public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/kernel] rawhide: kernel-7.3.0-0.rc0.260818g0f23d56f17fd.3
@ 2026-08-18 17:23 Justin M. Forbes
0 siblings, 0 replies; only message in thread
From: Justin M. Forbes @ 2026-08-18 17:23 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/kernel
Branch : rawhide
Commit : d15383d2d6a1642304901e2a2428dfa31317ab3f
Author : Justin M. Forbes <jforbes@fedoraproject.org>
Date : 2026-08-18T11:23:11-06:00
Stats : +8039/-4730 in 47 file(s)
URL : https://src.fedoraproject.org/rpms/kernel/c/d15383d2d6a1642304901e2a2428dfa31317ab3f?branch=rawhide
Log:
kernel-7.3.0-0.rc0.260818g0f23d56f17fd.3
* Tue Aug 18 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.3.0-0.rc0.0f23d56f17fd.3]
- automotive: enable HUGETLBFS to workaround build error (Scott Weaver)
Resolves:
Signed-off-by: Justin M. Forbes <jforbes@fedoraproject.org>
---
diff --git a/Makefile.rhelver b/Makefile.rhelver
index b9b4f35..dbdb99a 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 99
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
-RHEL_RELEASE = 61
+RHEL_RELEASE = 3
#
# RHEL_REBASE_NUM
diff --git a/Patchlist.changelog b/Patchlist.changelog
index 8c0e973..3b3483c 100644
--- a/Patchlist.changelog
+++ b/Patchlist.changelog
@@ -1,486 +1,450 @@
-https://gitlab.com/cki-project/kernel-ark/-/commit/75c8343f66def9d6ab14cd59f464c872593298df
- 75c8343f66def9d6ab14cd59f464c872593298df Revert "Input: rmi4 - remove the need for artificial IRQ in case of HID"
+https://gitlab.com/cki-project/kernel-ark/-/commit/6a744b3f3df25c802e864b296473adc6751586c2
+ 6a744b3f3df25c802e864b296473adc6751586c2 [redhat] drivers/scsi/sd.c: cleanup
-https://gitlab.com/cki-project/kernel-ark/-/commit/91f7589ddc98d53780b37dd67962c9cd62251a61
- 91f7589ddc98d53780b37dd67962c9cd62251a61 Revert "crypto: rng - Override drivers/char/random in FIPS mode"
+https://gitlab.com/cki-project/kernel-ark/-/commit/9d3536c5812966cd1ae0485817388aafca5ce408
+ 9d3536c5812966cd1ae0485817388aafca5ce408 redhat: rh_flags: mark !CONFIG_RHEL_DIFFERENCES stubs as static inline
-https://gitlab.com/cki-project/kernel-ark/-/commit/af93b4d81dde5a52f0f86ce435c314e839d03ca5
- af93b4d81dde5a52f0f86ce435c314e839d03ca5 Revert "crypto: rng - Ensure stdrng is tested before user-space starts"
+https://gitlab.com/cki-project/kernel-ark/-/commit/5c1769d7afa650778483949dd13aaaa7bca35523
+ 5c1769d7afa650778483949dd13aaaa7bca35523 redhat: Add DENYLIST.rhel to BPF selftests
-https://gitlab.com/cki-project/kernel-ark/-/commit/aac5dfb97c234c4993a61b1e4cbd4ddb3a32b670
- aac5dfb97c234c4993a61b1e4cbd4ddb3a32b670 Revert "crypto: rng - Fix extrng EFAULT handling"
+https://gitlab.com/cki-project/kernel-ark/-/commit/1852fa196683264678367fa57e647c975b534f58
+ 1852fa196683264678367fa57e647c975b534f58 Fix up rebase typo in drivers/pci/quirks.c
-https://gitlab.com/cki-project/kernel-ark/-/commit/717a71346af8ef0d53803599f4c76c43fd765fc3
- 717a71346af8ef0d53803599f4c76c43fd765fc3 Revert "Correct manual merge error in crypto/rng.c"
+https://gitlab.com/cki-project/kernel-ark/-/commit/86d9c36ebcacdb59d6499dc12e7e4909d5608c63
+ 86d9c36ebcacdb59d6499dc12e7e4909d5608c63 rh_message.h: update support status of mlx5 devices
-https://gitlab.com/cki-project/kernel-ark/-/commit/ecc4e2a675b8259cc3a3f6afe08500c4c869eab4
- ecc4e2a675b8259cc3a3f6afe08500c4c869eab4 Revert "Fix up rebase issues with rng.c"
+https://gitlab.com/cki-project/kernel-ark/-/commit/f6490ac57741ad650140f1cd9e2c6a1afdc9221b
+ f6490ac57741ad650140f1cd9e2c6a1afdc9221b efi: Fix swapped arguments to bsearch() in efi_status_to_*()
-https://gitlab.com/cki-project/kernel-ark/-/commit/ab9708d7c63369e49e0ffd0464443daf99778244
- ab9708d7c63369e49e0ffd0464443daf99778244 [redhat] drivers/scsi/sd.c: cleanup
+https://gitlab.com/cki-project/kernel-ark/-/commit/f481c8b71de69aa1de2d3a59f22d3d816bb38fa7
+ f481c8b71de69aa1de2d3a59f22d3d816bb38fa7 Revert "Removing Obsolete hba pci-ids from rhel8"
-https://gitlab.com/cki-project/kernel-ark/-/commit/2a8b73b44a1e17a51a654d0c984218358a816676
- 2a8b73b44a1e17a51a654d0c984218358a816676 Fix up rebase issues with rng.c
+https://gitlab.com/cki-project/kernel-ark/-/commit/317716cef41256eb2681e04918e47da426e64b9a
+ 317716cef41256eb2681e04918e47da426e64b9a rh_messages.h: add missing lpfc devices
-https://gitlab.com/cki-project/kernel-ark/-/commit/512eedc648e4fd3811c82b15c07dc622e4ceea6c
- 512eedc648e4fd3811c82b15c07dc622e4ceea6c redhat: rh_flags: mark !CONFIG_RHEL_DIFFERENCES stubs as static inline
+https://gitlab.com/cki-project/kernel-ark/-/commit/c49fa66a4dcc9b00c08e5a0d75ccf36244cb00a4
+ c49fa66a4dcc9b00c08e5a0d75ccf36244cb00a4 kernel: extend rh_waived to cope better with the CVE mitigations case
-https://gitlab.com/cki-project/kernel-ark/-/commit/5f3a5f448b3c1cf35c6c9d3d182ac0df005200a9
- 5f3a5f448b3c1cf35c6c9d3d182ac0df005200a9 redhat: Add DENYLIST.rhel to BPF selftests
+https://gitlab.com/cki-project/kernel-ark/-/commit/30d7318162f58c7f290dd39a51a77ebaa208e87e
+ 30d7318162f58c7f290dd39a51a77ebaa208e87e rh_messages.h: add missing aacraid device
-https://gitlab.com/cki-project/kernel-ark/-/commit/da90cfd07d2ffaa185b44af5579e21d716d44c46
- da90cfd07d2ffaa185b44af5579e21d716d44c46 Correct manual merge error in crypto/rng.c
+https://gitlab.com/cki-project/kernel-ark/-/commit/c165addbdb107f04a11849f4fa870750992ed452
+ c165addbdb107f04a11849f4fa870750992ed452 rh_messages.h: update unmaintained drivers
-https://gitlab.com/cki-project/kernel-ark/-/commit/69722a875a1ad5b5bd3cfbee8e0744f44b9a2d71
- 69722a875a1ad5b5bd3cfbee8e0744f44b9a2d71 Fix up rebase typo in drivers/pci/quirks.c
+https://gitlab.com/cki-project/kernel-ark/-/commit/10f592edc6b4ce30ca4b2edd412198afdd2b6cd6
+ 10f592edc6b4ce30ca4b2edd412198afdd2b6cd6 arm64: add early lockdown for secure boot
-https://gitlab.com/cki-project/kernel-ark/-/commit/4f4f94f4b4fef0f4f2d7c25aa43fe408f67bf45b
- 4f4f94f4b4fef0f4f2d7c25aa43fe408f67bf45b rh_message.h: update support status of mlx5 devices
+https://gitlab.com/cki-project/kernel-ark/-/commit/f8f41a7dd617afc6a88ed1eaf69dfb0bd91a10d8
+ f8f41a7dd617afc6a88ed1eaf69dfb0bd91a10d8 efi: pass secure boot mode to kernel proper
-https://gitlab.com/cki-project/kernel-ark/-/commit/1fc49a8e60b44df7c053f37b81c038e152dc8c11
- 1fc49a8e60b44df7c053f37b81c038e152dc8c11 efi: Fix swapped arguments to bsearch() in efi_status_to_*()
+https://gitlab.com/cki-project/kernel-ark/-/commit/a3cc8a545454544a62a534270ba8c4814fe2f4c0
+ a3cc8a545454544a62a534270ba8c4814fe2f4c0 selftests/bpf: Remove ksyms_weak_lskel test
-https://gitlab.com/cki-project/kernel-ark/-/commit/cb6973630c116732f94c57d04dc7751e25502919
- cb6973630c116732f94c57d04dc7751e25502919 Revert "Removing Obsolete hba pci-ids from rhel8"
+https://gitlab.com/cki-project/kernel-ark/-/commit/fa8bc54ec38e28eae0df99a7c68b592650f20d63
+ fa8bc54ec38e28eae0df99a7c68b592650f20d63 Simplify include Makefile.rhelver
-https://gitlab.com/cki-project/kernel-ark/-/commit/0ad8c01f0d79a5652c6c4f0988a1ba1a90084900
- 0ad8c01f0d79a5652c6c4f0988a1ba1a90084900 rh_messages.h: add missing lpfc devices
+https://gitlab.com/cki-project/kernel-ark/-/commit/2dcb707e1015e4b5b89312ab1169018baa6fe4ad
+ 2dcb707e1015e4b5b89312ab1169018baa6fe4ad redhat: make ENABLE_WERROR also enable OBJTOOL_WERROR
-https://gitlab.com/cki-project/kernel-ark/-/commit/cc0e896ba5e16753fe0d071830713c6ecb852976
- cc0e896ba5e16753fe0d071830713c6ecb852976 kernel: extend rh_waived to cope better with the CVE mitigations case
+https://gitlab.com/cki-project/kernel-ark/-/commit/19dbcd1126bbf53dc88f443091eeb43a699baf9f
+ 19dbcd1126bbf53dc88f443091eeb43a699baf9f main.c: fix initcall blacklisted
-https://gitlab.com/cki-project/kernel-ark/-/commit/334c64fb992273cc56d4a53b89b8e8ef7c2dbfcc
- 334c64fb992273cc56d4a53b89b8e8ef7c2dbfcc rh_messages.h: add missing aacraid device
+https://gitlab.com/cki-project/kernel-ark/-/commit/c0e48c596400c5aa04c22a2f2fcf08b9dee23789
+ c0e48c596400c5aa04c22a2f2fcf08b9dee23789 arch/x86/kernel/setup.c: fix rh_check_supported
-https://gitlab.com/cki-project/kernel-ark/-/commit/baf0fcb2bd236b00abb5545a35fe5888cac9a62c
- baf0fcb2bd236b00abb5545a35fe5888cac9a62c rh_messages.h: update unmaintained drivers
+https://gitlab.com/cki-project/kernel-ark/-/commit/c986763085b39c4ea562f041596525601a34ec56
+ c986763085b39c4ea562f041596525601a34ec56 efi,lockdown: fix kernel lockdown on Secure Boot
-https://gitlab.com/cki-project/kernel-ark/-/commit/cb6357af0308b241092e271a1a01f6eceadb939e
- cb6357af0308b241092e271a1a01f6eceadb939e arm64: add early lockdown for secure boot
+https://gitlab.com/cki-project/kernel-ark/-/commit/3ad3015d7485a5a4be4713f01ad94afe2f735abc
+ 3ad3015d7485a5a4be4713f01ad94afe2f735abc redhat: automotive: define CONFIG_RH_AUTOMOTIVE
-https://gitlab.com/cki-project/kernel-ark/-/commit/e795a9a103f66b9de16837b58918ca9dfd015e49
- e795a9a103f66b9de16837b58918ca9dfd015e49 efi: pass secure boot mode to kernel proper
+https://gitlab.com/cki-project/kernel-ark/-/commit/12988e7563d3e665723288a13fc55aea1e4d0fff
+ 12988e7563d3e665723288a13fc55aea1e4d0fff redhat: fix modules.order target
-https://gitlab.com/cki-project/kernel-ark/-/commit/f87f6140cb70b36479bf24e3cc25fd7dca88a00d
- f87f6140cb70b36479bf24e3cc25fd7dca88a00d selftests/bpf: Remove ksyms_weak_lskel test
+https://gitlab.com/cki-project/kernel-ark/-/commit/c8f85a24bbf133aed243cfccba0f7b9703ad7151
+ c8f85a24bbf133aed243cfccba0f7b9703ad7151 [redhat] rh_messages.h: driver and device updates
-https://gitlab.com/cki-project/kernel-ark/-/commit/f57d4487f44e61c3b7a585e38b25d6283bf8c871
- f57d4487f44e61c3b7a585e38b25d6283bf8c871 Simplify include Makefile.rhelver
+https://gitlab.com/cki-project/kernel-ark/-/commit/b11ea3070a7227a82f9f13bd3ef98728de3e96bf
+ b11ea3070a7227a82f9f13bd3ef98728de3e96bf crypto: sig - Disable signing
-https://gitlab.com/cki-project/kernel-ark/-/commit/3a6c0c7b9a32bb31d764d0b907830dcd0ad06f6a
- 3a6c0c7b9a32bb31d764d0b907830dcd0ad06f6a redhat: make ENABLE_WERROR also enable OBJTOOL_WERROR
+https://gitlab.com/cki-project/kernel-ark/-/commit/87a93cf8cc587df8998aa2824a10d693aeb94ead
+ 87a93cf8cc587df8998aa2824a10d693aeb94ead [redhat] rh_messages.h: Mark BlueField-4 as disabled
-https://gitlab.com/cki-project/kernel-ark/-/commit/d02bbf7160607fa2a45aacbec779636fec20d0fe
- d02bbf7160607fa2a45aacbec779636fec20d0fe main.c: fix initcall blacklisted
+https://gitlab.com/cki-project/kernel-ark/-/commit/92c2d0a8d406283546ae3054228053241adb2810
+ 92c2d0a8d406283546ae3054228053241adb2810 Update the RHEL_DIFFERENCES help string
-https://gitlab.com/cki-project/kernel-ark/-/commit/6883d08acb55a084683855512c911c79f055bdc6
- 6883d08acb55a084683855512c911c79f055bdc6 arch/x86/kernel/setup.c: fix rh_check_supported
+https://gitlab.com/cki-project/kernel-ark/-/commit/fdf90a59f900cd766de74b1ad2262dcda084fbcb
+ fdf90a59f900cd766de74b1ad2262dcda084fbcb redhat: include resolve_btfids in kernel-devel
-https://gitlab.com/cki-project/kernel-ark/-/commit/ab03eaa7ff16b794ca40b30eaabdccca07238261
- ab03eaa7ff16b794ca40b30eaabdccca07238261 efi,lockdown: fix kernel lockdown on Secure Boot
+https://gitlab.com/cki-project/kernel-ark/-/commit/526c6c1b2061a1eb978b131a59ea2485b384aa86
+ 526c6c1b2061a1eb978b131a59ea2485b384aa86 redhat: workaround CKI cross compilation for scripts
-https://gitlab.com/cki-project/kernel-ark/-/commit/16f208cdb77cc2b53efd91ecf2f23f5911b384ee
- 16f208cdb77cc2b53efd91ecf2f23f5911b384ee redhat: automotive: define CONFIG_RH_AUTOMOTIVE
+https://gitlab.com/cki-project/kernel-ark/-/commit/361edbcd813b3971c6362e30068ce4f3ff4daedb
+ 361edbcd813b3971c6362e30068ce4f3ff4daedb crypto: akcipher - Disable signing and decryption
-https://gitlab.com/cki-project/kernel-ark/-/commit/7c3c1545025b2fd0c33b3fcf38f526e149fb6731
- 7c3c1545025b2fd0c33b3fcf38f526e149fb6731 redhat: fix modules.order target
+https://gitlab.com/cki-project/kernel-ark/-/commit/52ef5e0719bdb276aa6bc6144de453634f67324c
+ 52ef5e0719bdb276aa6bc6144de453634f67324c crypto: dh - implement FIPS PCT
