com)
- chore(test): don't pass context when root is passed to initialize_broker
  (#4720) (xiangceliu@redhat.com)
- chore: update PR template and remove RPM/Egg delivery guide (#4723)
  (xiangceliu@redhat.com)
- feat: New spec "strings /boot/efi/EFI/redhat/shimx64.efi" and its parser
  (#4705) (44796653+huali027@users.noreply.github.com)
- feat: New spec "/bin/mokutil --db --short" and the parser (#4704)
  (44796653+huali027@users.noreply.github.com)
- fix(ci/cd): enable CI/CD for release branch (xiangceliu@redhat.com)
- feat: add CoreEgg/CoreRpm to identify current collector (#4724)
  (xiangceliu@redhat.com)

Thu, 26 Feb 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.4-1
- Revert "fix: handle no account_number in response data (#4687)" (#4736)
  (xiangceliu@redhat.com)

Fri, 20 Feb 2026 GMT - Xiangce Liu &amp;lt;xiangceliu@redhat.com&amp;gt; 3.7.3-1
- fix: don't collect teamd specs when SELinux is enabled (#4734)
  (xiangceliu@redhat.com)
- chore(build): add build_client_egg script back to master (#4722)
  (xiangceliu@redhat.com)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>bootc-1.14.1-1.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 12:13:14 AM GMT</pubDate>
      <guid isPermaLink="false">0fccbba1e84b8cfdcce9750060556ec50e714bf183584634b3123cc1926c3604</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/bootc-1.14.1-1.el10.aarch64.rpm</link>
      <description><p><strong>bootc</strong> - Bootable container system&lt;br /&gt;</p>

<p>Bootable container system</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Colin Walters &amp;lt;walters@verbum.org&amp;gt; - 1.14.1-1
- Update to 1.14.1

Tue, 24 Feb 2026 GMT - Colin Walters &amp;lt;walters@verbum.org&amp;gt; - 1.13.0-1
- Release 1.13.0
- Update to bootc 1.13.0
- Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
  rebuild in install environment (workaround for upstream Makefile issue)
- Package shell completions (bash, zsh, fish)

Mon, 19 Jan 2026 GMT - Xiaofeng Wang &amp;lt;xiaofwan@redhat.com&amp;gt; - 1.12.1-2
- Skip rpminspect checking for symbolic link /usr/lib/bootc/storage

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>system-reinstall-bootc-1.14.1-1.el10.aarch64</title>
      <pubDate>Fri, 20 Mar 2026 12:13:14 AM GMT</pubDate>
      <guid isPermaLink="false">e2170098d0c1e3205b649733f652d5db1da700e81aa4e0f9b771fdcdf5127e91</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/system-reinstall-bootc-1.14.1-1.el10.aarch64.rpm</link>
      <description><p><strong>system-reinstall-bootc</strong> - Utility to reinstall the current system using bootc&lt;br /&gt;</p>

<p>This package provides a utility to simplify reinstalling the current system to a given bootc image.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 20 Mar 2026 GMT - Colin Walters &amp;lt;walters@verbum.org&amp;gt; - 1.14.1-1
- Update to 1.14.1

Tue, 24 Feb 2026 GMT - Colin Walters &amp;lt;walters@verbum.org&amp;gt; - 1.13.0-1
- Release 1.13.0
- Update to bootc 1.13.0
- Pass CARGO_FEATURES explicitly to make install to prevent auto-detection
  rebuild in install environment (workaround for upstream Makefile issue)
- Package shell completions (bash, zsh, fish)

Mon, 19 Jan 2026 GMT - Xiaofeng Wang &amp;lt;xiaofwan@redhat.com&amp;gt; - 1.12.1-2
- Skip rpminspect checking for symbolic link /usr/lib/bootc/storage

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nfsv4-client-utils-1:2.8.3-6.el10.aarch64</title>
      <pubDate>Thu, 19 Mar 2026 06:20:29 PM GMT</pubDate>
      <guid isPermaLink="false">456225fe26551115099a9b74eba2da538eca161d69e9685d10dcd1563f752f01</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/nfsv4-client-utils-2.8.3-6.el10.aarch64.rpm</link>
      <description><p><strong>nfsv4-client-utils</strong> - NFSv4 utilities for supporting client&lt;br /&gt;</p>

<p>The nfsv4-client-utils packages provided NFSv4 client support</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-6
- nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
- nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)

Fri, 06 Mar 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-5
- mountd: Minor refactor of get_rootfh() (RHEL-127093)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
- Add requires for selinux-policy (RHEL-127093)
  Resolves: CVE-2025-12801

Thu, 05 Feb 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-4
- nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
- Remove /var/lib/nfs/v4recovery (RHEL-137935)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>nfs-utils-coreos-1:2.8.3-6.el10.aarch64</title>
      <pubDate>Thu, 19 Mar 2026 06:20:29 PM GMT</pubDate>
      <guid isPermaLink="false">28a3e7a973876c892e21c51c5cdec94d1984685d76d26b1d16b5a253bc103f86</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/nfs-utils-coreos-2.8.3-6.el10.aarch64.rpm</link>
      <description><p><strong>nfs-utils-coreos</strong> - Minimal NFS utilities for supporting clients&lt;br /&gt;</p>

<p>Minimal NFS utilities for supporting clients</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 19 Mar 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-6
- nfsdctl: ignore ipv6 listener creation error (RHEL-71352)
- nfsdclnts: fix display of stateids where the kernel doesn't provide the superblock (RHEL-151444)

Fri, 06 Mar 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-5
- mountd: Minor refactor of get_rootfh() (RHEL-127093)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127093)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127093)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127093)
- Add requires for selinux-policy (RHEL-127093)
  Resolves: CVE-2025-12801