-https://gitlab.com/cki-project/kernel-ark/-/commit/ee9db481f712f52a8f2f08a3ca4b65d7dce55011
- ee9db481f712f52a8f2f08a3ca4b65d7dce55011 [redhat] rh_messages.h: driver and device updates
+https://gitlab.com/cki-project/kernel-ark/-/commit/db5118a228b2c85f51e78fb894a62818f7420d48
+ db5118a228b2c85f51e78fb894a62818f7420d48 crypto: ecdh - disallow plain "ecdh" usage in FIPS mode
-https://gitlab.com/cki-project/kernel-ark/-/commit/767e89dc12393a9be7ec14ac578ce100a426f8f4
- 767e89dc12393a9be7ec14ac578ce100a426f8f4 crypto: rng - Fix extrng EFAULT handling
+https://gitlab.com/cki-project/kernel-ark/-/commit/3570835f8b549608fe6c6bc6c9a6d1829ad0075a
+ 3570835f8b549608fe6c6bc6c9a6d1829ad0075a crypto: seqiv - flag instantiations as FIPS compliant
-https://gitlab.com/cki-project/kernel-ark/-/commit/f2e2bc5ad22b39e974d5cc0b973f175b09a395c1
- f2e2bc5ad22b39e974d5cc0b973f175b09a395c1 crypto: sig - Disable signing
+https://gitlab.com/cki-project/kernel-ark/-/commit/5b4228c473962b7779f6d6edd6e66a9653dfc45f
+ 5b4228c473962b7779f6d6edd6e66a9653dfc45f [kernel] bpf: set default value for bpf_jit_harden
-https://gitlab.com/cki-project/kernel-ark/-/commit/d74ed5f596e4ead58bc33a5c8047c588a9ec7671
- d74ed5f596e4ead58bc33a5c8047c588a9ec7671 crypto: rng - Ensure stdrng is tested before user-space starts
+https://gitlab.com/cki-project/kernel-ark/-/commit/04182c32dfaef22e7122578d533001400c9c1275
+ 04182c32dfaef22e7122578d533001400c9c1275 not upstream: Disable vdso getrandom when FIPS is enabled
-https://gitlab.com/cki-project/kernel-ark/-/commit/fe101ac78157faa706667423bb3f32427cf77ac1
- fe101ac78157faa706667423bb3f32427cf77ac1 [redhat] rh_messages.h: Mark BlueField-4 as disabled
+https://gitlab.com/cki-project/kernel-ark/-/commit/1f06b4b22f09a2b3d480efc3b62241c92efdcc99
+ 1f06b4b22f09a2b3d480efc3b62241c92efdcc99 Add support to rh_waived cmdline boot parameter
-https://gitlab.com/cki-project/kernel-ark/-/commit/4ab3ea9a662785071a6aea07b278beff0723d7d3
- 4ab3ea9a662785071a6aea07b278beff0723d7d3 Update the RHEL_DIFFERENCES help string
+https://gitlab.com/cki-project/kernel-ark/-/commit/5beed96f4969407d933d49be9daa05d9159330cd
+ 5beed96f4969407d933d49be9daa05d9159330cd rh_flags: fix failed when register_sysctl_sz rh_flags_table to kernel
-https://gitlab.com/cki-project/kernel-ark/-/commit/d4ef3630c0aad985b2513ac9eafd1ff9a7c14ce0
- d4ef3630c0aad985b2513ac9eafd1ff9a7c14ce0 redhat: include resolve_btfids in kernel-devel
+https://gitlab.com/cki-project/kernel-ark/-/commit/9849b433ba589266228decef456ddb03e316c276
+ 9849b433ba589266228decef456ddb03e316c276 [redhat] rh_flags: constify the ctl_table argument of proc_handler
-https://gitlab.com/cki-project/kernel-ark/-/commit/a3394a8d6300de5dd2ba46356e2429fafe7f6ec6
- a3394a8d6300de5dd2ba46356e2429fafe7f6ec6 redhat: workaround CKI cross compilation for scripts
+https://gitlab.com/cki-project/kernel-ark/-/commit/efa109b6c36885a7632f1df8911d02f8c07ecaaf
+ efa109b6c36885a7632f1df8911d02f8c07ecaaf redhat: rh_flags: declare proper static methods when !CONFIG_RHEL_DIFFERENCES
-https://gitlab.com/cki-project/kernel-ark/-/commit/922e64a6a51f24617a11aa13128f148a0a3c4de7
- 922e64a6a51f24617a11aa13128f148a0a3c4de7 crypto: akcipher - Disable signing and decryption
+https://gitlab.com/cki-project/kernel-ark/-/commit/26ce6dab6c2a8e5e7ebf3adb4aa55195f55ec6e7
+ 26ce6dab6c2a8e5e7ebf3adb4aa55195f55ec6e7 redhat: make bnx2xx drivers unmaintained in rhel-10
-https://gitlab.com/cki-project/kernel-ark/-/commit/85070c923005f4495fdc6dba427a53bec033a21c
- 85070c923005f4495fdc6dba427a53bec033a21c crypto: dh - implement FIPS PCT
+https://gitlab.com/cki-project/kernel-ark/-/commit/328b4139a3f1c403776a518b7ceab21d92d08f48
+ 328b4139a3f1c403776a518b7ceab21d92d08f48 rh_flags: Rename rh_features to rh_flags
-https://gitlab.com/cki-project/kernel-ark/-/commit/744ee9560807d7c568f60d571f4140601eec2036
- 744ee9560807d7c568f60d571f4140601eec2036 crypto: ecdh - disallow plain "ecdh" usage in FIPS mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/d59a1d855eea6166f64f37b7ae6ffedf3511c4a9
+ d59a1d855eea6166f64f37b7ae6ffedf3511c4a9 kernel: rh_features: fix reading empty feature list from /proc
-https://gitlab.com/cki-project/kernel-ark/-/commit/c026a466c6774f87e07fc40159f94594ea08fba9
- c026a466c6774f87e07fc40159f94594ea08fba9 crypto: seqiv - flag instantiations as FIPS compliant
+https://gitlab.com/cki-project/kernel-ark/-/commit/303c022f1aaa0cd57e742485e0fe191b72a474af
+ 303c022f1aaa0cd57e742485e0fe191b72a474af rh_features: move rh_features entry to sys/kernel
-https://gitlab.com/cki-project/kernel-ark/-/commit/f266de4b6d21bc3dcedc7d8847fdcd979299b65f
- f266de4b6d21bc3dcedc7d8847fdcd979299b65f [kernel] bpf: set default value for bpf_jit_harden
+https://gitlab.com/cki-project/kernel-ark/-/commit/783dbc76b6f497af87823718dd4edcf1ea83f886
+ 783dbc76b6f497af87823718dd4edcf1ea83f886 rh_features: convert to atomic allocation
-https://gitlab.com/cki-project/kernel-ark/-/commit/a13d615d5be3dbbb39f6630dd05cee52fd209cbe
- a13d615d5be3dbbb39f6630dd05cee52fd209cbe not upstream: Disable vdso getrandom when FIPS is enabled
+https://gitlab.com/cki-project/kernel-ark/-/commit/1caa99be04a24b49e9d25d58e59f834671017c92
+ 1caa99be04a24b49e9d25d58e59f834671017c92 add rh_features to /proc
-https://gitlab.com/cki-project/kernel-ark/-/commit/65f42b9ea395cee764763ee663d1bf00f8d01a1d
- 65f42b9ea395cee764763ee663d1bf00f8d01a1d Add support to rh_waived cmdline boot parameter
+https://gitlab.com/cki-project/kernel-ark/-/commit/0e930e414af8bf1cc861b3028b60dc029263f1da
+ 0e930e414af8bf1cc861b3028b60dc029263f1da add support for rh_features
-https://gitlab.com/cki-project/kernel-ark/-/commit/de41dc3f9361d535713822d53327d294ea795f54
- de41dc3f9361d535713822d53327d294ea795f54 rh_flags: fix failed when register_sysctl_sz rh_flags_table to kernel
+https://gitlab.com/cki-project/kernel-ark/-/commit/3a5823503fd84d10f8ddc9587e529b05b250fd51
+ 3a5823503fd84d10f8ddc9587e529b05b250fd51 [redhat] PCI: Fix pci_rh_check_status() call semantics
-https://gitlab.com/cki-project/kernel-ark/-/commit/a31a63632f34fd9047dd710ed8d7a277ca7a3be5
- a31a63632f34fd9047dd710ed8d7a277ca7a3be5 [redhat] rh_flags: constify the ctl_table argument of proc_handler
+https://gitlab.com/cki-project/kernel-ark/-/commit/cf70c701542c02492f73e9560165db50313b5f67
+ cf70c701542c02492f73e9560165db50313b5f67 scsi: sd: condition probe_type under RHEL_DIFFERENCES
-https://gitlab.com/cki-project/kernel-ark/-/commit/080c0998af6ce03109d97de34e19ed4a74a305c5
- 080c0998af6ce03109d97de34e19ed4a74a305c5 redhat: rh_flags: declare proper static methods when !CONFIG_RHEL_DIFFERENCES
+https://gitlab.com/cki-project/kernel-ark/-/commit/06afbbd2c7b68ed1c5b382bf2110ea5a38d9a89d
+ 06afbbd2c7b68ed1c5b382bf2110ea5a38d9a89d [redhat] rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained
-https://gitlab.com/cki-project/kernel-ark/-/commit/6b3a7dbd5aeed2b00699527f5dfcfcf7100c9231
- 6b3a7dbd5aeed2b00699527f5dfcfcf7100c9231 redhat: make bnx2xx drivers unmaintained in rhel-10
+https://gitlab.com/cki-project/kernel-ark/-/commit/3191cf0f8ef99608b3891ccea8de8a74949642f5
+ 3191cf0f8ef99608b3891ccea8de8a74949642f5 [redhat] rh_messages.h: initial driver and device lists
-https://gitlab.com/cki-project/kernel-ark/-/commit/76684e826bf1f1003bce44d8bcf8dbe181b231e1
- 76684e826bf1f1003bce44d8bcf8dbe181b231e1 rh_flags: Rename rh_features to rh_flags
+https://gitlab.com/cki-project/kernel-ark/-/commit/c5a550051a1eb3eb0a3734c4771c3066af379f37
+ c5a550051a1eb3eb0a3734c4771c3066af379f37 arch/x86: Fix XSAVE check for x86_64-v2 check
-https://gitlab.com/cki-project/kernel-ark/-/commit/b84843a8cc781e3cd3dfc2f49bc73c462cce6e75
- b84843a8cc781e3cd3dfc2f49bc73c462cce6e75 kernel: rh_features: fix reading empty feature list from /proc
+https://gitlab.com/cki-project/kernel-ark/-/commit/924a78f76a29c2e4bbae77ed6600025a1732ca68
+ 924a78f76a29c2e4bbae77ed6600025a1732ca68 arch/x86/kernel/setup.c: fixup rh_check_supported
-https://gitlab.com/cki-project/kernel-ark/-/commit/22eedb8f773da5746791aecd125dc351fedf6137
- 22eedb8f773da5746791aecd125dc351fedf6137 rh_features: move rh_features entry to sys/kernel
+https://gitlab.com/cki-project/kernel-ark/-/commit/2d519ddff23dc25f299ef8156f2a5388261b6044
+ 2d519ddff23dc25f299ef8156f2a5388261b6044 lsm: update security_lock_kernel_down
-https://gitlab.com/cki-project/kernel-ark/-/commit/02235bc4496d64877e26715e30b22dbab9fff954
- 02235bc4496d64877e26715e30b22dbab9fff954 rh_features: convert to atomic allocation
+https://gitlab.com/cki-project/kernel-ark/-/commit/4e3a32cc04e83bfa3b92d1885ab1fa9a7be36ae6
+ 4e3a32cc04e83bfa3b92d1885ab1fa9a7be36ae6 arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated
-https://gitlab.com/cki-project/kernel-ark/-/commit/c4ac240c4a45bf8b15f75f1dd2734015080e7551
- c4ac240c4a45bf8b15f75f1dd2734015080e7551 add rh_features to /proc
+https://gitlab.com/cki-project/kernel-ark/-/commit/6cbf7b01d9484d0dabe943b8c9429ec5025cd6c8
+ 6cbf7b01d9484d0dabe943b8c9429ec5025cd6c8 redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option
-https://gitlab.com/cki-project/kernel-ark/-/commit/f337427539dab69cb4774364681542e1148ff8ac
- f337427539dab69cb4774364681542e1148ff8ac add support for rh_features
+https://gitlab.com/cki-project/kernel-ark/-/commit/8f4d1796896f8052ff288e54302214f36c61132c
+ 8f4d1796896f8052ff288e54302214f36c61132c redhat: rh_kabi: introduce RH_KABI_EXCLUDE_WITH_SIZE
-https://gitlab.com/cki-project/kernel-ark/-/commit/efcd39c5597a50e7d3161048d39936377ffc5e10
- efcd39c5597a50e7d3161048d39936377ffc5e10 [redhat] PCI: Fix pci_rh_check_status() call semantics
+https://gitlab.com/cki-project/kernel-ark/-/commit/d9d27757e318e5003ba62e89b70d78e6952fb391
+ d9d27757e318e5003ba62e89b70d78e6952fb391 redhat: rh_kabi: move semicolon inside __RH_KABI_CHECK_SIZE
-https://gitlab.com/cki-project/kernel-ark/-/commit/9ff994931e55bc9c03c89cda2d825845217b175c
- 9ff994931e55bc9c03c89cda2d825845217b175c scsi: sd: condition probe_type under RHEL_DIFFERENCES
+https://gitlab.com/cki-project/kernel-ark/-/commit/36d5e26e666cd9ff17162a6d445c209a66e296dc
+ 36d5e26e666cd9ff17162a6d445c209a66e296dc random: replace import_single_range() with import_ubuf()
-https://gitlab.com/cki-project/kernel-ark/-/commit/9fd8ba500b09bff66f125cc4022485c5e5519d6e
- 9fd8ba500b09bff66f125cc4022485c5e5519d6e [redhat] rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained
+https://gitlab.com/cki-project/kernel-ark/-/commit/8182523d8a64aef53df964052a382675870db60f
+ 8182523d8a64aef53df964052a382675870db60f ext4: Mark mounting fs-verity filesystems as tech-preview
-https://gitlab.com/cki-project/kernel-ark/-/commit/664e0a9e9e7e27941f23da7bc9cd4fe2490f4b4d
- 664e0a9e9e7e27941f23da7bc9cd4fe2490f4b4d [redhat] rh_messages.h: initial driver and device lists
+https://gitlab.com/cki-project/kernel-ark/-/commit/efa3422e31c5b928530ec9c0922187e7bcb69c1a
+ efa3422e31c5b928530ec9c0922187e7bcb69c1a erofs: Add tech preview markers at mount
-https://gitlab.com/cki-project/kernel-ark/-/commit/8bf304679c189fc9ee11c420b06cd49169072425
- 8bf304679c189fc9ee11c420b06cd49169072425 arch/x86: Fix XSAVE check for x86_64-v2 check
+https://gitlab.com/cki-project/kernel-ark/-/commit/9e2530766b18ecab096aa3fa7a7637b8dfb53db0
+ 9e2530766b18ecab096aa3fa7a7637b8dfb53db0 kernel/rh_messages.c: Mark functions as possibly unused
-https://gitlab.com/cki-project/kernel-ark/-/commit/0cb55f9453031437858d4d5f28066a94aaaf0db1
- 0cb55f9453031437858d4d5f28066a94aaaf0db1 arch/x86/kernel/setup.c: fixup rh_check_supported
+https://gitlab.com/cki-project/kernel-ark/-/commit/4086243e5cf4cc976e15b12fba81e5ba762f6927
+ 4086243e5cf4cc976e15b12fba81e5ba762f6927 random: Add hook to override device reads and getrandom(2)
-https://gitlab.com/cki-project/kernel-ark/-/commit/cabd3a1c7507ad3363c1a62fe3c9dc15c71fae88
- cabd3a1c7507ad3363c1a62fe3c9dc15c71fae88 lsm: update security_lock_kernel_down
+https://gitlab.com/cki-project/kernel-ark/-/commit/3c9c2eee0cc5572d6b703acb371fd0450564f0de
+ 3c9c2eee0cc5572d6b703acb371fd0450564f0de [redhat] kernel/rh_messages.c: move hardware tables to rh_messages.h
-https://gitlab.com/cki-project/kernel-ark/-/commit/05fbd86284af90211278801dfaa0382fc6866512
- 05fbd86284af90211278801dfaa0382fc6866512 arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated
+https://gitlab.com/cki-project/kernel-ark/-/commit/0e47e967f54a234d4ae6d33a8dbd8a47b19fb8af
+ 0e47e967f54a234d4ae6d33a8dbd8a47b19fb8af [redhat] kernel/rh_messages.c: Wire up new calls
-https://gitlab.com/cki-project/kernel-ark/-/commit/fda94efe9945911ff9984b6bded46029899c2260
- fda94efe9945911ff9984b6bded46029899c2260 redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option
+https://gitlab.com/cki-project/kernel-ark/-/commit/c84d60a5bf347c2e8dbb7079c88136d3af32016b
+ c84d60a5bf347c2e8dbb7079c88136d3af32016b [redhat] drivers/pci: Update rh_messages.c
-https://gitlab.com/cki-project/kernel-ark/-/commit/0bf1bbc7d2885f2b5f93a31bf9323b40d8da321c
- 0bf1bbc7d2885f2b5f93a31bf9323b40d8da321c redhat: rh_kabi: introduce RH_KABI_EXCLUDE_WITH_SIZE
+https://gitlab.com/cki-project/kernel-ark/-/commit/04dac031e7ebc33c47efe6f96184c5b76ea1b934
+ 04dac031e7ebc33c47efe6f96184c5b76ea1b934 [redhat] drivers/pci: Remove RHEL-only pci_hw_*() functions
-https://gitlab.com/cki-project/kernel-ark/-/commit/a5c9b34df9a6829569b017d7ed9285e2cd724cf9
- a5c9b34df9a6829569b017d7ed9285e2cd724cf9 redhat: rh_kabi: move semicolon inside __RH_KABI_CHECK_SIZE
+https://gitlab.com/cki-project/kernel-ark/-/commit/b933977f28b414c4f8ea63cf4261d0c7ccdb79d2
+ b933977f28b414c4f8ea63cf4261d0c7ccdb79d2 scsi: sd: Add "probe_type" module parameter to allow synchronous probing
-https://gitlab.com/cki-project/kernel-ark/-/commit/246e77ea865d4bec6e8474f0224f2428204b53e4
- 246e77ea865d4bec6e8474f0224f2428204b53e4 random: replace import_single_range() with import_ubuf()
+https://gitlab.com/cki-project/kernel-ark/-/commit/ff7b3a724c646befc8691109382cf9ecde3086f8
+ ff7b3a724c646befc8691109382cf9ecde3086f8 Revert "Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64"
-https://gitlab.com/cki-project/kernel-ark/-/commit/2158f814522555b675b5b7c00ef5a9f95d0b1574
- 2158f814522555b675b5b7c00ef5a9f95d0b1574 ext4: Mark mounting fs-verity filesystems as tech-preview
+https://gitlab.com/cki-project/kernel-ark/-/commit/d3734e9a6505c9b1514e9b08611c130583c75c3e
+ d3734e9a6505c9b1514e9b08611c130583c75c3e kernel/rh_messages.c: Another gcc12 warning on redundant NULL test
-https://gitlab.com/cki-project/kernel-ark/-/commit/579ac0e5e55961f9207048cb42b90691207208d9
- 579ac0e5e55961f9207048cb42b90691207208d9 erofs: Add tech preview markers at mount
+https://gitlab.com/cki-project/kernel-ark/-/commit/e0ed7629794fffda1fea50161adb7c11963aaa8f
+ e0ed7629794fffda1fea50161adb7c11963aaa8f Enable IO_URING for RHEL
-https://gitlab.com/cki-project/kernel-ark/-/commit/79d12e3e56e53619de36ea725ca23cfc879232cc
- 79d12e3e56e53619de36ea725ca23cfc879232cc kernel/rh_messages.c: Mark functions as possibly unused
+https://gitlab.com/cki-project/kernel-ark/-/commit/d516168e1d709fcde7d0ebf5395be50a9ea57654
+ d516168e1d709fcde7d0ebf5395be50a9ea57654 Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64
-https://gitlab.com/cki-project/kernel-ark/-/commit/fd6c1237e048c56a3923115631d30348bb1e0ce1
- fd6c1237e048c56a3923115631d30348bb1e0ce1 crypto: rng - Override drivers/char/random in FIPS mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/df50540b303fa83aa30e23aa5dc6afed305a950d
+ df50540b303fa83aa30e23aa5dc6afed305a950d redhat: version two of Makefile.rhelver tweaks
-https://gitlab.com/cki-project/kernel-ark/-/commit/dd084634fc48445609b8b667ba8cb14088a2a738
- dd084634fc48445609b8b667ba8cb14088a2a738 random: Add hook to override device reads and getrandom(2)
+https://gitlab.com/cki-project/kernel-ark/-/commit/76d6c306b007d304474849e4b54ca24323016d00
+ 76d6c306b007d304474849e4b54ca24323016d00 redhat: adapt to upstream Makefile change
-https://gitlab.com/cki-project/kernel-ark/-/commit/3f41ceb1f1433f3f0d84cd6e56a293b68ec3577d
- 3f41ceb1f1433f3f0d84cd6e56a293b68ec3577d [redhat] kernel/rh_messages.c: move hardware tables to rh_messages.h
+https://gitlab.com/cki-project/kernel-ark/-/commit/c3eff09ae1917e7bd413a7853760a9b062d1f134
+ c3eff09ae1917e7bd413a7853760a9b062d1f134 kernel/rh_messages.c: gcc12 warning on redundant NULL test
-https://gitlab.com/cki-project/kernel-ark/-/commit/32fa4676a1017e1642727b515a45630a7bd0e59b
- 32fa4676a1017e1642727b515a45630a7bd0e59b [redhat] kernel/rh_messages.c: Wire up new calls
+https://gitlab.com/cki-project/kernel-ark/-/commit/49f2e23308ee7732593f58b6fa30d7a97470b5a1
+ 49f2e23308ee7732593f58b6fa30d7a97470b5a1 Change acpi_bus_get_acpi_device to acpi_get_acpi_dev
-https://gitlab.com/cki-project/kernel-ark/-/commit/fa6d16b9ac3acec6fba047a827e3a591809ae2d8
- fa6d16b9ac3acec6fba047a827e3a591809ae2d8 [redhat] drivers/pci: Update rh_messages.c
+https://gitlab.com/cki-project/kernel-ark/-/commit/aae9cb6c744348f40bf2fc95539a5b66e040f814
+ aae9cb6c744348f40bf2fc95539a5b66e040f814 ARK: Remove code marking devices unmaintained
-https://gitlab.com/cki-project/kernel-ark/-/commit/112e47862e089dbcc08b403cced39695e1b774ab
- 112e47862e089dbcc08b403cced39695e1b774ab [redhat] drivers/pci: Remove RHEL-only pci_hw_*() functions
+https://gitlab.com/cki-project/kernel-ark/-/commit/071296c726ce9207724cf7d275f1f13d313e3337
+ 071296c726ce9207724cf7d275f1f13d313e3337 rh_message: Fix function name
-https://gitlab.com/cki-project/kernel-ark/-/commit/6f656b7b218087b698e65f827563224cd07ec796
- 6f656b7b218087b698e65f827563224cd07ec796 scsi: sd: Add "probe_type" module parameter to allow synchronous probing
+https://gitlab.com/cki-project/kernel-ark/-/commit/216f99c89bfadc92ccc1e093004ae02bb92cc6b5
+ 216f99c89bfadc92ccc1e093004ae02bb92cc6b5 Add Partner Supported taint flag to kAFS
-https://gitlab.com/cki-project/kernel-ark/-/commit/20a8988251338078a907314cb886b74e5a2d113c
- 20a8988251338078a907314cb886b74e5a2d113c Revert "Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64"
+https://gitlab.com/cki-project/kernel-ark/-/commit/cd9a5af0a30d288703c957cffbff76a4034030af
+ cd9a5af0a30d288703c957cffbff76a4034030af Add Partner Supported taint flag
-https://gitlab.com/cki-project/kernel-ark/-/commit/a9b29f2f468ca69ced7062546b3ed542b507af78
- a9b29f2f468ca69ced7062546b3ed542b507af78 kernel/rh_messages.c: Another gcc12 warning on redundant NULL test
+https://gitlab.com/cki-project/kernel-ark/-/commit/ce81810f14e2d865a3f079f75b73d5d96767fe19
+ ce81810f14e2d865a3f079f75b73d5d96767fe19 kabi: Add kABI macros for enum type
-https://gitlab.com/cki-project/kernel-ark/-/commit/6d42f7c135d7dadca75aebaa517667a4059622f3
- 6d42f7c135d7dadca75aebaa517667a4059622f3 Enable IO_URING for RHEL
+https://gitlab.com/cki-project/kernel-ark/-/commit/7d8718c740c48ab9b451cf4f6436e0ae4ce40ab6
+ 7d8718c740c48ab9b451cf4f6436e0ae4ce40ab6 kabi: expand and clarify documentation of aux structs
-https://gitlab.com/cki-project/kernel-ark/-/commit/bd51deb71d09b6559ce23cb7a7b888426fd747b4
- bd51deb71d09b6559ce23cb7a7b888426fd747b4 Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64
+https://gitlab.com/cki-project/kernel-ark/-/commit/1c508948afc1d224f17f64851fd3d74651c65a40
+ 1c508948afc1d224f17f64851fd3d74651c65a40 kabi: introduce RH_KABI_USE_AUX_PTR
-https://gitlab.com/cki-project/kernel-ark/-/commit/6925896320075aa0ac87e87e46cdbcdfd6362d27
- 6925896320075aa0ac87e87e46cdbcdfd6362d27 redhat: version two of Makefile.rhelver tweaks
+https://gitlab.com/cki-project/kernel-ark/-/commit/6f5b6ae386cccf191f24ea1f9e7ef36e7714247f
+ 6f5b6ae386cccf191f24ea1f9e7ef36e7714247f kabi: rename RH_KABI_SIZE_AND_EXTEND to AUX
-https://gitlab.com/cki-project/kernel-ark/-/commit/1cab9aeb63fd3d1eaf43435ee8928d8314b03cb8
- 1cab9aeb63fd3d1eaf43435ee8928d8314b03cb8 redhat: adapt to upstream Makefile change
+https://gitlab.com/cki-project/kernel-ark/-/commit/322f547cf7db0cf544313483dd52d2046589c478
+ 322f547cf7db0cf544313483dd52d2046589c478 kabi: more consistent _RH_KABI_SIZE_AND_EXTEND
-https://gitlab.com/cki-project/kernel-ark/-/commit/b81bcc2993aa143a7c3447524c4f3e8ab11415c9
- b81bcc2993aa143a7c3447524c4f3e8ab11415c9 kernel/rh_messages.c: gcc12 warning on redundant NULL test
+https://gitlab.com/cki-project/kernel-ark/-/commit/5705737bb80953e800d8038e6a0fb3026eb4cfc4
+ 5705737bb80953e800d8038e6a0fb3026eb4cfc4 kabi: use fixed field name for extended part
-https://gitlab.com/cki-project/kernel-ark/-/commit/d636276eae4cc4e735263d3f2236504c5e7f971f
- d636276eae4cc4e735263d3f2236504c5e7f971f Change acpi_bus_get_acpi_device to acpi_get_acpi_dev
+https://gitlab.com/cki-project/kernel-ark/-/commit/ac81c0fb4c59807db25cf623387ee1d8f14acd43
+ ac81c0fb4c59807db25cf623387ee1d8f14acd43 kabi: fix dereference in RH_KABI_CHECK_EXT
-https://gitlab.com/cki-project/kernel-ark/-/commit/5b1ec5efc280f86625e9b4ad8015fdaf1eb7ac36
- 5b1ec5efc280f86625e9b4ad8015fdaf1eb7ac36 ARK: Remove code marking devices unmaintained
+https://gitlab.com/cki-project/kernel-ark/-/commit/87c4b44b81ce4fb579957d874ed7c2f2c2639266
+ 87c4b44b81ce4fb579957d874ed7c2f2c2639266 kabi: fix RH_KABI_SET_SIZE macro
-https://gitlab.com/cki-project/kernel-ark/-/commit/4fc150edfbb6c36346b95fbe375de8f2d8e5034a
- 4fc150edfbb6c36346b95fbe375de8f2d8e5034a rh_message: Fix function name
+https://gitlab.com/cki-project/kernel-ark/-/commit/314053806d3a4cd3ab84a1143142c0bd7e687938
+ 314053806d3a4cd3ab84a1143142c0bd7e687938 kabi: expand and clarify documentation
-https://gitlab.com/cki-project/kernel-ark/-/commit/7c52dfbcfcf64b275b7c1ff17a7a5bbcfeabf805
- 7c52dfbcfcf64b275b7c1ff17a7a5bbcfeabf805 Add Partner Supported taint flag to kAFS
+https://gitlab.com/cki-project/kernel-ark/-/commit/0fbde195097e59408355dc64a0be26b50b9ef30e
+ 0fbde195097e59408355dc64a0be26b50b9ef30e kabi: make RH_KABI_USE replace any number of reserved fields
-https://gitlab.com/cki-project/kernel-ark/-/commit/7de69397e195396c930ca472cb9e4cd3f1d58ee3
- 7de69397e195396c930ca472cb9e4cd3f1d58ee3 Add Partner Supported taint flag
+https://gitlab.com/cki-project/kernel-ark/-/commit/5aae77b513cf948a02de4061b91c8da70f1157a4
+ 5aae77b513cf948a02de4061b91c8da70f1157a4 kabi: rename RH_KABI_USE2 to RH_KABI_USE_SPLIT
-https://gitlab.com/cki-project/kernel-ark/-/commit/8cb5fb45a3ef2a598f5f78715ac015ee8eadb601
- 8cb5fb45a3ef2a598f5f78715ac015ee8eadb601 kabi: Add kABI macros for enum type
+https://gitlab.com/cki-project/kernel-ark/-/commit/005d0cb6be94bbba362cf877d1959ee92dbe9f6f
+ 005d0cb6be94bbba362cf877d1959ee92dbe9f6f kabi: change RH_KABI_REPLACE2 to RH_KABI_REPLACE_SPLIT
-https://gitlab.com/cki-project/kernel-ark/-/commit/ab204aa67b06325eeeefcc519a33207e1de1c2b1
- ab204aa67b06325eeeefcc519a33207e1de1c2b1 kabi: expand and clarify documentation of aux structs
+https://gitlab.com/cki-project/kernel-ark/-/commit/d4ae34604e51a86f634e473b9347175d85a5a903
+ d4ae34604e51a86f634e473b9347175d85a5a903 kabi: change RH_KABI_REPLACE_UNSAFE to RH_KABI_BROKEN_REPLACE
-https://gitlab.com/cki-project/kernel-ark/-/commit/423190ab24dfaeeac66844d516727e64e25c020e
- 423190ab24dfaeeac66844d516727e64e25c020e kabi: introduce RH_KABI_USE_AUX_PTR
+https://gitlab.com/cki-project/kernel-ark/-/commit/5fa236127fd34178215df6f43d76be56a6b055f9
+ 5fa236127fd34178215df6f43d76be56a6b055f9 kabi: introduce RH_KABI_ADD_MODIFIER
-https://gitlab.com/cki-project/kernel-ark/-/commit/17e0ca5b9ce0f82fc51feeafb504e602c5ebe957
- 17e0ca5b9ce0f82fc51feeafb504e602c5ebe957 kabi: rename RH_KABI_SIZE_AND_EXTEND to AUX
+https://gitlab.com/cki-project/kernel-ark/-/commit/12ff276c5084c81d887968f87924b4143c25f513
+ 12ff276c5084c81d887968f87924b4143c25f513 kabi: Include kconfig.h
-https://gitlab.com/cki-project/kernel-ark/-/commit/27e55ed93f20dcb4e5ac0adbfd4932111b54bbfa
- 27e55ed93f20dcb4e5ac0adbfd4932111b54bbfa kabi: more consistent _RH_KABI_SIZE_AND_EXTEND
+https://gitlab.com/cki-project/kernel-ark/-/commit/0258e1d1854a4fb969743b05db19fd39205c1587
+ 0258e1d1854a4fb969743b05db19fd39205c1587 kabi: macros for intentional kABI breakage
-https://gitlab.com/cki-project/kernel-ark/-/commit/3307f100af96764975dc7f7cb86bb7643f629023