Thu, 05 Feb 2026 GMT - Scott Mayhew &amp;lt;smayhew@redhat.com&amp;gt; 2.8.3-4
- nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
- Remove /var/lib/nfs/v4recovery (RHEL-137935)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-X11-2:9.1.083-9.el10.aarch64</title>
      <pubDate>Thu, 19 Mar 2026 09:00:12 AM GMT</pubDate>
      <guid isPermaLink="false">e311423f38687218a9155d3b7c701ece67b578bed004b70223a68ab109a88c15</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/vim-X11-9.1.083-9.el10.aarch64.rpm</link>
      <description><p><strong>vim-X11</strong> - The VIM version of the vi editor for the X Window System - GVim&lt;br /&gt;</p>

<p>VIM (VIsual editor iMproved) is an updated and improved version of the&lt;br /&gt;
vi editor.  Vi was the first real screen-based editor for UNIX, and is&lt;br /&gt;
still very popular.  VIM improves on vi by adding new features:&lt;br /&gt;
multiple windows, multi-level undo, block highlighting and&lt;br /&gt;
more. VIM-X11 is a version of the VIM editor which will run within the&lt;br /&gt;
X Window System.  If you install this package, you can run VIM as an X&lt;br /&gt;
application with a full GUI interface and mouse support by command gvim.&lt;br /&gt;
&lt;br /&gt;
Install the vim-X11 package if you'd like to try out a version of vi&lt;br /&gt;
with graphics and mouse capabilities.  You'll also need to install the&lt;br /&gt;
vim-common package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

Tue, 17 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

Tue, 10 Feb 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-8
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-common-2:9.1.083-9.el10.aarch64</title>
      <pubDate>Thu, 19 Mar 2026 09:00:12 AM GMT</pubDate>
      <guid isPermaLink="false">c12137e9c2203ffcb45b701fede3f88b147644284605a454355f1af29a4a6178</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/vim-common-9.1.083-9.el10.aarch64.rpm</link>
      <description><p><strong>vim-common</strong> - The common files needed by any version of the VIM editor&lt;br /&gt;</p>

<p>VIM (VIsual editor iMproved) is an updated and improved version of the&lt;br /&gt;
vi editor.  Vi was the first real screen-based editor for UNIX, and is&lt;br /&gt;
still very popular.  VIM improves on vi by adding new features:&lt;br /&gt;
multiple windows, multi-level undo, block highlighting and more.  The&lt;br /&gt;
vim-common package contains files which every VIM binary will need in&lt;br /&gt;
order to run.&lt;br /&gt;
&lt;br /&gt;
If you are installing vim-enhanced or vim-X11, you'll also need&lt;br /&gt;
to install the vim-common package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

Tue, 17 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

Tue, 10 Feb 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-8
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>xxd-2:9.1.083-9.el10.aarch64</title>
      <pubDate>Thu, 19 Mar 2026 09:00:12 AM GMT</pubDate>
      <guid isPermaLink="false">bcc08cc4f2b2a6f5aec3b7b0c43708a74b99cf3026abc72dbace83258cc6527d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/xxd-9.1.083-9.el10.aarch64.rpm</link>
      <description><p><strong>xxd</strong> - A hex dump utility&lt;br /&gt;</p>

<p>xxd creates a hex dump of a given file or standard input.  It can also convert&lt;br /&gt;
a hex dump back to its original binary form.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

Tue, 17 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

Tue, 10 Feb 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-8
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>vim-enhanced-2:9.1.083-9.el10.aarch64</title>
      <pubDate>Thu, 19 Mar 2026 09:00:12 AM GMT</pubDate>
      <guid isPermaLink="false">fc728c8e345f8b808de5abdc01be582a29f4b3658c8171d60e015d650f1d78ef</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/vim-enhanced-9.1.083-9.el10.aarch64.rpm</link>
      <description><p><strong>vim-enhanced</strong> - A version of the VIM editor which includes recent enhancements&lt;br /&gt;</p>

<p>VIM (VIsual editor iMproved) is an updated and improved version of the&lt;br /&gt;
vi editor.  Vi was the first real screen-based editor for UNIX, and is&lt;br /&gt;
still very popular.  VIM improves on vi by adding new features:&lt;br /&gt;
multiple windows, multi-level undo, block highlighting and more.  The&lt;br /&gt;
vim-enhanced package contains a version of VIM with extra, recently&lt;br /&gt;
introduced features like Python and Perl interpreters.&lt;br /&gt;
&lt;br /&gt;
Install the vim-enhanced package if you'd like to use a version of the&lt;br /&gt;
VIM editor which includes recently added enhancements like&lt;br /&gt;
interpreters for the Python and Perl scripting languages.  You'll also&lt;br /&gt;
need to install the vim-common package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155410 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file

Tue, 17 Mar 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-9
- RHEL-155426 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

Tue, 10 Feb 2026 GMT - Zdenek Dohnal &amp;lt;zdohnal@redhat.com&amp;gt; - 2:9.1.083-8
- RHEL-147924 CVE-2026-25749 vim: Heap Overflow in Vim

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>awscli2-2.33.0-1.el10.noarch</title>
      <pubDate>Wed, 18 Mar 2026 04:29:11 PM GMT</pubDate>
      <guid isPermaLink="false">3b7fbd1dc619142d43624806bd0ff565ff41c7b2ef85f1aa9c6d4bd4f6eeee67</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/awscli2-2.33.0-1.el10.noarch.rpm</link>
      <description><p><strong>awscli2</strong> - Universal Command Line Environment for AWS, version 2&lt;br /&gt;</p>

<p>This package provides version 2 of the unified command line&lt;br /&gt;
interface to Amazon Web Services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 2.33.0-1
- Update to v2.33.0

Thu, 24 Jul 2025 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 2.27.0-1
- Update to 2.27.0

Mon, 23 Dec 2024 GMT - ccowman &amp;lt;ccowman@redhat.com&amp;gt; - 2.22.9-1
- Revise patches and update to 2.22.9

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>radii-1:1.0.0-1.el10.aarch64</title>
      <pubDate>Wed, 18 Mar 2026 02:55:03 PM GMT</pubDate>
      <guid isPermaLink="false">9d7baa046120b76e4a017b214161fc7cb9aab1f02d67927ad491f25ec1dbd10c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/radii-1.0.0-1.el10.aarch64.rpm</link>
      <description><p><strong>radii</strong> - GPU and AI accelerator driver manager&lt;br /&gt;</p>

<p>The radii tool is a command-line utility that provides a consistent&lt;br /&gt;
interface for installing and maintaining third-party AI-accelerator&lt;br /&gt;
and GPU driver stacks. It detects compatible accelerator hardware,&lt;br /&gt;
enables the appropriate package repositories, and installs the&lt;br /&gt;
required kernel and user-mode components from distribution&lt;br /&gt;
packages. The tool manages multi-component driver stacks end-to-end&lt;br /&gt;
and integrates with the standard dnf workflow so that installed&lt;br /&gt;
drivers are updated through normal system package management.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Mikolaj Izdebski &amp;lt;mizdebsk@redhat.com&amp;gt; - 1:1.0.0-1
- Initial packaging

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libreswan-minimal-5.3-8.el10.aarch64</title>
      <pubDate>Wed, 18 Mar 2026 02:14:40 PM GMT</pubDate>
      <guid isPermaLink="false">b4ec590ee492818e35eda63ea9237d510359f774633a736c1d9cb21c1163c324</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/libreswan-minimal-5.3-8.el10.aarch64.rpm</link>
      <description><p><strong>libreswan-minimal</strong> - Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec (minimal version)&lt;br /&gt;</p>

<p>Libreswan is a free implementation of IPsec &amp; IKE for Linux.  IPsec is&lt;br /&gt;
the Internet Protocol Security and uses strong cryptography to provide&lt;br /&gt;
both authentication and encryption services.  These services allow you&lt;br /&gt;
to build secure tunnels through untrusted networks.  Everything passing&lt;br /&gt;
through the untrusted net is encrypted by the ipsec gateway machine and&lt;br /&gt;
decrypted by the gateway at the other end of the tunnel.  The resulting&lt;br /&gt;
tunnel is a virtual private network or VPN.&lt;br /&gt;
&lt;br /&gt;
This package contains the minimal set of daemons and userland tools&lt;br /&gt;
for setting up Libreswan.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Daiki Ueno &amp;lt;dueno@redhat.com&amp;gt; - 5.3-8
- Bump release number

Tue, 17 Mar 2026 GMT - Ondrej Moris &amp;lt;omoris@redhat.com&amp;gt; - 5.3-7
- ikev2: use nonces to tie-break simultaneous IKE

Tue, 17 Mar 2026 GMT - Ondrej Moris &amp;lt;omoris@redhat.com&amp;gt; - 5.3-6
- CI: Update CI plan url

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>libreswan-5.3-8.el10.aarch64</title>
      <pubDate>Wed, 18 Mar 2026 02:14:40 PM GMT</pubDate>
      <guid isPermaLink="false">68dbe4b3ced6abe763203dcfb5641d11f84871d289f0ffc0d1e87bf3ab4ed7b5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/libreswan-5.3-8.el10.aarch64.rpm</link>
      <description><p><strong>libreswan</strong> - Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec&lt;br /&gt;</p>

<p>Libreswan is a free implementation of IPsec &amp; IKE for Linux.  IPsec is&lt;br /&gt;
the Internet Protocol Security and uses strong cryptography to provide&lt;br /&gt;
both authentication and encryption services.  These services allow you&lt;br /&gt;
to build secure tunnels through untrusted networks.  Everything passing&lt;br /&gt;
through the untrusted net is encrypted by the ipsec gateway machine and&lt;br /&gt;
decrypted by the gateway at the other end of the tunnel.  The resulting&lt;br /&gt;
tunnel is a virtual private network or VPN.&lt;br /&gt;
&lt;br /&gt;
This package contains the daemons and userland tools for setting up&lt;br /&gt;
Libreswan.&lt;br /&gt;
&lt;br /&gt;
Libreswan also supports IKEv2 (RFC7296) and Secure Labeling&lt;br /&gt;
&lt;br /&gt;
Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Daiki Ueno &amp;lt;dueno@redhat.com&amp;gt; - 5.3-8
- Bump release number

Tue, 17 Mar 2026 GMT - Ondrej Moris &amp;lt;omoris@redhat.com&amp;gt; - 5.3-7
- ikev2: use nonces to tie-break simultaneous IKE

Tue, 17 Mar 2026 GMT - Ondrej Moris &amp;lt;omoris@redhat.com&amp;gt; - 5.3-6
- CI: Update CI plan url

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>radii-hwdata-nv-0.23.48.01-1.el10.noarch</title>
      <pubDate>Wed, 18 Mar 2026 01:32:03 PM GMT</pubDate>
      <guid isPermaLink="false">bed8e4d49d835d3cac1258d0cc467bdc1b6ea21ab86eab27a2fd80e3a7f6fd6f</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/radii-hwdata-nv-0.23.48.01-1.el10.noarch.rpm</link>
      <description><p><strong>radii-hwdata-nv</strong> - Hardware database for NVIDIA GPU chips&lt;br /&gt;</p>

<p>Hardware database for NVIDIA GPU chips.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Mikolaj Izdebski &amp;lt;mizdebsk@redhat.com&amp;gt; - 0.23.48.01-1
- Initial packaging

&lt;/pre&gt;</description>
    </item>
    <item>
      <title>python3-awscrt-0.31.1-1.el10.aarch64</title>
      <pubDate>Wed, 18 Mar 2026 09:32:36 AM GMT</pubDate>
      <guid isPermaLink="false">7da738480fc7ec51e13737d0de41fd67cbe5a2c5c54021d7dbffd6473680541b</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/python3-awscrt-0.31.1-1.el10.aarch64.rpm</link>
      <description><p><strong>python3-awscrt</strong> - Python bindings for the AWS Common Runtime&lt;br /&gt;</p>

<p>&lt;br /&gt;
Python bindings for the AWS Common Runtime</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 18 Mar 2026 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 0.31.1-1
- Update to v0.31.1

Tue, 15 Jul 2025 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 0.27.2-1
- Update to version 0.27.2 and revise existing patches Resolves:
  RHEL-103640