- 3307f100af96764975dc7f7cb86bb7643f629023 kabi: use fixed field name for extended part
+https://gitlab.com/cki-project/kernel-ark/-/commit/fb22f487693104d8a3b905821ce9d698a11f1a64
+ fb22f487693104d8a3b905821ce9d698a11f1a64 kabi: fix the note about terminating semicolon
-https://gitlab.com/cki-project/kernel-ark/-/commit/1485ff8f2edaef1ee555cc08ff0e1e0a0126e960
- 1485ff8f2edaef1ee555cc08ff0e1e0a0126e960 kabi: fix dereference in RH_KABI_CHECK_EXT
+https://gitlab.com/cki-project/kernel-ark/-/commit/8b9486330bac6fa0faaee381cb1f4fc21a54adbf
+ 8b9486330bac6fa0faaee381cb1f4fc21a54adbf kabi: introduce RH_KABI_HIDE_INCLUDE and RH_KABI_FAKE_INCLUDE
-https://gitlab.com/cki-project/kernel-ark/-/commit/b64d7ad5b2bc17bc0d7130074d35415162cad23b
- b64d7ad5b2bc17bc0d7130074d35415162cad23b kabi: fix RH_KABI_SET_SIZE macro
+https://gitlab.com/cki-project/kernel-ark/-/commit/e279332cd32c49ccf99788f6ee266c9caf10912c
+ e279332cd32c49ccf99788f6ee266c9caf10912c pci.h: Fix static include
-https://gitlab.com/cki-project/kernel-ark/-/commit/9f4a882b6fd7033290f0471fc45bc60669ccd19e
- 9f4a882b6fd7033290f0471fc45bc60669ccd19e kabi: expand and clarify documentation
+https://gitlab.com/cki-project/kernel-ark/-/commit/77fe544f2a832c63321a38e71f862df25619ebdf
+ 77fe544f2a832c63321a38e71f862df25619ebdf drivers/pci/pci-driver.c: Fix if/ifdef typo
-https://gitlab.com/cki-project/kernel-ark/-/commit/92daf096f42339a6f5d12ce91bbb904790160a30
- 92daf096f42339a6f5d12ce91bbb904790160a30 kabi: make RH_KABI_USE replace any number of reserved fields
+https://gitlab.com/cki-project/kernel-ark/-/commit/fdff69b6ff1104b4f91b2984b29c48bf1190abd1
+ fdff69b6ff1104b4f91b2984b29c48bf1190abd1 kernel/rh_taint.c: Update to new messaging
-https://gitlab.com/cki-project/kernel-ark/-/commit/860374d232814e79bf831646469bf7a3ac5af847
- 860374d232814e79bf831646469bf7a3ac5af847 kabi: rename RH_KABI_USE2 to RH_KABI_USE_SPLIT
+https://gitlab.com/cki-project/kernel-ark/-/commit/6e9e917a962ddf546d29a4cfca0b2023beaf9920
+ 6e9e917a962ddf546d29a4cfca0b2023beaf9920 redhat: Add mark_driver_deprecated()
-https://gitlab.com/cki-project/kernel-ark/-/commit/c382e17399279f66f12a70db1cdbcdfd4bb00724
- c382e17399279f66f12a70db1cdbcdfd4bb00724 kabi: change RH_KABI_REPLACE2 to RH_KABI_REPLACE_SPLIT
+https://gitlab.com/cki-project/kernel-ark/-/commit/37e35cc40945a299677c055fe99d0936b37d4734
+ 37e35cc40945a299677c055fe99d0936b37d4734 RHEL: disable io_uring support
-https://gitlab.com/cki-project/kernel-ark/-/commit/2fa82fdf9eca8805bb585640272f380ba2c3e115
- 2fa82fdf9eca8805bb585640272f380ba2c3e115 kabi: change RH_KABI_REPLACE_UNSAFE to RH_KABI_BROKEN_REPLACE
+https://gitlab.com/cki-project/kernel-ark/-/commit/dbcc2d3d62d092fdd2f83450ca3276d1589604cc
+ dbcc2d3d62d092fdd2f83450ca3276d1589604cc bpf: Fix unprivileged_bpf_disabled setup
-https://gitlab.com/cki-project/kernel-ark/-/commit/5ba803d67ab6f4762127b5e42831da79f76675c5
- 5ba803d67ab6f4762127b5e42831da79f76675c5 kabi: introduce RH_KABI_ADD_MODIFIER
+https://gitlab.com/cki-project/kernel-ark/-/commit/36d5d4f3d6c6f71e678f9a1352fbeed80ac1c4b0
+ 36d5d4f3d6c6f71e678f9a1352fbeed80ac1c4b0 wireguard: disable in FIPS mode
-https://gitlab.com/cki-project/kernel-ark/-/commit/57ad3e56d3c20902e2950bd43588d4661158d7c2
- 57ad3e56d3c20902e2950bd43588d4661158d7c2 kabi: Include kconfig.h
+https://gitlab.com/cki-project/kernel-ark/-/commit/920adcc7d9784442efd15140964847746c0e12fa
+ 920adcc7d9784442efd15140964847746c0e12fa REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70
-https://gitlab.com/cki-project/kernel-ark/-/commit/a076019fab3b6a7993a10e41a1e2e64cea52d465
- a076019fab3b6a7993a10e41a1e2e64cea52d465 kabi: macros for intentional kABI breakage
+https://gitlab.com/cki-project/kernel-ark/-/commit/775b9b1ba3703b12ff4eba17ad6ffc092998edea
+ 775b9b1ba3703b12ff4eba17ad6ffc092998edea redhat: remove remaining references of CONFIG_RH_DISABLE_DEPRECATED
-https://gitlab.com/cki-project/kernel-ark/-/commit/ced32dc58c71b977a3a8f444306b11272ab3c9fd
- ced32dc58c71b977a3a8f444306b11272ab3c9fd kabi: fix the note about terminating semicolon
+https://gitlab.com/cki-project/kernel-ark/-/commit/106055fe5f2cb036c75a4d3649832c2ff8c78983
+ 106055fe5f2cb036c75a4d3649832c2ff8c78983 arch/x86: Remove vendor specific CPU ID checks
-https://gitlab.com/cki-project/kernel-ark/-/commit/6426716cf7f9025c8db90179c215114f67a97c16
- 6426716cf7f9025c8db90179c215114f67a97c16 kabi: introduce RH_KABI_HIDE_INCLUDE and RH_KABI_FAKE_INCLUDE
+https://gitlab.com/cki-project/kernel-ark/-/commit/8d386f1cfa912cb43d866860ca3c3f347f97d910
+ 8d386f1cfa912cb43d866860ca3c3f347f97d910 redhat: Replace hardware.redhat.com link in Unsupported message
-https://gitlab.com/cki-project/kernel-ark/-/commit/7039428623d9def4665f51a8f6e232dd5dc62075
- 7039428623d9def4665f51a8f6e232dd5dc62075 pci.h: Fix static include
+https://gitlab.com/cki-project/kernel-ark/-/commit/0fc6a76d32909d3b7b5e245f5ce2956977c7612e
+ 0fc6a76d32909d3b7b5e245f5ce2956977c7612e x86: Fix compile issues with rh_check_supported()
-https://gitlab.com/cki-project/kernel-ark/-/commit/6853e4c29e97a33139969e584cf45421dec558ef
- 6853e4c29e97a33139969e584cf45421dec558ef drivers/pci/pci-driver.c: Fix if/ifdef typo
+https://gitlab.com/cki-project/kernel-ark/-/commit/9ee14c790184b16903d143e7a4d867fefe1b0cfc
+ 9ee14c790184b16903d143e7a4d867fefe1b0cfc KEYS: Make use of platform keyring for module signature verify
-https://gitlab.com/cki-project/kernel-ark/-/commit/3d45867aa4fd6cd8c1889fe300dabb8894c52174
- 3d45867aa4fd6cd8c1889fe300dabb8894c52174 kernel/rh_taint.c: Update to new messaging
+https://gitlab.com/cki-project/kernel-ark/-/commit/d7df0780510537b14a82bde02eb1614653795614
+ d7df0780510537b14a82bde02eb1614653795614 ARM: tegra: usb no reset
-https://gitlab.com/cki-project/kernel-ark/-/commit/9294b06c62295a5446a6ac845ed77ace67843ea8
- 9294b06c62295a5446a6ac845ed77ace67843ea8 redhat: Add mark_driver_deprecated()
+https://gitlab.com/cki-project/kernel-ark/-/commit/27538e9bcea984739f6a9e03afb833ee2a99df22
+ 27538e9bcea984739f6a9e03afb833ee2a99df22 arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT
-https://gitlab.com/cki-project/kernel-ark/-/commit/f0aa81f948e15a35b1048c4dd67ee9ac4ab91e42
- f0aa81f948e15a35b1048c4dd67ee9ac4ab91e42 RHEL: disable io_uring support
+https://gitlab.com/cki-project/kernel-ark/-/commit/e5d0e4acf65f7c08f7963d7bd4a70f8893aa0061
+ e5d0e4acf65f7c08f7963d7bd4a70f8893aa0061 redhat: rh_kabi: deduplication friendly structs
-https://gitlab.com/cki-project/kernel-ark/-/commit/6bbb2d3c52b5970ac88665987fd10085f0994a82
- 6bbb2d3c52b5970ac88665987fd10085f0994a82 bpf: Fix unprivileged_bpf_disabled setup
+https://gitlab.com/cki-project/kernel-ark/-/commit/4b5f9eee1cd424079922922160cdf3cfb2a03384
+ 4b5f9eee1cd424079922922160cdf3cfb2a03384 redhat: rh_kabi add a comment with warning about RH_KABI_EXCLUDE usage
-https://gitlab.com/cki-project/kernel-ark/-/commit/894df4af71ba3ceb82ab57728dab67af1fa3ae65
- 894df4af71ba3ceb82ab57728dab67af1fa3ae65 wireguard: disable in FIPS mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/b3e3b8116b860f5eb86ecceec389ca4a2b18a897
+ b3e3b8116b860f5eb86ecceec389ca4a2b18a897 redhat: rh_kabi: introduce RH_KABI_EXTEND_WITH_SIZE
-https://gitlab.com/cki-project/kernel-ark/-/commit/c3fb9dc29e1d477487c80531f6c0f846853682fb
- c3fb9dc29e1d477487c80531f6c0f846853682fb REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70
+https://gitlab.com/cki-project/kernel-ark/-/commit/063c43d2aa74dfb5ce0abeedcb62181ed5c6871f
+ 063c43d2aa74dfb5ce0abeedcb62181ed5c6871f redhat: rh_kabi: Indirect EXTEND macros so nesting of other macros will resolve.
-https://gitlab.com/cki-project/kernel-ark/-/commit/fb39d4e6bbecce6e5e60a4565f341ace0e3f92c7
- fb39d4e6bbecce6e5e60a4565f341ace0e3f92c7 redhat: remove remaining references of CONFIG_RH_DISABLE_DEPRECATED
+https://gitlab.com/cki-project/kernel-ark/-/commit/ddde765d1d6ab690465c06818aaf6e89cda6f201
+ ddde765d1d6ab690465c06818aaf6e89cda6f201 redhat: rh_kabi: Fix RH_KABI_SET_SIZE to use dereference operator
-https://gitlab.com/cki-project/kernel-ark/-/commit/55a844bdf35a1b308373c16efe1cbb53ed43b36d
- 55a844bdf35a1b308373c16efe1cbb53ed43b36d arch/x86: Remove vendor specific CPU ID checks
+https://gitlab.com/cki-project/kernel-ark/-/commit/6961ff1508c392e94f21201d8c99537071f510e6
+ 6961ff1508c392e94f21201d8c99537071f510e6 redhat: rh_kabi: Add macros to size and extend structs
-https://gitlab.com/cki-project/kernel-ark/-/commit/e30d809f23a4aeaa40a6ff38abb6d391977bb154
- e30d809f23a4aeaa40a6ff38abb6d391977bb154 redhat: Replace hardware.redhat.com link in Unsupported message
+https://gitlab.com/cki-project/kernel-ark/-/commit/86f919c80bd66d2b3773f61f9496889bd6c1b615
+ 86f919c80bd66d2b3773f61f9496889bd6c1b615 Removing Obsolete hba pci-ids from rhel8
-https://gitlab.com/cki-project/kernel-ark/-/commit/a6255a3cc6e13d0831f6bc625ed01d9f5ac3486e
- a6255a3cc6e13d0831f6bc625ed01d9f5ac3486e x86: Fix compile issues with rh_check_supported()
+https://gitlab.com/cki-project/kernel-ark/-/commit/3f426db8e55546aec0e302cd0ec9538f6a2ff279
+ 3f426db8e55546aec0e302cd0ec9538f6a2ff279 mptsas: pci-id table changes
-https://gitlab.com/cki-project/kernel-ark/-/commit/d862cadef1cd9701230e83a584e48639bd5a444e
- d862cadef1cd9701230e83a584e48639bd5a444e KEYS: Make use of platform keyring for module signature verify
+https://gitlab.com/cki-project/kernel-ark/-/commit/cdf88493e6f1f1547f19a8a6cc1a6222ab4a1408
+ cdf88493e6f1f1547f19a8a6cc1a6222ab4a1408 mptspi: pci-id table changes
-https://gitlab.com/cki-project/kernel-ark/-/commit/ec5d3445b663a5ba7227a0a42ba4f7bd4d38ed4a
- ec5d3445b663a5ba7227a0a42ba4f7bd4d38ed4a Input: rmi4 - remove the need for artificial IRQ in case of HID
+https://gitlab.com/cki-project/kernel-ark/-/commit/3af0a38039f7cbb6a04b59b11eb216d5263c7db9
+ 3af0a38039f7cbb6a04b59b11eb216d5263c7db9 qla2xxx: Remove PCI IDs of deprecated adapter
-https://gitlab.com/cki-project/kernel-ark/-/commit/9cd4b2fa3ac888c4785f39843a6f147dc15fac0e
- 9cd4b2fa3ac888c4785f39843a6f147dc15fac0e ARM: tegra: usb no reset
+https://gitlab.com/cki-project/kernel-ark/-/commit/3190123b5b5d0e9517965458b09aad8f2f19c795
+ 3190123b5b5d0e9517965458b09aad8f2f19c795 hpsa: remove old cciss-based smartarray pci ids
-https://gitlab.com/cki-project/kernel-ark/-/commit/29d4e0c608192cd278c1f451d107f0f6187cfa0c
- 29d4e0c608192cd278c1f451d107f0f6187cfa0c arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT
+https://gitlab.com/cki-project/kernel-ark/-/commit/b7bf13cf3d04804d33f50b6f86bd617181d85a71
+ b7bf13cf3d04804d33f50b6f86bd617181d85a71 kernel: add SUPPORT_REMOVED kernel taint
-https://gitlab.com/cki-project/kernel-ark/-/commit/2ad58fba8ee3398ac80937e82aea1fb6ec0dea6a
- 2ad58fba8ee3398ac80937e82aea1fb6ec0dea6a redhat: rh_kabi: deduplication friendly structs
+https://gitlab.com/cki-project/kernel-ark/-/commit/73d3585dffe8c79efadc10ed48ae025ce87d9be7
+ 73d3585dffe8c79efadc10ed48ae025ce87d9be7 Rename RH_DISABLE_DEPRECATED to RHEL_DIFFERENCES
-https://gitlab.com/cki-project/kernel-ark/-/commit/8c5c003ced632c0d45937eda60e4683479fd7fd8
- 8c5c003ced632c0d45937eda60e4683479fd7fd8 redhat: rh_kabi add a comment with warning about RH_KABI_EXCLUDE usage
+https://gitlab.com/cki-project/kernel-ark/-/commit/ffaf8f3463eeb8091b28bd14bd15e0a4c23f8daf
+ ffaf8f3463eeb8091b28bd14bd15e0a4c23f8daf s390: Lock down the kernel when the IPL secure flag is set
-https://gitlab.com/cki-project/kernel-ark/-/commit/a14a03194482338487deca42b1b922654993426a
- a14a03194482338487deca42b1b922654993426a redhat: rh_kabi: introduce RH_KABI_EXTEND_WITH_SIZE
+https://gitlab.com/cki-project/kernel-ark/-/commit/439a2d2993ca70215553d797a016a1f7d5137858
+ 439a2d2993ca70215553d797a016a1f7d5137858 efi: Lock down the kernel if booted in secure boot mode
-https://gitlab.com/cki-project/kernel-ark/-/commit/6ac2b532dd245dd1ff88f8b9456448b23b08c229
- 6ac2b532dd245dd1ff88f8b9456448b23b08c229 redhat: rh_kabi: Indirect EXTEND macros so nesting of other macros will resolve.