Mon, 24 Feb 2025 GMT - Kseniia Nivnia &amp;lt;knivnia@redhat.com&amp;gt; - 0.23.8-1
- Update to 0.23.8 and add skip-testing-sha1.patch

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-upgrade-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">f659efa3a91773433a57c9006b2a048a97cb4f3d7dcf023711ddfc3486dd8ec1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-upgrade-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-upgrade</strong> - Support for upgrading from the previous major release of PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-upgrade package contains the pg_upgrade utility and supporting&lt;br /&gt;
files needed for upgrading a PostgreSQL database from the previous major&lt;br /&gt;
version of PostgreSQL.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-test-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">c229d12715c2ecb630c416212f03d9cc5bdb342dfacc690cebe66c185169b532</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-test-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-test</strong> - The test suite distributed with PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-test package contains files needed for various tests for the&lt;br /&gt;
PostgreSQL database management system, including regression tests and&lt;br /&gt;
benchmarks.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-static-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">058f34a0f18281d60c105df50796da9e084770ef3b3ce7d88858ae27569d1ef7</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-static-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-static</strong> - Statically linked PostgreSQL libraries&lt;br /&gt;</p>

<p>Statically linked PostgreSQL libraries that do not have dynamically linked&lt;br /&gt;
counterparts.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-server-devel-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">478579e89d2cc9947fbd27da86cc815f6f7a080614e7eebc0dff944650114cd5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-server-devel-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-server-devel</strong> - PostgreSQL development header files and libraries&lt;br /&gt;</p>

<p>The postgresql-server-devel package contains the header files and configuration&lt;br /&gt;
needed to compile PostgreSQL server extension.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-server-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">e9e7e94b88897e0b671874ef08745cb5998fc14bb73c24a4e46e0afe0e1b1f00</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-server-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-server</strong> - The programs needed to create and run a PostgreSQL server&lt;br /&gt;</p>

<p>PostgreSQL is an advanced Object-Relational database management system (DBMS).&lt;br /&gt;
The postgresql-server package contains the programs needed to create&lt;br /&gt;
and run a PostgreSQL server, which will in turn allow you to create&lt;br /&gt;
and maintain PostgreSQL databases.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-private-libs-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">4c074357c70de9131b513cf4a93386af658268f0d3a565af52ec06670b25ce18</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-private-libs-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-private-libs</strong> - The shared libraries required only for this build of PostgreSQL server&lt;br /&gt;</p>

<p>The postgresql-private-libs package provides the shared libraries for this&lt;br /&gt;
build of PostgreSQL server and plugins build with this version of server.&lt;br /&gt;
For shared libraries used by client packages that need to connect to a&lt;br /&gt;
PostgreSQL server, install libpq package instead.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-private-devel-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">a5343425a3df7458639f2a6a79aa63b2b6285fa78e8af768cf07c36df48cf049</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-private-devel-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-private-devel</strong> - PostgreSQL development header files for this build of PostgreSQL server&lt;br /&gt;</p>

<p>The postgresql-private-devel package contains the header files and libraries&lt;br /&gt;
needed to compile C or C++ applications which will directly interact&lt;br /&gt;
with a PostgreSQL database management server.&lt;br /&gt;
You need to install this package if you want to develop applications which&lt;br /&gt;
will interact with a PostgreSQL server.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-pltcl-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">f098463cf5895d37177532178df8e8706a94af5bf76fa535d676687ab323bca5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-pltcl-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-pltcl</strong> - The Tcl procedural language for PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-pltcl package contains the PL/Tcl procedural language,&lt;br /&gt;
which is an extension to the PostgreSQL database server.&lt;br /&gt;
Install this if you want to write database functions in Tcl.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-plpython3-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">330943c43bd7c046c8e7e54117f859aa3c29dc25fa87e77818980307cbd4013c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-plpython3-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-plpython3</strong> - The Python3 procedural language for PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-plpython3 package contains the PL/Python3 procedural language,&lt;br /&gt;
which is an extension to the PostgreSQL database server.&lt;br /&gt;
Install this if you want to write database functions in Python 3.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-plperl-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">c91434e3789e273e2f9db7a6300cc95c6e45503133382d6f3488f39bb444212c</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-plperl-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-plperl</strong> - The Perl procedural language for PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-plperl package contains the PL/Perl procedural language,&lt;br /&gt;
which is an extension to the PostgreSQL database server.&lt;br /&gt;
Install this if you want to write database functions in Perl.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-docs-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">19a0cbf8d1ce8f06074ac262febe3f83e257eabfda8974ac6158caeec4d14115</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-docs-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-docs</strong> - Extra documentation for PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-docs package contains some additional documentation for&lt;br /&gt;
PostgreSQL.  Currently, this includes the main documentation in PDF format&lt;br /&gt;
and source files for the PostgreSQL tutorial.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-contrib-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">c3d96e19d6a53bc20bb335bb074910f76c023e8f531fe89dae4c740c18cdffb2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-contrib-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-contrib</strong> - Extension modules distributed with PostgreSQL&lt;br /&gt;</p>

<p>The postgresql-contrib package contains various extension modules that are&lt;br /&gt;
included in the PostgreSQL distribution.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">fa463a3d334b21528a3358bebedce15834bb780077382b5b852ec5921853e178</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql</strong> - PostgreSQL client programs&lt;br /&gt;</p>

<p>PostgreSQL is an advanced Object-Relational database management system (DBMS).&lt;br /&gt;
The base postgresql package contains the client programs that you'll need to&lt;br /&gt;
access a PostgreSQL DBMS server, as well as HTML documentation for the whole&lt;br /&gt;
system.  These client programs can be located on the same machine as the&lt;br /&gt;
PostgreSQL server, or on a remote machine that accesses a PostgreSQL server&lt;br /&gt;
over a network connection.  The PostgreSQL server can be found in the&lt;br /&gt;
postgresql-server sub-package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>postgresql-upgrade-devel-16.13-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 02:05:37 PM GMT</pubDate>
      <guid isPermaLink="false">454def201ce6ce3ea46eab3de04bd92e984e43f3d0119ca8f8e7daef14c01984</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/postgresql-upgrade-devel-16.13-2.el10.aarch64.rpm</link>
      <description><p><strong>postgresql-upgrade-devel</strong> - Support for build of extensions required for upgrade process&lt;br /&gt;</p>