+https://gitlab.com/cki-project/kernel-ark/-/commit/58b67e5b6f5798e954aa47a4f8460d662c72a3b0
+ 58b67e5b6f5798e954aa47a4f8460d662c72a3b0 efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
-https://gitlab.com/cki-project/kernel-ark/-/commit/dfb5a2164d5f135268e80e4b5b326b1ae2941432
- dfb5a2164d5f135268e80e4b5b326b1ae2941432 redhat: rh_kabi: Fix RH_KABI_SET_SIZE to use dereference operator
+https://gitlab.com/cki-project/kernel-ark/-/commit/d141a7657e9695c2250eaf1463d97b7dffdd4894
+ d141a7657e9695c2250eaf1463d97b7dffdd4894 security: lockdown: expose a hook to lock the kernel down
-https://gitlab.com/cki-project/kernel-ark/-/commit/8138cde88c8db4574474b6deb70e6191234fede0
- 8138cde88c8db4574474b6deb70e6191234fede0 redhat: rh_kabi: Add macros to size and extend structs
+https://gitlab.com/cki-project/kernel-ark/-/commit/f913b99c867ae28b163516dc85a854da372a2dd8
+ f913b99c867ae28b163516dc85a854da372a2dd8 Make get_cert_list() use efi_status_to_str() to print error messages.
-https://gitlab.com/cki-project/kernel-ark/-/commit/1e49424ef2fe92547088c51909dbce56f130f5ff
- 1e49424ef2fe92547088c51909dbce56f130f5ff Removing Obsolete hba pci-ids from rhel8
+https://gitlab.com/cki-project/kernel-ark/-/commit/44e67fa2cfcf4c15170ee618a0b9308a2ec6b83f
+ 44e67fa2cfcf4c15170ee618a0b9308a2ec6b83f Add efi_status_to_str() and rework efi_status_to_err().
-https://gitlab.com/cki-project/kernel-ark/-/commit/62340c8138c73246399ff4917d55b9c5aae3cb46
- 62340c8138c73246399ff4917d55b9c5aae3cb46 mptsas: pci-id table changes
+https://gitlab.com/cki-project/kernel-ark/-/commit/7e1c43723b7e948b02e2d92416bd30bf6301a24b
+ 7e1c43723b7e948b02e2d92416bd30bf6301a24b Add support for deprecating processors
-https://gitlab.com/cki-project/kernel-ark/-/commit/e8ccde2a8f0b2fb14ac975e3d566cc39b58833dc
- e8ccde2a8f0b2fb14ac975e3d566cc39b58833dc mptspi: pci-id table changes
+https://gitlab.com/cki-project/kernel-ark/-/commit/fe4e085cda79bb0161ff2482564776827acf01e6
+ fe4e085cda79bb0161ff2482564776827acf01e6 arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT
-https://gitlab.com/cki-project/kernel-ark/-/commit/d0de13e51560be7a7bab1a2649317c0eb476db33
- d0de13e51560be7a7bab1a2649317c0eb476db33 qla2xxx: Remove PCI IDs of deprecated adapter
+https://gitlab.com/cki-project/kernel-ark/-/commit/b4c2c61c162effebadc4d302d78cd3a262d31311
+ b4c2c61c162effebadc4d302d78cd3a262d31311 iommu/arm-smmu: workaround DMA mode issues
-https://gitlab.com/cki-project/kernel-ark/-/commit/753a070b33e0b1bb9ec9dfd81f0441923512a987
- 753a070b33e0b1bb9ec9dfd81f0441923512a987 hpsa: remove old cciss-based smartarray pci ids
+https://gitlab.com/cki-project/kernel-ark/-/commit/ea089c9edd6a9ae6e86775b52bbb3f385d78ee7c
+ ea089c9edd6a9ae6e86775b52bbb3f385d78ee7c rh_kabi: introduce RH_KABI_EXCLUDE
-https://gitlab.com/cki-project/kernel-ark/-/commit/7da7b88ba5f2ae9203a2d8dfc616bab71778411b
- 7da7b88ba5f2ae9203a2d8dfc616bab71778411b kernel: add SUPPORT_REMOVED kernel taint
+https://gitlab.com/cki-project/kernel-ark/-/commit/3bc46d4d9577cbf22072449309e51afdf0c086f8
+ 3bc46d4d9577cbf22072449309e51afdf0c086f8 ipmi: do not configure ipmi for HPE m400
-https://gitlab.com/cki-project/kernel-ark/-/commit/b02d2a5a792be445a1c9dc6ebdbb2b2a86c9f0f3
- b02d2a5a792be445a1c9dc6ebdbb2b2a86c9f0f3 Rename RH_DISABLE_DEPRECATED to RHEL_DIFFERENCES
+https://gitlab.com/cki-project/kernel-ark/-/commit/59eba3088cfeacadca132e240336d35bdce2184b
+ 59eba3088cfeacadca132e240336d35bdce2184b kABI: Add generic kABI macros to use for kABI workarounds
-https://gitlab.com/cki-project/kernel-ark/-/commit/35f09970b827bf7ee9d096e9eb2e561baf81fb35
- 35f09970b827bf7ee9d096e9eb2e561baf81fb35 s390: Lock down the kernel when the IPL secure flag is set
+https://gitlab.com/cki-project/kernel-ark/-/commit/b18be2a877245da72d2e66279ee3af0639bfcbcf
+ b18be2a877245da72d2e66279ee3af0639bfcbcf add pci_hw_vendor_status()
-https://gitlab.com/cki-project/kernel-ark/-/commit/33e03790e31387b0ab6dd1f3651c245ba5beb39b
- 33e03790e31387b0ab6dd1f3651c245ba5beb39b efi: Lock down the kernel if booted in secure boot mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/4bb46c2c556b87548df6dc34d2625137c1f1b906
+ 4bb46c2c556b87548df6dc34d2625137c1f1b906 ahci: thunderx2: Fix for errata that affects stop engine
-https://gitlab.com/cki-project/kernel-ark/-/commit/9fc841720d0db5f056ac2d5bc2c7f58a98afdc65
- 9fc841720d0db5f056ac2d5bc2c7f58a98afdc65 efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/bba1a4c6da9b6234cb480be26cba4857b4f00b8d
+ bba1a4c6da9b6234cb480be26cba4857b4f00b8d Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon
-https://gitlab.com/cki-project/kernel-ark/-/commit/5043e288234061961caeeccecae1bdb8ab33c047
- 5043e288234061961caeeccecae1bdb8ab33c047 security: lockdown: expose a hook to lock the kernel down
+https://gitlab.com/cki-project/kernel-ark/-/commit/d14c38035b8a38ccb810810834df95870de4c079
+ d14c38035b8a38ccb810810834df95870de4c079 bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter
-https://gitlab.com/cki-project/kernel-ark/-/commit/179980868955497ae7d59a06ba1889480d2bbe03
- 179980868955497ae7d59a06ba1889480d2bbe03 Make get_cert_list() use efi_status_to_str() to print error messages.
+https://gitlab.com/cki-project/kernel-ark/-/commit/a3b70d4800b822a3a9a8d20720814a2e3b177e22
+ a3b70d4800b822a3a9a8d20720814a2e3b177e22 add Red Hat-specific taint flags
-https://gitlab.com/cki-project/kernel-ark/-/commit/cf5f6a256202c5cbd4f0dd3e68ff17483024e329
- cf5f6a256202c5cbd4f0dd3e68ff17483024e329 Add efi_status_to_str() and rework efi_status_to_err().
+https://gitlab.com/cki-project/kernel-ark/-/commit/84748c741465d2b6a9f059c9cbfc7710a1790248
+ 84748c741465d2b6a9f059c9cbfc7710a1790248 tags.sh: Ignore redhat/rpm
-https://gitlab.com/cki-project/kernel-ark/-/commit/309a452fb3e39b7b48c1e366c03dee914e4a8837
- 309a452fb3e39b7b48c1e366c03dee914e4a8837 Add support for deprecating processors
+https://gitlab.com/cki-project/kernel-ark/-/commit/f97d2726cfd27c1e32ce8a482bbb9995a8d8cf3b
+ f97d2726cfd27c1e32ce8a482bbb9995a8d8cf3b put RHEL info into generated headers
-https://gitlab.com/cki-project/kernel-ark/-/commit/acec8b0610ddd619d87d9f9a5522a4b76bbe590a
- acec8b0610ddd619d87d9f9a5522a4b76bbe590a arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT
+https://gitlab.com/cki-project/kernel-ark/-/commit/05e4902e0df48951811e1dd438f1c29820de845c
+ 05e4902e0df48951811e1dd438f1c29820de845c aarch64: acpi scan: Fix regression related to X-Gene UARTs
-https://gitlab.com/cki-project/kernel-ark/-/commit/ba08a04d7f12b7a7cda63b4012711ae5344a147a
- ba08a04d7f12b7a7cda63b4012711ae5344a147a iommu/arm-smmu: workaround DMA mode issues
+https://gitlab.com/cki-project/kernel-ark/-/commit/cae39721376d185c77f103fb935c001407bdab8a
+ cae39721376d185c77f103fb935c001407bdab8a ACPI / irq: Workaround firmware issue on X-Gene based m400
-https://gitlab.com/cki-project/kernel-ark/-/commit/e4347a6b11e4603597921af3efc68a515705631d
- e4347a6b11e4603597921af3efc68a515705631d rh_kabi: introduce RH_KABI_EXCLUDE
+https://gitlab.com/cki-project/kernel-ark/-/commit/8cbff5d8daef1453de13d7f0787b1df98f9f9c95
+ 8cbff5d8daef1453de13d7f0787b1df98f9f9c95 modules: add rhelversion MODULE_INFO tag
-https://gitlab.com/cki-project/kernel-ark/-/commit/95ffb4b90b1567bcdb7efea0fd144fe97a0e0da2
- 95ffb4b90b1567bcdb7efea0fd144fe97a0e0da2 ipmi: do not configure ipmi for HPE m400
+https://gitlab.com/cki-project/kernel-ark/-/commit/e6129bfa0d503097c407d5682c5a0b699979c596
+ e6129bfa0d503097c407d5682c5a0b699979c596 ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support
-https://gitlab.com/cki-project/kernel-ark/-/commit/4bbaf4b9fef9c58edbd958624c7765fc6d701b06
- 4bbaf4b9fef9c58edbd958624c7765fc6d701b06 kABI: Add generic kABI macros to use for kABI workarounds
+https://gitlab.com/cki-project/kernel-ark/-/commit/4b1cddd4ace1790f5696c73c2719dd393c67a7dc
+ 4b1cddd4ace1790f5696c73c2719dd393c67a7dc Add Red Hat tainting
-https://gitlab.com/cki-project/kernel-ark/-/commit/6a15e5d9be196673139569b094f05127ea24c8d1
- 6a15e5d9be196673139569b094f05127ea24c8d1 add pci_hw_vendor_status()
+https://gitlab.com/cki-project/kernel-ark/-/commit/d1176e7cfbf2f3e326469e6cf3c1e123f797b2ab
+ d1176e7cfbf2f3e326469e6cf3c1e123f797b2ab Introduce CONFIG_RH_DISABLE_DEPRECATED
-https://gitlab.com/cki-project/kernel-ark/-/commit/9c0dbd2f8eb39216b8fe7e5abbb4f91ce821bbd5
- 9c0dbd2f8eb39216b8fe7e5abbb4f91ce821bbd5 ahci: thunderx2: Fix for errata that affects stop engine
+https://gitlab.com/cki-project/kernel-ark/-/commit/c5bbc3ffdff8034dccf68623b0715e9f98034ca5
+ c5bbc3ffdff8034dccf68623b0715e9f98034ca5 Pull the RHEL version defines out of the Makefile
-https://gitlab.com/cki-project/kernel-ark/-/commit/751d6e32b129851fb6df580afe1bca98a59da60f
- 751d6e32b129851fb6df580afe1bca98a59da60f Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/befc3412ecc7929cefeac1588f5d2c0022efa902
- befc3412ecc7929cefeac1588f5d2c0022efa902 bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/2e5de3f09720a8b1a453bebc734314cbc2b4b67e
- 2e5de3f09720a8b1a453bebc734314cbc2b4b67e add Red Hat-specific taint flags
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/629e0185d05867a514bec581daff214ead6275f9
- 629e0185d05867a514bec581daff214ead6275f9 tags.sh: Ignore redhat/rpm
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/d7ac10e5e36022b46c1a856fc99cd87428413a7e
- d7ac10e5e36022b46c1a856fc99cd87428413a7e put RHEL info into generated headers
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/abe40685636a95aae3c912c6cf1adf3a1da24df2
- abe40685636a95aae3c912c6cf1adf3a1da24df2 aarch64: acpi scan: Fix regression related to X-Gene UARTs
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/85c44483062c36ac5ef8df67ba381d32389744ac
- 85c44483062c36ac5ef8df67ba381d32389744ac ACPI / irq: Workaround firmware issue on X-Gene based m400
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/1f2eb3fb2d1f3c596a24a7bae9623c20f9a7ee00
- 1f2eb3fb2d1f3c596a24a7bae9623c20f9a7ee00 modules: add rhelversion MODULE_INFO tag
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/732795ece253683d5264e6f49873539ea8ae2ac1
- 732795ece253683d5264e6f49873539ea8ae2ac1 ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/dfa9e4767ce04c9671ced4ef67ec4f65c84502d7
- dfa9e4767ce04c9671ced4ef67ec4f65c84502d7 Add Red Hat tainting
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/252a3ec53bef578f5891e4cf799ca5f329272f52
- 252a3ec53bef578f5891e4cf799ca5f329272f52 Introduce CONFIG_RH_DISABLE_DEPRECATED
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/64e24815bf2b7ed3a71b7ac01bfbf8e94d394f23
- 64e24815bf2b7ed3a71b7ac01bfbf8e94d394f23 Pull the RHEL version defines out of the Makefile
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/9c5f75d76ee4a7ca578cd645051269f4c5b94d1d
- 9c5f75d76ee4a7ca578cd645051269f4c5b94d1d [initial commit] Add Red Hat variables in the top level makefile
+https://gitlab.com/cki-project/kernel-ark/-/commit/d0cc5ae7a0d305c1e15a0a539faea9ea11af2868
+ d0cc5ae7a0d305c1e15a0a539faea9ea11af2868 [initial commit] Add Red Hat variables in the top level makefile
diff --git a/kernel-aarch64-16k-debug-fedora.config b/kernel-aarch64-16k-debug-fedora.config
index 86e4162..50e4628 100644
--- a/kernel-aarch64-16k-debug-fedora.config
+++ b/kernel-aarch64-16k-debug-fedora.config
@@ -926,7 +926,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1716,6 +1716,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-aarch64-16k-fedora.config b/kernel-aarch64-16k-fedora.config
index 2b54e15..00fa31c 100644
--- a/kernel-aarch64-16k-fedora.config
+++ b/kernel-aarch64-16k-fedora.config
@@ -926,7 +926,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1716,6 +1716,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index cdaa66f..157cc84 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -739,7 +739,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1378,6 +1379,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1649,6 +1652,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4220,6 +4224,7 @@ CONFIG_MMC_ARMMMCI=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_DW_BLUEFIELD=m
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6289,6 +6294,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index a52ee7f..200ff18 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -739,7 +739,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1378,6 +1379,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1641,6 +1644,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4197,6 +4201,7 @@ CONFIG_MMC_ARMMMCI=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_DW_BLUEFIELD=m
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6262,6 +6267,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-aarch64-debug-fedora.config b/kernel-aarch64-debug-fedora.config
index 1dd8fcd..124e39c 100644
--- a/kernel-aarch64-debug-fedora.config
+++ b/kernel-aarch64-debug-fedora.config
@@ -926,7 +926,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1716,6 +1716,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index e5df932..97cb9d1 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -737,7 +737,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1376,6 +1377,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1647,6 +1650,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4218,6 +4222,7 @@ CONFIG_MMC_ARMMMCI=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_DW_BLUEFIELD=m
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6286,6 +6291,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-aarch64-fedora.config b/kernel-aarch64-fedora.config
index c791985..498e065 100644
--- a/kernel-aarch64-fedora.config
+++ b/kernel-aarch64-fedora.config
@@ -926,7 +926,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1716,6 +1716,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 2453b2d..23c480f 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -737,7 +737,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1376,6 +1377,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1639,6 +1642,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4195,6 +4199,7 @@ CONFIG_MMC_ARMMMCI=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_DW_BLUEFIELD=m
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6259,6 +6264,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-aarch64-rt-64k-debug-fedora.config b/kernel-aarch64-rt-64k-debug-fedora.config
index 7deeb57..489d7c2 100644
--- a/kernel-aarch64-rt-64k-debug-fedora.config
+++ b/kernel-aarch64-rt-64k-debug-fedora.config
@@ -929,7 +929,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1720,6 +1720,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 5af6816..21ad74d 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -740,7 +740,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1380,6 +1381,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1652,6 +1655,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4262,6 +4266,7 @@ CONFIG_MMC_ARMMMCI=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_DW_BLUEFIELD=m
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6334,6 +6339,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-aarch64-rt-64k-fedora.config b/kernel-aarch64-rt-64k-fedora.config
index 5da27e6..23d0de7 100644
--- a/kernel-aarch64-rt-64k-fedora.config
+++ b/kernel-aarch64-rt-64k-fedora.config
@@ -929,7 +929,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1720,6 +1720,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index 8d6fe18..4b4d367 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -740,7 +740,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1380,6 +1381,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1644,6 +1647,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4239,6 +4243,7 @@ CONFIG_MMC_ARMMMCI=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_DW_BLUEFIELD=m
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6307,6 +6312,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-aarch64-rt-debug-fedora.config b/kernel-aarch64-rt-debug-fedora.config
index 97203d4..8170a3d 100644
--- a/kernel-aarch64-rt-debug-fedora.config
+++ b/kernel-aarch64-rt-debug-fedora.config
@@ -926,7 +926,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1717,6 +1717,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 311004c..4c864db 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -737,7 +737,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1377,6 +1378,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1649,6 +1652,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4259,6 +4263,7 @@ CONFIG_MMC_ARMMMCI=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_DW_BLUEFIELD=m
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6330,6 +6335,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-aarch64-rt-fedora.config b/kernel-aarch64-rt-fedora.config
index 92efa94..4077472 100644
--- a/kernel-aarch64-rt-fedora.config
+++ b/kernel-aarch64-rt-fedora.config
@@ -926,7 +926,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1717,6 +1717,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index f7f9ae8..aa5189d 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -737,7 +737,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1377,6 +1378,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1641,6 +1644,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4236,6 +4240,7 @@ CONFIG_MMC_ARMMMCI=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_DW_BLUEFIELD=m
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6303,6 +6308,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-ppc64le-debug-fedora.config b/kernel-ppc64le-debug-fedora.config
index 7c23dc6..714619d 100644
--- a/kernel-ppc64le-debug-fedora.config
+++ b/kernel-ppc64le-debug-fedora.config
@@ -588,7 +588,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1167,6 +1167,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 8a3f3af..ae5ffac 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -536,7 +536,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1102,6 +1103,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1363,6 +1366,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -3821,6 +3825,7 @@ CONFIG_MLXSW_SPECTRUM=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -5755,6 +5760,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-ppc64le-fedora.config b/kernel-ppc64le-fedora.config
index 178f858..20bde18 100644
--- a/kernel-ppc64le-fedora.config
+++ b/kernel-ppc64le-fedora.config
@@ -587,7 +587,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1166,6 +1166,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index b80ea41..024977b 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -536,7 +536,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1102,6 +1103,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1355,6 +1358,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -3799,6 +3803,7 @@ CONFIG_MLXSW_SPECTRUM=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -5730,6 +5735,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-riscv64-debug-fedora.config b/kernel-riscv64-debug-fedora.config
index ee58664..f1f72fc 100644
--- a/kernel-riscv64-debug-fedora.config
+++ b/kernel-riscv64-debug-fedora.config
@@ -616,7 +616,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1211,6 +1211,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config
index c19d3c0..4fb4b16 100644
--- a/kernel-riscv64-debug-rhel.config
+++ b/kernel-riscv64-debug-rhel.config
@@ -555,7 +555,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1128,6 +1129,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1385,6 +1388,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -3832,6 +3836,7 @@ CONFIG_MLXSW_SPECTRUM=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -5820,6 +5825,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-riscv64-fedora.config b/kernel-riscv64-fedora.config
index 9dfcc3c..f7a52a1 100644
--- a/kernel-riscv64-fedora.config
+++ b/kernel-riscv64-fedora.config
@@ -615,7 +615,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1210,6 +1210,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-riscv64-rhel.config b/kernel-riscv64-rhel.config
index 30629f9..b06bf89 100644
--- a/kernel-riscv64-rhel.config
+++ b/kernel-riscv64-rhel.config
@@ -555,7 +555,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1128,6 +1129,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1377,6 +1380,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -3810,6 +3814,7 @@ CONFIG_MLXSW_SPECTRUM=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -5795,6 +5800,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-riscv64-rt-debug-fedora.config b/kernel-riscv64-rt-debug-fedora.config
index 8d1841b..815b875 100644
--- a/kernel-riscv64-rt-debug-fedora.config
+++ b/kernel-riscv64-rt-debug-fedora.config
@@ -616,7 +616,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1212,6 +1212,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-riscv64-rt-fedora.config b/kernel-riscv64-rt-fedora.config
index 78020bc..6f9e451 100644
--- a/kernel-riscv64-rt-fedora.config
+++ b/kernel-riscv64-rt-fedora.config
@@ -615,7 +615,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1211,6 +1211,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-s390x-debug-fedora.config b/kernel-s390x-debug-fedora.config
index bc7a048..cbb79ee 100644
--- a/kernel-s390x-debug-fedora.config
+++ b/kernel-s390x-debug-fedora.config
@@ -593,7 +593,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1169,6 +1169,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index 47feea0..5e588d6 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -537,7 +537,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1099,6 +1100,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1369,6 +1372,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -3806,6 +3810,7 @@ CONFIG_MLXSW_SPECTRUM=m
# CONFIG_MMC_BLOCK is not set
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -5742,6 +5747,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-s390x-fedora.config b/kernel-s390x-fedora.config
index 81475e6..688f224 100644
--- a/kernel-s390x-fedora.config
+++ b/kernel-s390x-fedora.config
@@ -592,7 +592,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1168,6 +1168,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 4f8ee3a..9859f1c 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -537,7 +537,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1099,6 +1100,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1361,6 +1364,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -3784,6 +3788,7 @@ CONFIG_MLXSW_SPECTRUM=m
# CONFIG_MMC_BLOCK is not set
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -5717,6 +5722,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index 09e8018..b9aa76a 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -537,7 +537,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1099,6 +1100,8 @@ CONFIG_CRYPTO_JITTERENTROPY=y
# CONFIG_CRYPTO_KRB5 is not set
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1361,6 +1364,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -3792,6 +3796,7 @@ CONFIG_MLXSW_SPECTRUM=m
# CONFIG_MMC_BLOCK is not set
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -5732,6 +5737,7 @@ CONFIG_SCSI_SCAN_ASYNC=y
CONFIG_SCSI_SRP_ATTRS=y
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-x86_64-debug-fedora.config b/kernel-x86_64-debug-fedora.config
index 0d52ba2..3699fff 100644
--- a/kernel-x86_64-debug-fedora.config
+++ b/kernel-x86_64-debug-fedora.config
@@ -661,7 +661,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1276,6 +1276,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 93c8912..5b922ce 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -568,7 +568,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1152,6 +1153,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1433,6 +1436,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4062,6 +4066,7 @@ CONFIG_MLXSW_SPECTRUM=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6045,6 +6050,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-x86_64-fedora.config b/kernel-x86_64-fedora.config
index 725be76..0f8f317 100644
--- a/kernel-x86_64-fedora.config
+++ b/kernel-x86_64-fedora.config
@@ -660,7 +660,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1275,6 +1275,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 33ef26f..a82674e 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -568,7 +568,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1152,6 +1153,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1425,6 +1428,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4040,6 +4044,7 @@ CONFIG_MLXSW_SPECTRUM=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6019,6 +6024,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-x86_64-rt-debug-fedora.config b/kernel-x86_64-rt-debug-fedora.config
index d43268b..0eeb2ba 100644
--- a/kernel-x86_64-rt-debug-fedora.config
+++ b/kernel-x86_64-rt-debug-fedora.config
@@ -661,7 +661,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1277,6 +1277,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index f017d1b..d944750 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -568,7 +568,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1153,6 +1154,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1435,6 +1438,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4103,6 +4107,7 @@ CONFIG_MLXSW_SPECTRUM=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6089,6 +6094,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel-x86_64-rt-fedora.config b/kernel-x86_64-rt-fedora.config
index 0fa7469..caf86e4 100644
--- a/kernel-x86_64-rt-fedora.config
+++ b/kernel-x86_64-rt-fedora.config
@@ -660,7 +660,7 @@ CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_ZONED_LOOP=m
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
@@ -1276,6 +1276,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 8ef96cb..53b6d41 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -568,7 +568,8 @@ CONFIG_BLK_DEV=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set
CONFIG_BLK_DEV_ZONED=y
# CONFIG_BLK_ERROR_INJECTION is not set
-# CONFIG_BLK_INLINE_ENCRYPTION is not set
+CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y
+CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_SED_OPAL=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_WBT=y
@@ -1153,6 +1154,8 @@ CONFIG_CRYPTO_KRB5ENC=m
CONFIG_CRYPTO_KRB5=m
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_CRYPTO_LIB_AES_CBC_MACS_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_CCM_KUNIT_TEST=m
+CONFIG_CRYPTO_LIB_AES_GCM_KUNIT_TEST=m
# CONFIG_CRYPTO_LIB_BENCHMARK is not set
CONFIG_CRYPTO_LIB_BLAKE2B_KUNIT_TEST=m
CONFIG_CRYPTO_LIB_BLAKE2S_KUNIT_TEST=m
@@ -1427,6 +1430,7 @@ CONFIG_DM_DELAY=m
CONFIG_DM_ERA=m
CONFIG_DM_FLAKEY=m
CONFIG_DMIID=y
+# CONFIG_DM_INLINECRYPT is not set
CONFIG_DM_INTEGRITY=m
CONFIG_DMI_SYSFS=y
CONFIG_DMI=y
@@ -4081,6 +4085,7 @@ CONFIG_MLXSW_SPECTRUM=m
CONFIG_MMC_BLOCK=m
CONFIG_MMC_BLOCK_MINORS=8
CONFIG_MMC_CB710=m
+# CONFIG_MMC_CRYPTO is not set
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_DW_BLUEFIELD is not set
# CONFIG_MMC_DW_EXYNOS is not set
@@ -6063,6 +6068,7 @@ CONFIG_SCSI_SPI_ATTRS=m
CONFIG_SCSI_SRP_ATTRS=m
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
+# CONFIG_SCSI_UFS_CRYPTO is not set
# CONFIG_SCSI_UFSHCD is not set
# CONFIG_SCSI_UFS_HWMON is not set
CONFIG_SCSI_VIRTIO=m
diff --git a/kernel.changelog b/kernel.changelog
index 7ada5cb..338f8ed 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,7 +1,3383 @@
-* Mon Aug 17 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-61]
+* Tue Aug 18 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.3.0-0.rc0.0f23d56f17fd.3]
- automotive: enable HUGETLBFS to workaround build error (Scott Weaver)
Resolves:
+* Tue Aug 18 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.3.0-0.rc0.0f23d56f17fd.2]