<p>The postgresql-devel package contains the header files and libraries&lt;br /&gt;
needed to compile C or C++ applications which are necessary in upgrade&lt;br /&gt;
process.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nikola Davidova &amp;lt;ndavidov@redhat.com&amp;gt; - 16.13-2
- Release bump for bash-profile fix for imagemode

Fri, 27 Feb 2026 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.13-1
- Update to 16.13
- Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
- Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
- Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
- Resolves: RHEL-149365 RHEL-149399 RHEL-149333

Mon, 01 Dec 2025 GMT - Filip Janus &amp;lt;fjanus@redhat.com&amp;gt; - 16.11-1
- Update to 16.11
- Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
- Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-kiosk-search-appliance-49.0-11.el10.noarch</title>
      <pubDate>Tue, 17 Mar 2026 01:25:26 PM GMT</pubDate>
      <guid isPermaLink="false">de3cc2ede89dc0f2f8e093d59297660d5b0d17c2345186d036f448aeb8b5ceb5</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gnome-kiosk-search-appliance-49.0-11.el10.noarch.rpm</link>
      <description><p><strong>gnome-kiosk-search-appliance</strong> - Example search application application that uses GNOME Kiosk&lt;br /&gt;</p>

<p>This package provides a full screen firefox window pointed to google.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-11
- Backport the lock-on-monitor feature

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-10
- Backport fixes for compiler warnings

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-9
- Backport fix for initial window state, size and position

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-kiosk-script-session-49.0-11.el10.noarch</title>
      <pubDate>Tue, 17 Mar 2026 01:25:26 PM GMT</pubDate>
      <guid isPermaLink="false">66d255cc2b65e2fee1db4f957a568b6cc7907755b4635153dfdc2d31c4b595a9</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gnome-kiosk-script-session-49.0-11.el10.noarch.rpm</link>
      <description><p><strong>gnome-kiosk-script-session</strong> - Basic session used for running kiosk application from shell script&lt;br /&gt;</p>

<p>This package generates a shell script and the necessary scaffolding to start that shell script within a kiosk session.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-11
- Backport the lock-on-monitor feature

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-10
- Backport fixes for compiler warnings

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-9
- Backport fix for initial window state, size and position

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>gnome-kiosk-49.0-11.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 01:25:26 PM GMT</pubDate>
      <guid isPermaLink="false">9317a8f0dbf0e7bf39e3fa89f72fff4575dda890815f269ea5243b1a11236cdd</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/gnome-kiosk-49.0-11.el10.aarch64.rpm</link>
      <description><p><strong>gnome-kiosk</strong> - Window management and application launching for GNOME&lt;br /&gt;</p>

<p>GNOME Kiosk provides a desktop enviroment suitable for fixed purpose, or&lt;br /&gt;
single application deployments like wall displays and point-of-sale systems.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-11
- Backport the lock-on-monitor feature

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-10
- Backport fixes for compiler warnings

Thu, 05 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.0-9
- Backport fix for initial window state, size and position

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>valkey-devel-8.1.6-1.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 11:50:06 AM GMT</pubDate>
      <guid isPermaLink="false">92569ca67cfb603b107effaef7e90cabee616c2481b6dbbd4a3a533cf7ebea97</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/valkey-devel-8.1.6-1.el10.aarch64.rpm</link>
      <description><p><strong>valkey-devel</strong> - Development header for Valkey module development&lt;br /&gt;</p>

<p>Header file required for building loadable Valkey modules.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 04 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 8.1.6-1
- Rebase to version 8.1
- fix CONFIG REWRITE breaks configuration
  reported as https://github.com/valkey-io/valkey/issues/2678
  using patch from https://github.com/valkey-io/valkey/pull/2689
- add sub-package for rdma module
- use patch for configuration changes
- add /etc/valkey/modules drop-in directory for module configuration files
- add %valkey_version and %valkey_modules_cfg macros
- fix module linker flags using patch from
  https://github.com/valkey-io/valkey/pull/3344

Mon, 02 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 8.0.7-1
- Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733

Fri, 17 Oct 2025 GMT - Remi Collet &amp;lt;remi@fedoraproject.org&amp;gt; - 8.0.6-2
- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>valkey-8.1.6-1.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 11:50:06 AM GMT</pubDate>
      <guid isPermaLink="false">3bc4c15cafa8a0705d887a5d1188ffd4c8bb14c7217ed6ae3d1b228eea20123a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/valkey-8.1.6-1.el10.aarch64.rpm</link>
      <description><p><strong>valkey</strong> - A persistent key-value database&lt;br /&gt;</p>

<p>Valkey is an advanced key-value store. It is often referred to as a data&lt;br /&gt;
structure server since keys can contain strings, hashes, lists, sets and&lt;br /&gt;
sorted sets.&lt;br /&gt;
&lt;br /&gt;
You can run atomic operations on these types, like appending to a string;&lt;br /&gt;
incrementing the value in a hash; pushing to a list; computing set&lt;br /&gt;
intersection, union and difference; or getting the member with highest&lt;br /&gt;
ranking in a sorted set.&lt;br /&gt;
&lt;br /&gt;
In order to achieve its outstanding performance, Valkey works with an&lt;br /&gt;
in-memory dataset. Depending on your use case, you can persist it either&lt;br /&gt;
by dumping the dataset to disk every once in a while, or by appending&lt;br /&gt;
each command to a log.&lt;br /&gt;
&lt;br /&gt;
Valkey also supports trivial-to-setup master-slave replication, with very&lt;br /&gt;
fast non-blocking first synchronization, auto-reconnection on net split&lt;br /&gt;
and so forth.&lt;br /&gt;
&lt;br /&gt;
Other features include Transactions, Pub/Sub, Lua scripting, Keys with a&lt;br /&gt;
limited time-to-live, and configuration settings to make Valkey behave like&lt;br /&gt;
a cache.&lt;br /&gt;
&lt;br /&gt;
You can use Valkey from most programming languages also.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Wed, 04 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 8.1.6-1
- Rebase to version 8.1
- fix CONFIG REWRITE breaks configuration
  reported as https://github.com/valkey-io/valkey/issues/2678
  using patch from https://github.com/valkey-io/valkey/pull/2689
- add sub-package for rdma module
- use patch for configuration changes
- add /etc/valkey/modules drop-in directory for module configuration files
- add %valkey_version and %valkey_modules_cfg macros
- fix module linker flags using patch from
  https://github.com/valkey-io/valkey/pull/3344