+- Turn on CONFIG_BLK_INLINE_ENCRYPTION for RHEL pending too (Justin M. Forbes)
+- Turn on BLK_INLINE_ENCRYPTION_FALLBACK for mismatch (Justin M. Forbes)
+- Reset Makefile.rhelver for the 7.3 cycle (Justin M. Forbes)
+- Merge configs into common for 7.2 (Justin M. Forbes)
+- redhat/configs: automotive: enable RTC_DRV_PL031 (Eric Chanudet)
+- redhat: name the dtb and UKI arch lists (Jan Stancek)
+- redhat: use one spelling for the nobuildarches files guard (Jan Stancek)
+- redhat: drop stale ppc64 from the kabidw-base arch list (Jan Stancek)
+- redhat: document the kabichk force-off as a seasonal toggle (Jan Stancek)
+- redhat: use one spelling for the include and gemini conditionals (Jan Stancek)
+- redhat: remove unused elf_image_install_path and duplicate defines (Jan Stancek)
+- redhat: drop the dead kernel-tools __requires_exclude python filter (Jan Stancek)
+- redhat: drop the Fedora 41 cross-build gdb-index workaround (Jan Stancek)
+- redhat: drop stale build switches from dist-perf and dist-rpm-baseonly (Jan Stancek)
+- redhat: give kernel-automotive its own summary (Jan Stancek)
+- redhat: drop leftover kernel_kvm_post calls for rt-64k (Jan Stancek)
+- redhat: restore missing summary of the kernel-debug variant (Jan Stancek)
+- redhat: fix parse error in baseonly sanity check message (Jan Stancek)
+- dracut-virt.conf: change systemd-pcrphase to systemd-pcrextend (Vitaly Kuznetsov)
+- redhat/kernel.spec.template: Switch UKI addons to using UKI cert (Vitaly Kuznetsov)
+- redhat/configs: automotive: disable CONFIG_MD (Jared Kangas)
+- Clean up unnecessary pending entries (Justin M. Forbes)
+- Turn on CONFIG_CRYPTO_MLDSA for Fedora (Justin M. Forbes)
+- Fix up mismatch for rhel automotive (Justin M. Forbes)
+- Fix up a config mismatch in pending (Justin M. Forbes)
+- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas)
+- Remove stale config items from 7.1 (Justin M. Forbes)
+- Last configs for 7.2 Fedora (Justin M. Forbes)
+- redhat: Disable the CRYPTO_LIB_AESCFB config switch (Thomas Huth)
+- redhat/configs: do not enable IPQ_GCC_9650 (Eric Chanudet)
+- redhat/configs: do not enable CLK_X1P42100_* (Eric Chanudet)
+- redhat: always overwrite spec template copy (Jan Stancek)
+- gitlab-ci: enable ELN clang builds (Scott Weaver)
+- Turn on CONFIG_REGMAP for RHEL s390x (Justin M. Forbes)
+- Turn ACPI_PLATFORM_PROFILE to built-in for RHEL x86 (Justin M. Forbes)
+- Turn on CONFIG_RESCTRL_FS for RHEL x86 (Justin M. Forbes)
+- redhat: configs: rhel: Enable AMD ISP4 MIPI camera solution (Kate Hsuan)
+- fedora: updates for the 7.2 merge window (Peter Robinson)
+- redhat/configs: Enable deadline and stall monitors (Gabriele Monaco)
+- redhat/kernel.spec: fix build for rtonly (Jan Stancek)
+- redhat: filtermods.py: document exact_pkg and ignore_deps rule attributes (Jan Stancek)
+- redhat: filtermods.py: make pick_best() deterministic on tied packages (Jan Stancek)
+- redhat: filtermods.py: add ignore_deps rule option (Jan Stancek)
+- redhat: filtermods.py: don't create logfile automatically (Jan Stancek)
+- redhat: filtermods.py: clean up logging imports (Jan Stancek)
+- redhat: filtermods.py: strip lines when parsing depmod file (Jan Stancek)
+- redhat: filtermods.py: fix typo in _check_preffered_pkg (Jan Stancek)
+- redhat: filtermods.py: error on unknown package dependency (Jan Stancek)
+- redhat: filtermods.py: avoid mutable default arguments (Jan Stancek)
+- redhat: filtermods.py: handle .zst and .gz compressed modules (Jan Stancek)
+- redhat: filtermods.py: fix Exception string formatting (Jan Stancek)
+- redhat: filtermods.py: detect dependency cycles in get_topo_order() (Jan Stancek)
+- redhat: filtermods.py: fix do_rpm_mapping_test() (Jan Stancek)
+- redhat: filtermods.py: simplify algorithm (Jan Stancek)
+- redhat: filtermods.py: add new tests (Jan Stancek)
+- redhat/configs: enable QCS615 pinctrl and interconnect drivers (Wu Fang)
+- redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas)
+- redhat/configs: automotive: enable PWM_FSL_FTM as a module (Jared Kangas)
+- Add fedora entry in pending for weird mismatch in scripts (Justin M. Forbes)
+- Fix up config mismatches (Justin M. Forbes)
+- redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek)
+- redhat/configs: Move IOMMU_PT_* from rhel-pending to rhel (Jennifer Berringer)
+- redhat/kernel.spec: require libbabeltrace2-devel (Yaakov Selkowitz)
+- redhat: move ynltool debuginfo to kernel-tools-debuginfo (Augusto Caringi)
+- Turn on CONFIG_REGMAP for RHEL s390x pending for mismatch (Justin M. Forbes)
+- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
+- uki-virt: Add fdisk to the initramfs to make systemd-repart functional (Vitaly Kuznetsov)
+- redhat/configs: Enable Epson RX8111 RTC driver for arm/aarch64 builds. Signed-off-by: Nirmala Dalvi <ndalvi@redhat.com> (Nirmala Dalvi)
+- redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek)
+- redhat/mod-sign.sh: use CONFIG_MODULE_SIG_HASH (Jan Stancek)
+- redhat/kernel.spec.template: Pack a bit more descriptive name for extras/ (Vitaly Kuznetsov)
+- redhat/configs: Enable IOMMU_DEBUG_PAGEALLOC and AMD_IOMMU_IOMMUFD (Jerry Snitselaar)
+- redhat: configs: Enable USB4STREAM protocol (Dennis Chen) [RHEL-186934]
+- Fix up a mismatch for automotive CONFIG_CLK_X1E80100_GCC (Justin M. Forbes)
+- fedora: aarch64: Set CONFIG_DRIVER_DEFERRED_PROBE_TIMEOUT=-1 (Ali Erdinc Koroglu)
+- redhat: configs: Enable AMD ISP4 MIPI camera solution (Kate Hsuan)
+- redhat: configs: Enable Intel CVS (Kate Hsuan)
+- Increase the s390x kernel baseline (Justin M. Forbes)
+- redhat/kspdx: remove redundant OR terms from joint license expression (Jan Stancek)
+- redhat/kernel.spec: set also HOST_EXTRACFLAGS for BPF bootstrap build (Jan Stancek)
+- Trim changelog duplicates after rebase (Justin M. Forbes)
+- redhat/configs: do not disable PCIEPORTBUS on ppc64le (Dan Horák)
+- Reset RHEL_RELEASE for the 7.2 cycle (Scott Weaver)
+- fedora: cleanup the Cadence USB options (Peter Robinson)
+- Consolidate configs to common for 7.1 (Justin M. Forbes)
+- redhat/kernel.spec.template: Move UKI addons to extras/ (Vitaly Kuznetsov)
+- redhat/kernel.spec.template: fixes for using with_rtonly (Clark Williams)
+- redhat/configs: rhel: Enable SpacemiT drivers for RISC-V (Jennifer Berringer)
+- Disable TPM as hwrng source on aarch64 (Štěpán Horáček)
+- redhat/configs: set NXP storage driver to built-in for boot speed (Ed Chong)
+- kernel.spec.template: add tcp_ao kselftests (Davide Caratti) [RHEL-142637]
+- redhat/configs: Enable CONFIG_SMC_HS_CTRL_BPF for s390x debug kernel (Jan Polensky)
+- redhat/configs: Enable CONFIG_SMC_HS_CTRL_BPF for s390x architecture (Jan Polensky)
+- redhat/configs: Enable CONFIG_DIBS built-in for s390x zfcpdump (Jan Polensky)
+- redhat/configs: Disable CONFIG_DIBS_LO for s390x architecture (Jan Polensky)
+- redhat/configs: Enable CONFIG_DIBS for s390x architecture (Jan Polensky)
+- redhat/kernel.spec: make module and modules-core provides use variant (Jan Stancek)
+- redhat/configs: automotive: enable NXP_SAR_ADC as a module (Jared Kangas)
+- redhat: CONFIG_MODPROBE_PATH: use upstream default (Scott Weaver)
+- Last few Fedora configs for 7.1 (Justin M. Forbes)
+- fedora: aarch64: Disable QCom QCE driver (Peter Robinson)
+- fedora: Updates for the 7.1 merge window (Peter Robinson)
+- Enable the drm/accel/qaic driver module for x86 in rhel config. (John Wiele)
+- Update rhel drm/accel configs to match centos-stream-10. (John Wiele)
+- redhat/configs: do not enable ARCH_TEGRA_238_SOC (Eric Chanudet)
+- redhat/configs: do not enable ARCH_R9A08G046 (Eric Chanudet)
+- redhat/configs: realign LOCKDEP_STACK_TRACE_*_BITS with upstream KASAN defaults (Mikhail Gavrilov)
+- Add missing config file for Fedora (Justin M. Forbes)
+- Turn on XFS_ONLINE_REPAIR for Fedora (Justin M. Forbes)
+- Enable SND_DESIGNWARE for Fedora x86 (Justin M. Forbes)
+- Enable HID_SENSOR_PROX for Fedora x86 (Justin M. Forbes)
+- Fedora: set default panic screen to QR code (Jocelyn Falempe)
+- redhat/configs/fedora: Enable MPAM options (Gavin Shan)
+- redhat/configs/rhel: Enable MPAM options (Gavin Shan)
+- configs: arm64: Enable Tegra410 PMUs (Mark Salter)
+- Disable MODULE_SIG_KEY_TYPE_MLDSA_87 for RHEL right now (Justin M. Forbes)
+- redhat/configs: enable CONFIG_TCP_AO in centos-stream (Davide Caratti) [RHEL-142637]
+- Gate Fedora ELN kernel updates on openQA tests (Adam Williamson)
+- Change MODPROBE_PATH to /usr/bin (Justin M. Forbes)
+- configs: rhel: riscv config updates (Jennifer Berringer)
+- Re-enable Intel MEI for Fedora x86 (Justin M. Forbes)
+- Enable MEDIA_TUNER_MXL301RF for Fedora (Justin M. Forbes)
+- Turn on DVB_PT3 for Fedora at user request (Justin M. Forbes)
+- redhat/configs: enable CONFIG_GPIO_NOVALAKE for x86 on RHEL (Steve Best)
+- redhat/Makefile: avoid picking up editor backup files in changelog glob (Jan Stancek)
+- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky)
+- Delete Fedora configs removed upstream for 7.1 (Justin M. Forbes)
+- add man-page for rv-mon-stall (Thorsten Leemhuis)
+- Enable FFA for TPM on AArch64 (Marcin Juszkiewicz)
+- redhat: rh_flags: mark !CONFIG_RHEL_DIFFERENCES stubs as static inline (Jonathan Steffan)
+- redhat: Add DENYLIST.rhel to BPF selftests (Viktor Malik)
+- redhat/configs: enable watchdog pretimout panic functionality for x86 on RHEL (David Arcari)
+- Revert "redhat/configs: enable CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT" (David Arcari)
+- redhat/configs: rhel: Enable SPD5118 sensor driver (Jennifer Berringer)
+- Trim changelog and reset RHEL_RELEASE for 7.1 (Justin M. Forbes)
+- Fix up pending for mismatches (Justin M. Forbes)
+- Fix up rebase typo in drivers/pci/quirks.c (Justin M. Forbes)
+- Fix up mismatc with ACPI_PLATFORM_PROFILE (Justin M. Forbes)
+- Add epoch support for rv and rv-debuginfo packages (John Kacur)
+- Drop the hardlink step in %%post scriptlet (Zbigniew Jędrzejewski-Szmek)
+- redhat: allow genlog to exclude commits and issues based on ref pattern (Jan Stancek)
+- redhat/configs: enable the DIBS driver as it is now required for the SMC networking (Dan Horák)
+- redhat/configs: enable CRYPTO_PHMAC as module on s390x (Dan Horák)
+- rh_message.h: update support status of mlx5 devices (Scott Weaver)
+- Consolidate configs to common for 7.0 (Justin M. Forbes)
+- Remove stale config items (Justin M. Forbes)
+- redhat/configs: enable CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT (David Arcari)
+- Turn on CONFIG_PREEMPT_LAZY for all arches (Justin M. Forbes)
+- redhat: selftests/bpf: Add cpuv4 variant (Viktor Malik)
+- redhat/configs: automotive: enable CONFIG_INIT_STACK_ALL_ZERO (Joe Simmons-Talbott)
+- Turn om SND_SOC_TAS2781_I2C=m for x86_64 (Justin M. Forbes)
+- Fix mismatch for CONFIG_POWER_SEQUENCING (Justin M. Forbes)
+- scriptlets: exit 0 on explicit exits (Adam Williamson)
+- Work around binutils update in s390x perf (Justin M. Forbes)
+- redhat/configs: Centralize iommu debugfs options, and enable amd iommu debugfs (Jerry Snitselaar)
+- fedora: arm64: Make qcom geni i2c-adapter and i2c-hid-of drivers builtin (Hans de Goede)
+- redhat/spec: Re-enable gdb index for riscv cross-compile (Jennifer Berringer)
+- redhat/kernel.spec: add aarch64 to fedora secure boot list (Jeremy Cline)
+- Turn on ASUS_ARMOURY driver, fixes RHBZ 2433246 (Justin M. Forbes)
+- Turn on Uniwill x86 platform driver (Justin M. Forbes)
+- Turn on GPIB for Fedora (Justin M. Forbes)
+- Fix up RHEL pending CONFIG_PREEMPT configs for 7.0 (Justin M. Forbes)
+- Fix up Fedora configs for 7.0 (Justin M. Forbes)
+- redhat/configs: enable CONFIG_LIVEUPDATE for fedora (Luca Boccassi)
+- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
+- redhat/configs: remove CONFIG_ZBUD (Rafael Aquini)
+- redhat/configs: automotive: enable USB_CHIPIDEA_IMX (Jared Kangas)
+- redhat/configs: automotive: enable NVMEM_S32G_OCOTP (Jared Kangas)
+- redhat/scripts: remove remnants of git notes usage and dead code (Jan Stancek)
+- New configs in fs/smb (Fedora Kernel Team)
+- Add signing key for Nvidia Bluefield GPU (Enrique Belarte Luque)
+- [gitlab-ci] delay start rawhide clang pipelines by 3 mins. (Simone Tollardo)
+- fedora: Updates for the 7.0 merge (Peter Robinson)
+- fedora: disable Kaanapali by default (Peter Robinson)
+- fedora: minor beeper cleanups (Peter Robinson)
+- redhat/configs: unify CONFIG_CAN for RHEL and Fedora (Radu Rendec)
+- redhat: add a weak relationship between modules-internal and selftests (Jan Stancek)
+- new config in drivers/phy (Izabela Bakollari)
+- Reset the changelog for 7.0-rc1 (Justin M. Forbes)
+- A couple more quick important 7.0 config updates for Fedora (Justin M. Forbes)
+- A couple of quick important 7.0 config updates for Fedora (Justin M. Forbes)
+- redhat/configs: enable CONFIG_AQTION on all archs (Michal Schmidt) [RHEL-150853]
+- Add signing key for Nvidia Jetson (Enrique Belarte)
+- configs: enable Freescale MXS DMA engine (Jiri Benc)
+- redhat/dracut-virt.conf: remove erroneous spaces in omit_dracutmodules (Li Tian)
+- redhat/kernel.spec.template: Make -uki-dtbloader provide kernel-core-uname-r (Hans de Goede)
+- redhat/kernel.spec.template: Add kernel-uki-dtbloader sub-package (Hans de Goede)
+- redhat/kernel.spec.template: Simplify uki-virt signing (Hans de Goede)
+- redhat/kernel.spec.template: Fix indentation of uki-virt generation code (Hans de Goede)
+- Fix mismatch for CONFIG_POWER_SEQUENCING (Justin M. Forbes)
+- Fix up a couple of mismatches with PREEMPT_LAZY and x86 SND_SOC_TAS2781_I2C for RHEL (Justin M. Forbes)
+- Turn on CONFIG_PREEMPT in pending to avoid mismatch (Justin M. Forbes)
+- Turn off CONFIG_SMB_KUNIT_TESTS in pending (Justin M. Forbes)
+- Trim the changelog for 7.0 (Justin M. Forbes)
+- Reset RHEL_RELEASE for the 7.0 series (Justin M. Forbes)
+- redhat/configs: rename CONFIG_QCOM_QFPROM to CONFIG_NVMEM_QCOM_QFPROM (Eric Chanudet)
+- redhat/dracut-virt.conf: omit drm drivers in UKI initrd (Li Tian) [RHEL-147296]