Mon, 02 Mar 2026 GMT - Lukas Javorsky &amp;lt;ljavorsk@redhat.com&amp;gt; - 8.0.7-1
- Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733

Fri, 17 Oct 2025 GMT - Remi Collet &amp;lt;remi@fedoraproject.org&amp;gt; - 8.0.6-2
- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>avahi-tools-0.9~rc2-3.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 11:49:15 AM GMT</pubDate>
      <guid isPermaLink="false">70eef525d3080d3294d2620af31a6e8ff92d1fd9f56f4a37f669e70582259135</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/avahi-tools-0.9~rc2-3.el10.aarch64.rpm</link>
      <description><p><strong>avahi-tools</strong> - Command line tools for mDNS browsing and publishing&lt;br /&gt;</p>

<p>Command line tools that use avahi to browse and publish mDNS services.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-3
- Add sysusers.d config files to create avahi and avahi-autoipd users/groups (RHEL-110179)

Wed, 09 Jul 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-2
- Fix for CVE-2024-52615 (RHEL-67715)

Wed, 12 Feb 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-1
- Rebase to 0.9-rc2 (RHEL-78770)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>avahi-glib-0.9~rc2-3.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 11:49:15 AM GMT</pubDate>
      <guid isPermaLink="false">3bbd71dcbfa186c331887f5b6917b0902446c83379f5cb5e2c6514fd19edc8aa</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/avahi-glib-0.9~rc2-3.el10.aarch64.rpm</link>
      <description><p><strong>avahi-glib</strong> - Glib libraries for avahi&lt;br /&gt;</p>

<p>Libraries for easy use of avahi from glib applications.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-3
- Add sysusers.d config files to create avahi and avahi-autoipd users/groups (RHEL-110179)

Wed, 09 Jul 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-2
- Fix for CVE-2024-52615 (RHEL-67715)

Wed, 12 Feb 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-1
- Rebase to 0.9-rc2 (RHEL-78770)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>avahi-devel-0.9~rc2-3.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 11:49:15 AM GMT</pubDate>
      <guid isPermaLink="false">7cfaf129ef83e2ac3a58c9ed7d6e5e8f113a57df65bd580fc127a87b6df55ee1</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/avahi-devel-0.9~rc2-3.el10.aarch64.rpm</link>
      <description><p><strong>avahi-devel</strong> - Libraries and header files for avahi development&lt;br /&gt;</p>

<p>The avahi-devel package contains the header files and libraries&lt;br /&gt;
necessary for developing programs using avahi.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 10 Mar 2026 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-3
- Add sysusers.d config files to create avahi and avahi-autoipd users/groups (RHEL-110179)

Wed, 09 Jul 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-2
- Fix for CVE-2024-52615 (RHEL-67715)

Wed, 12 Feb 2025 GMT - Michal Sekletar &amp;lt;msekleta@redhat.com&amp;gt; - 0.9~rc2-1
- Rebase to 0.9-rc2 (RHEL-78770)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ibus-anthy-python-1.5.17-2.el10.noarch</title>
      <pubDate>Tue, 17 Mar 2026 10:22:16 AM GMT</pubDate>
      <guid isPermaLink="false">4a2bc5050799db5eb8cfa7137d8af50080b62df2c959ddbffd0b455dfadacd13</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ibus-anthy-python-1.5.17-2.el10.noarch.rpm</link>
      <description><p><strong>ibus-anthy-python</strong> - Anthy Python files for IBus&lt;br /&gt;</p>

<p>This package contains the Anthy Python files for IBus</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Takao Fujiwara &amp;lt;tfujiwar@redhat.com&amp;gt; - 1.5.17-2
- Resolves: RHEL-155996 ibus-anthy: Fails to build in 2026

Wed, 19 Mar 2025 GMT - Takao Fujiwara &amp;lt;tfujiwar@redhat.com&amp;gt; - 1.5.17-1
- Bump to 1.5.17

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.5.16-22
- Bump release for October 2024 mass rebuild:

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>ibus-anthy-1.5.17-2.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 10:22:16 AM GMT</pubDate>
      <guid isPermaLink="false">0610be5226c6341faf9cd28ad6bc56d96dc31d0672ad06908367c181c1e33d08</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/ibus-anthy-1.5.17-2.el10.aarch64.rpm</link>
      <description><p><strong>ibus-anthy</strong> - The Anthy engine for IBus input platform&lt;br /&gt;</p>

<p>The Anthy engine for IBus platform. It provides Japanese input method from&lt;br /&gt;
a library of the Anthy.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Takao Fujiwara &amp;lt;tfujiwar@redhat.com&amp;gt; - 1.5.17-2
- Resolves: RHEL-155996 ibus-anthy: Fails to build in 2026

Wed, 19 Mar 2025 GMT - Takao Fujiwara &amp;lt;tfujiwar@redhat.com&amp;gt; - 1.5.17-1
- Bump to 1.5.17

Tue, 29 Oct 2024 GMT - Troy Dawson &amp;lt;tdawson@redhat.com&amp;gt; - 1.5.16-22
- Bump release for October 2024 mass rebuild:

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-utils-2.39-117.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 10:00:03 AM GMT</pubDate>
      <guid isPermaLink="false">eec967789d55eae0e7b83a822cd834f19abdd7f713c41b43334c6c10e7ba16b2</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/glibc-utils-2.39-117.el10.aarch64.rpm</link>
      <description><p><strong>glibc-utils</strong> - Development utilities from GNU C library&lt;br /&gt;</p>

<p>The glibc-utils package contains memusage, a memory usage profiler,&lt;br /&gt;
mtrace, a memory leak tracer and xtrace, a function call tracer&lt;br /&gt;
which can be helpful during program debugging.&lt;br /&gt;
&lt;br /&gt;
If unsure if you need this, don't install this package.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Arjun Shankar &amp;lt;arjun@redhat.com&amp;gt; - 2.39-117	
- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)

Tue, 03 Mar 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-116	
- Remove unneeded ld-linux .debug files (RHEL-136312)

Thu, 26 Feb 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-115	
- Fix race condition in io/tst-stat (RHEL-151711)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-locale-source-2.39-117.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 10:00:03 AM GMT</pubDate>
      <guid isPermaLink="false">c633a14adda300e9688359abae24496d263596de0480a0d50bdd0e3c2e278a4a</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/glibc-locale-source-2.39-117.el10.aarch64.rpm</link>
      <description><p><strong>glibc-locale-source</strong> - The sources for the locales&lt;br /&gt;</p>

<p>The sources for all locales provided in the language packs.&lt;br /&gt;
If you are building custom locales you will most likely use&lt;br /&gt;
these sources as the basis for your new locale.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Arjun Shankar &amp;lt;arjun@redhat.com&amp;gt; - 2.39-117	
- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)

Tue, 03 Mar 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-116	
- Remove unneeded ld-linux .debug files (RHEL-136312)

Thu, 26 Feb 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-115	
- Fix race condition in io/tst-stat (RHEL-151711)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-doc-2.39-117.el10.noarch</title>
      <pubDate>Tue, 17 Mar 2026 10:00:03 AM GMT</pubDate>
      <guid isPermaLink="false">b44719ca21664324cb7a0982a5e9af59e6b29f882a22409f2764655b04c6c14d</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/glibc-doc-2.39-117.el10.noarch.rpm</link>
      <description><p><strong>glibc-doc</strong> - Documentation for GNU libc&lt;br /&gt;</p>

<p>The glibc-doc package contains The GNU C Library Reference Manual in info&lt;br /&gt;
format.  Additional package documentation is also provided.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Arjun Shankar &amp;lt;arjun@redhat.com&amp;gt; - 2.39-117	
- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)

Tue, 03 Mar 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-116	
- Remove unneeded ld-linux .debug files (RHEL-136312)

Thu, 26 Feb 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-115	
- Fix race condition in io/tst-stat (RHEL-151711)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>glibc-devel-2.39-117.el10.aarch64</title>
      <pubDate>Tue, 17 Mar 2026 10:00:03 AM GMT</pubDate>
      <guid isPermaLink="false">d3d89f215a61e9142bb7f245124b277d4b090a645f7f372aad4cab46faeb3a30</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/glibc-devel-2.39-117.el10.aarch64.rpm</link>
      <description><p><strong>glibc-devel</strong> - Object files for development using standard C libraries.&lt;br /&gt;</p>

<p>The glibc-devel package contains the object files necessary&lt;br /&gt;
for developing programs which use the standard C libraries (which are&lt;br /&gt;
used by nearly all programs).  If you are developing programs which&lt;br /&gt;
will use the standard C libraries, your system needs to have these&lt;br /&gt;
standard object files available in order to create the&lt;br /&gt;
executables.&lt;br /&gt;
&lt;br /&gt;
Install glibc-devel if you are going to develop programs which will&lt;br /&gt;
use the standard C libraries.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Tue, 17 Mar 2026 GMT - Arjun Shankar &amp;lt;arjun@redhat.com&amp;gt; - 2.39-117	
- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-146428)

Tue, 03 Mar 2026 GMT - DJ Delorie &amp;lt;dj@redhat.com&amp;gt; - 2.39-116	
- Remove unneeded ld-linux .debug files (RHEL-136312)

Thu, 26 Feb 2026 GMT - Frédéric Bérat &amp;lt;fberat@redhat.com&amp;gt; - 2.39-115	
- Fix race condition in io/tst-stat (RHEL-151711)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>binutils-gprofng-2.41-65.el10.aarch64</title>
      <pubDate>Mon, 16 Mar 2026 09:53:12 AM GMT</pubDate>
      <guid isPermaLink="false">79f235a72a368e9e00eaf1ea590572f06e5c13b748de9e7dff47aec8a3b3fd1e</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/binutils-gprofng-2.41-65.el10.aarch64.rpm</link>
      <description><p><strong>binutils-gprofng</strong> - Next Generating code profiling tool&lt;br /&gt;</p>

<p>GprofNG is the GNU Next Generation Profiler for analyzing the performance&lt;br /&gt;
of Linux applications.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-65
- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-155043)

Thu, 26 Feb 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-64
- Improve the linker testsuite's ability to run remote tests.  (RHEL-151495)

Mon, 26 Jan 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-63
- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>binutils-devel-2.41-65.el10.aarch64</title>
      <pubDate>Mon, 16 Mar 2026 09:53:12 AM GMT</pubDate>
      <guid isPermaLink="false">2fdc8619b8059ed493a497c87a99bd21dc62fdccf1cc2d87ef1cf5616b7b0511</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/binutils-devel-2.41-65.el10.aarch64.rpm</link>
      <description><p><strong>binutils-devel</strong> - BFD and opcodes static and dynamic libraries and header files&lt;br /&gt;</p>

<p>This package contains BFD and opcodes static and dynamic libraries.&lt;br /&gt;
&lt;br /&gt;
The dynamic libraries are in this package, rather than a separate&lt;br /&gt;
base package because they are actually linker scripts that force&lt;br /&gt;
the use of the static libraries.  This is because the API of the&lt;br /&gt;
BFD library is too unstable to be used dynamically.&lt;br /&gt;
&lt;br /&gt;
The static libraries are here because they are now needed by the&lt;br /&gt;
dynamic libraries.&lt;br /&gt;
&lt;br /&gt;
Developers starting new projects are strongly encouraged to consider&lt;br /&gt;
using libelf instead of BFD.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 16 Mar 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-65
- Add missing tests of AArch64 instructions to the assembler testsuite.  (RHEL-155043)

Thu, 26 Feb 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-64
- Improve the linker testsuite's ability to run remote tests.  (RHEL-151495)

Mon, 26 Jan 2026 GMT - Nick Clifton  &amp;lt;nickc@redhat.com&amp;gt; - 2.41-63
- Run linker tests for cross binutils.  Compare the native and cross results.  (RHEL-117111)

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mutter-common-49.4-4.el10.noarch</title>
      <pubDate>Fri, 13 Mar 2026 10:49:23 AM GMT</pubDate>
      <guid isPermaLink="false">0189c53be9b1130cb23157d53cb5943d10347f3ea211c2459de154db1c6ac0af</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mutter-common-49.4-4.el10.noarch.rpm</link>
      <description><p><strong>mutter-common</strong> - Common files used by mutter and forks of mutter&lt;br /&gt;</p>

<p>Common files used by Mutter and soft forks of Mutter</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.4-4
- Locking windows on monitor

Tue, 17 Feb 2026 GMT - Jonas Ådahl &amp;lt;jadahl@redhat.com&amp;gt; - 49.4-3
- Fix flaky popup test

Mon, 16 Feb 2026 GMT - Jonas Ådahl &amp;lt;jadahl@redhat.com&amp;gt; - 49.4-2
- Fix flaky test case

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>mutter-49.4-4.el10.aarch64</title>
      <pubDate>Fri, 13 Mar 2026 10:49:23 AM GMT</pubDate>
      <guid isPermaLink="false">92217fd791be31697c5b8db32cb24930f61579e69f268587dcaf67bd97ef74ed</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/mutter-49.4-4.el10.aarch64.rpm</link>
      <description><p><strong>mutter</strong> - Window and compositing manager based on Clutter&lt;br /&gt;</p>

<p>Mutter is a window and compositing manager that displays and manages&lt;br /&gt;
your desktop via OpenGL. Mutter combines a sophisticated display engine&lt;br /&gt;
using the Clutter toolkit with solid window-management logic inherited&lt;br /&gt;
from the Metacity window manager.&lt;br /&gt;
&lt;br /&gt;
While Mutter can be used stand-alone, it is primarily intended to be&lt;br /&gt;
used as the display core of a larger system such as GNOME Shell. For&lt;br /&gt;
this reason, Mutter is very extensible via plugins, which are used both&lt;br /&gt;
to add fancy visual effects and to rework the window management&lt;br /&gt;
behaviors to meet the needs of the environment.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Fri, 13 Mar 2026 GMT - Olivier Fourdan &amp;lt;ofourdan@redhat.com&amp;gt; - 49.4-4
- Locking windows on monitor

Tue, 17 Feb 2026 GMT - Jonas Ådahl &amp;lt;jadahl@redhat.com&amp;gt; - 49.4-3
- Fix flaky popup test

Mon, 16 Feb 2026 GMT - Jonas Ådahl &amp;lt;jadahl@redhat.com&amp;gt; - 49.4-2
- Fix flaky test case

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>osinfo-db-20250606-2.el10.noarch</title>
      <pubDate>Thu, 12 Mar 2026 10:41:16 AM GMT</pubDate>
      <guid isPermaLink="false">6af76d4696257961279e6c6443eb057c16355cdb1a97cd59559b22822f5ac289</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/osinfo-db-20250606-2.el10.noarch.rpm</link>
      <description><p><strong>osinfo-db</strong> - osinfo database files&lt;br /&gt;</p>

<p>The osinfo database provides information about operating systems and&lt;br /&gt;
hypervisor platforms to facilitate the automated configuration and&lt;br /&gt;
provisioning of new virtual machines</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Mon, 09 Mar 2026 GMT - Pavel Hrdina &amp;lt;phrdina@redhat.com&amp;gt; - 20250606-2
- Add rhel-10.2 and rhel-9.8 prerelease

Fri, 06 Jun 2025 GMT - Victor Toso &amp;lt;victortoso@redhat.com&amp;gt; - 20250606-1
- Update to v20250606

Mon, 27 Jan 2025 GMT - Victor Toso &amp;lt;victortoso@redhat.com&amp;gt; - 20250124-1
- Update to v20250124

...&lt;/pre&gt;</description>
    </item>
    <item>
      <title>edk2-aarch64-20260221-1.el10.noarch</title>
      <pubDate>Thu, 12 Mar 2026 09:05:27 AM GMT</pubDate>
      <guid isPermaLink="false">d2569adfcadd33b9b57c9e15950189002b51d97d934772780f549896dc234448</guid>
      <link>http://mirror.stream.centos.org/10-stream/AppStream/aarch64/os/Packages/edk2-aarch64-20260221-1.el10.noarch.rpm</link>
      <description><p><strong>edk2-aarch64</strong> - UEFI firmware for aarch64 virtual machines&lt;br /&gt;</p>

<p>AAVMF (ARM Architecture Virtual Machine Firmware) is an EFI Development Kit II&lt;br /&gt;
platform that enables UEFI support for QEMU/KVM ARM Virtual Machines. This&lt;br /&gt;
package contains a 64-bit build.</p>

<p><strong>Change Log:</strong></p>

&lt;pre&gt;Thu, 12 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20260221-1
- Rebase to edk2-stable202602 [RHEL-151719]
- Resolves: RHEL-151719
  ([edk2,rhel-10] rebase to edk2-stable202602)

Mon, 09 Mar 2026 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20251114-5
- edk2-add-uefi-vars-firmware-json-files.patch [RHEL-150696]
- Resolves: RHEL-150696
  (edk2: Add JSON descriptors for uefi-vars builds)

Wed, 12 Nov 2025 GMT - Miroslav Rezanina &amp;lt;mrezanin@redhat.com&amp;gt; - 20250822-4
- edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
- edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
- Resolves: RHEL-126085
  ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)

...&lt;/pre&gt;</description>
    </item>
  </channel>
</rss>