+- Prevent stripping of rtla and rv binaries during install (John Kacur)
+- Fix rtla and rv debuginfo package definitions (John Kacur)
+- Add debuginfo package for rtla tool (John Kacur)
+- Add debuginfo package for rv tool (John Kacur)
+- Consolidate configs to common for 6.19 (Justin M. Forbes)
+- redhat/configs: Set CONFIG_PTP_S390=y (Mete Durlu) [RHEL-141647]
+- [gitlab-ci] tag-cki-gating: refactor to use GIT_STRATEGY=empty (Patrick Talbert)
+- efi: Fix swapped arguments to bsearch() in efi_status_to_*() (Dongdong Tao)
+- redhat/configs: Ship nft_osf.ko in Fedora, too (Phil Sutter)
+- Set Fedora configs for 6.19 kernels (Justin M. Forbes)
+- configs: enable FUNCTION_GRAPH_RETVAL everywhere (Jerome Marchand)
+- configs: riscv: Enable ARCH_ESWIN for CentOS (Jennifer Berringer)
+- configs: riscv: Enable StarFive drivers for CentOS (Jennifer Berringer)
+- configs: riscv: Enable common hardware drivers for CentOS (Jennifer Berringer)
+- redhat: exclude DERIVATIVE_BUILD and DERIVATIVE_VERSION from self-test data (Jan Stancek)
+- fedora: arm64: make pinctrl-msm8916 built-in (Sam Day)
+- [gitlab-ci] rawhide_release: set FF_USE_NEW_BASH_EVAL_STRATEGY=true (Patrick Talbert)
+- redhat: add usbio kmod placement rule (Jan Stancek)
+- Rename with_up to with_stock. (Alexandra Hájková)
+- redhat: dereference GITID during tarball creation (Jan Drögehoff)
+- redhat/configs: Disable CONFIG_INTEL_TH on RHEL (David Arcari)
+- Revert "[redhat] temporarily disable CONFIG_CRYPTO_DEV_SP_PSP" (Scott Weaver)
+- kernel-tools: split the python tools off (Peter Robinson)
+- gitlab-ci: set allow_failure for the rawhide-release job (Patrick Talbert)
+- redhat: export FLAVOR (Jose Ignacio Tornos Martinez)
+- redhat: Add documentation comments to kernel.spec.template macros (Alexandra Hájková)
+- redhat/configs: enable rtw8922ae for rhel (Jose Ignacio Tornos Martinez)
+- kernel.spec.template: Cleanup package_name use (Prarit Bhargava)
+- Revert "Turn on CONFIG_DEBUG_INFO_COMPRESSED_ZLIB" (Lianbo Jiang)
+- fedora: aarch64: Enable BST platform support (Weizhao Ouyang)
+- fedora: aarch64: Enable TI_SCI_INTR_IRQCHIP as built-in (Ayush Singh)
+- Fedora: arm: aarch64: Enable mandatory CONFIGs for QCS8300 (Shivendra Pratap)
+- fedora: updates for the 6.19 merge (Peter Robinson)
+- redhat/self-test: refresh with new variables (Scott Weaver)
+- gitlab-ci: enable c10s automotive package build (Scott Weaver)
+- automotive: add configurable package name and disttag variables (Scott Weaver)
+- Fix up zfcpdump mismatch (Justin M. Forbes)
+- redhat/kernel.spec.template: Let kernel-modules installation rebuild initrd in UKI system (Li Tian) [RHEL-135256]
+- restore HYPERV configs to 6.17 state (Paolo Bonzini)
+- redhat/configs: automotive: enable NXP_STM_TIMER (Jared Kangas)
+- redhat/configs: automotive: enable S32G_WDT (Jared Kangas)
+- redhat/configs: enable NXP S32 on aarch64 autmotive (Alessandro Carminati)
+- Reset RHEL_RELEASE for the 6.19 cycle (Justin M. Forbes)
+- add libasan-static and libubsan as BR for selftests (Thorsten Leemhuis)
+- add liburing-devel as BR for selftests (Thorsten Leemhuis)
+- add a few optional BRs for perf (Thorsten Leemhuis)
+- Consolidate configs into common for 6.18 (Justin M. Forbes)
+- redhat/configs: make CONFIG_DRM_CLIENT_LIB=y (Jocelyn Falempe)
+- fedora: arm: minor config updates (Peter Robinson)
+- Change RZ_DMAC from m to y for Fedora (Justin M. Forbes)
+- redhat/configs: automotive: enable CAN_FLEXCAN (Jared Kangas)
+- Revert "Removing Obsolete hba pci-ids from rhel8" (Scott Weaver)
+- rh_messages.h: add missing lpfc devices (Scott Weaver)
+- redhat/configs: Enable CONFIG_NFSD_V4_2_INTER_SSC in RHEL (Scott Mayhew)
+- redhat: Package net/hsr selftests (Felix Maurer)
+- Remove redundant Fedora VFIO overrides (Daniel P. Berrangé)
+- Enable CONFIG_VFIO_DEVICE_CDEV on Fedora (Daniel P. Berrangé)
+- redhat/configs: automotive: enable I2C_IMX and dependencies (Jared Kangas)
+- Set some late arrival config options for Fedora 6.18 (Justin M. Forbes)
+- redhat/configs: enable Micel PHY for NXP Automotive SoCs S32G2xx/S32G3xx/S32R45 (Alessandro Carminati)
+- redhat/configs: enable Synopsis DWMAC IP on NXP Automotive SoCs S32G2xx/S32G3xx/S32R45 (Alessandro Carminati)
+- redhat/configs: Move CONFIG_MICROCODE_DBG to common/generic/x86 (Waiman Long)
+- redhat/configs: Set CONFIG_SCHED_PROXY_EXEC=n (Waiman Long)
+- Add loongarch to kernel-headers for Fedora (Justin M. Forbes)
+- Turn on SYNTH_EVENTS for RISCV RHEL to avoid a mismatch (Justin M. Forbes)
+- Turn on PCI_PWRCTRL_SLOT for aarch64 in RHEL (Justin M. Forbes)
+- redhat/kernel.spec.template: add net/can kselftests (Davide Caratti)
+- redhat/configs: Enable CONFIG_OVMF_DEBUG_LOG in RHEL (Lenny Szubowicz) [RHEL-100104]
+- merge-linux-next: use gitlab remote (Scott Weaver)
+- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
+- redhat: configs: rhel: Enable OV08X40 sensor to support Intel MIPI camera (Kate Hsuan)
+- redhat: configs: rhel: Enable usbio-drivers to supower Intel MIPI camera (Kate Hsuan)
+- redhat: configs: Enable DWC3 Generic Platform Driver on RHEL automotive (Desnes Nunes) [RHEL-119326]
+- redhat: configs: Enable OV08X40 sensor driver on RHEL (Desnes Nunes) [RHEL-119326]
+- redhat: configs: Enable USBIO Bridge support on RHEL x86 (Desnes Nunes) [RHEL-119326]
+- gitlab-ci: testing (Scott Weaver)
+- ark-linux-next: check for git hooks directory (Scott Weaver)
+- gitlab-ci: merge-linux-next: workaround pydantic-core build error (Scott Weaver)
+- redhat: remove EARLY ystream bits (Jan Stancek)
+- redhat/configs: configure CONFIG_ATH12K_AHB for rhel (Jose Ignacio Tornos Martinez)
+- Final configs for Fedora 6.18 (Justin M. Forbes)
+- redhat/configs: Enable additional RV monitors on debug kernels (Gabriele Monaco)
+- redhat/configs: Enable sched and rtapp RV monitors (Gabriele Monaco)
+- redhat/configs: Move CONFIG_RV_PER_TASK_MONITORS to common/generic (Gabriele Monaco)
+- properly reset CONFIG_EFI_SBAT_FILE value (Thorsten Leemhuis)
+- kernel: extend rh_waived to cope better with the CVE mitigations case (Ricardo Robaina) [RHEL-122979]
+- uki-virt: add systemd-repart module (Emanuele Giuseppe Esposito)
+- fedora: cleanup/de-dupe the USB configfs options (Peter Robinson)
+- fedora: cleanup/de-dupe the USB Device/Gadget config (Peter Robinson)
+- fedora: Disable the remanents of legacy USB gadget (Peter Robinson)
+- fedora: i3c: enable more i3c (Peter Robinson)
+- Configs: Mark SCHED_MC as enabled for powerpc (Phil Auld)
+- redhat: update self-test-data for RELEASE_LOCALVERSION (Jan Stancek)
+- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
+- Turn on CONFIG_DEBUG_INFO_COMPRESSED_ZLIB (Lianbo Jiang)
+- redhat/kernel.spec: make python3-perf glob more specific (Jan Stancek)
+- fedora: arm64: Updates for AMD Xilinx devices (Peter Robinson)
+- redhat/configs: Re-enable Raspberry Pi support in automotive (Radu Rendec)
+- redhat/configs: automotive: enable FSL_EDMA (Jared Kangas)
+- Trim changelog of dupes for the 6.18 reset (Justin M. Forbes)
+- fedora: aarch64: Enable arm MHUv2 driver (Peter Robinson)
+- redhat/configs: automotive: enable RTC_DRV_S32G (Jared Kangas)
+- redhat/configs: automotive: switch ufs-qcom to module (Eric Chanudet)
+- redhat/configs: automotive: switch geni-se and serial-qcom-geni to modules (Eric Chanudet)
+- redhat/configs: automotive: switch pinctrl_msm and pinctrl_sa8775p to modules (Eric Chanudet)
+- redhat: add all namespace-dependent selftests to kernel-selftests-internal (Joel Savitz)
+- fedora: Minor QCom configs cleanup (Peter Robinson)
+- fedora: cleanup now removed BCACHEFS options (Peter Robinson)
+- fedora: Last updates for 6.18 (Peter Robinson)
+- Turn on X86_FRED for Fedora (Justin M. Forbes)
+- Fix up HYPERV configs for 6.18 (Justin M. Forbes)
+- add xxd to as BuildRequire for bpf selftests (Thorsten Leemhuis)
+- Flip HID_HAPTIC to inline for Fedora due to symbol errors (Justin M. Forbes)
+- fedora: updates for 6.18 (Peter Robinson)
+- redhat/configs: automotive: enable SPI_OMAP24XX as a module (Jared Kangas)
+- Fix up mismatch with PCI_PWRCTRL_SLOT on arm (Justin M. Forbes)
+- Turn on DRM_ACCEL_ROCKET FOR Fedora (Justin M. Forbes)
+- redhat: rpminspect: update emptyrpm list for kernel variants (Patrick Talbert)
+- redhat: ark-linux-next.sh: initial commit (Scott Weaver)
+- redhat: prepare-commit-msg: initial commit (Scott Weaver)
+- redhat: ark-merge-driver: initial commit (Scott Weaver)
+- redhat/Makefile: add dist-configs-commit-mismatches (Scott Weaver)
+- Flip SCHED_MC for RHEL ppc to avoid a mismatch (Justin M. Forbes)
+- Revert "Merge branch 'add_next_sched_job' into 'os-build'" (Justin M. Forbes)
+- Fix up a merge window mismatch for riscv RHEL (Justin M. Forbes)
+- Reset RHEL_RELEASE for the 6.18 cycle (Justin M. Forbes)
+- Turn on USB_FUNCTIONFS for Fedora (Justin M. Forbes)
+- redhat/configs: Disable CONFIG_EFI_MIXED in RHEL (Lenny Szubowicz)
+- Revert "Merge branch 'tmp2' into 'os-build'" (Justin M. Forbes)
+- Always set LLVM=1 when building with clang (Tom Stellard)
+- redhat/configs: Move CONFIG_MITIGATION_VMSCAPE to common/generic/x86 (Waiman Long)
+- redhat/Makefile: Update the make target dist-configs-check to fail (Alexandra Hájková)
+- Consolidate configs to common for 6.17 (Justin M. Forbes)
+- Add 1010-config-newlines-test.bats self test. (Alexandra Hájková)
+- os-build: Remove dead CONFIG_SCHED_DEBUG files (Phil Auld)
+- redhat/configs: automotive: Disable COMPAT_32BIT_TIME SGETMASK_SYSCALL and IA32_EMULATION configs (Dorinda Bassey)
+- Revert "redhat/configs: automotive: Disable NetLabel subsystem support" (Dorinda Bassey)
+- redhat: ark-linux-next.sh: initial commit (Scott Weaver)
+- redhat: prepare-commit-msg: initial commit (Scott Weaver)
+- redhat: ark-merge-driver: initial commit (Scott Weaver)
+- redhat/Makefile: add dist-configs-commit-mismatches (Scott Weaver)
+- Turn on PINCTRL_SM8550_LPASS_LPI for Fedora (Justin M. Forbes)
+- redhat: configs: drop TI_K3_UDMA & TI_K3_UDMA_GLUE_LAYER from RHEL (Eric Chanudet)
+- redhat: configs: move TI_SCI_PROTOCOL and TI_MESSAGE_MANAGER to common (Eric Chanudet)
+- Set CONFIG_MITIGATION_VMSCAPE for Fedora (Justin M. Forbes)
+- redhat/Makefile: update dist-vr-check (Scott Weaver)
+- gitlab-ci: add kcidb_tree_name to trees (Tales da Aparecida)
+- Fix packaging for libcpupower python binding debuginfo (Justin M. Forbes)
+- redhat/configs: automotive: enable TI K3 R5F remoteproc driver (Jared Kangas)
+- Move CONFIG_SCHED_PROXY_EXEC to the zfcpdump directory (Justin M. Forbes)
+- Set Fedora configs for 6.17 (Justin M. Forbes)
+- redhat: scripts: ignore incorrect shellcheck 2329 in trap function (Simone Tollardo)
+- Turn on PHY_ROCKCHIP_SAMSUNG_DCPHY for Fedora (Justin M. Forbes)
+- rh_messages.h: add missing aacraid device (Scott Weaver)
+- rh_messages.h: update unmaintained drivers (Scott Weaver)
+- arm64: enable Tegra264 SoC components in RHEL (Marcin Juszkiewicz)
+- redhat: export only selected variables (Jan Stancek)
+- gitlab-ci: set HOME in maintenance jobs (Tales da Aparecida)
+- gitlab-ci: remove fetch of linux-rt-devel (Scott Weaver)
+- redhat/Makefile: auto select -z-test-pesign target for z-stream (Jan Stancek)
+- redhat/configs: Move RHEL/Fedora lockdown configs to common (Jeremy Cline)
+- Enable building libcpupower bindings for ELN/Rawhide (John B. Wyatt IV)
+- redhat: Explicitly disable 'hostonly' mode on the dracut cmdline (Vitaly Kuznetsov)
+- redhat: Directly use 'ukify' for building the UKI (Vitaly Kuznetsov)
+- redhat: Temporary stop adding 'kernel' component to SBAT (Vitaly Kuznetsov)
+- redhat/configs: Remove obsolete CONFIG files - part 1 (Waiman Long)
+- redhat/Makefile: add dist-spec (Scott Weaver)
+- redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Vitaly Kuznetsov)
+- redhat/configs: Enable early lockdown for Arm (Mark Salter) [RHEL-1927]
+- arm64: add early lockdown for secure boot (Mark Salter) [RHEL-1927]
+- efi: pass secure boot mode to kernel proper (Mark Salter) [RHEL-1927]
+- Disable Nova Core until it is useful (Justin M. Forbes)
+- Turn off LIBBPF_DYNAMIC for perf builds (Justin M. Forbes)
+- redhat: Add SBAT information to Linux kernel (Vitaly Kuznetsov)
+- redhat: Add SBAT to the UKI unconditionally (Vitaly Kuznetsov)
+- Enable PHY drivers required for automotive board (Radu Rendec)
+- fedora: more updates for 6.17 (Peter Robinson)
+- specfile: change conditionals for realtime for fedora (Clark Williams)
+- redhat/configs: Disable TPM2 HMAC sessions (Štěpán Horáček) [RHEL-82779]
+- redhat/script: Fix instructions for dist-cross-setup (Thomas Huth)
+- redhat/configs: Fix location of the S390_MODULES_SANITY_TEST switch (Thomas Huth)
+- redhat/configs: Fix location of the CONFIG_S390_KPROBES_SANITY_TEST switch (Thomas Huth)
+- redhat/configs: Remove superfluous generic CONFIG_TUNE_Z16 switch (Thomas Huth)
+- redhat/configs: Consolidate the CONFIG_TUNE_Z17 switch (Thomas Huth)
+- redhat/configs: Consolidate the CONFIG_RANDOMIZE_IDENTITY_BASE switch (Thomas Huth)
+- Fix up some networking configs to make docker work again (Justin M. Forbes)
+- rename CONFIG_PAGE_BLOCK_ORDER to CONFIG_PAGE_BLOCK_MAX_ORDER (Justin M. Forbes)
+- kernel.spec: add '-e' option to %%preun for kernel-core and kernel-uki-virt (Xuemin Li)
+- Remove CONFIG_TEST_MISC_MINOR as deps are no longer met (Justin M. Forbes)
+- Add to pending to fix precendence and avoid mismatch (Justin M. Forbes)
+- CONFIG_PAGE_BLOCK_ORDER is now CONFIG_PAGE_BLOCK_MAX_ORDER (Justin M. Forbes)
+- redhat/kernel.spec: fix leftover typo in Provides line (Jan Stancek)
+- fedora: Updates for 6.17 merge (Peter Robinson)
+- Fix a mismatch, needs further investigation (Justin M. Forbes)
+- Turn off TEST_MISC_MINOR as its deps are no longer met (Justin M. Forbes)
+- redhat/configs: Disable CRYPTO_KRB5 for zfcpdump (Vladis Dronov)
+- Trim changelog after rebase (Justin M. Forbes)
+- Flip TEGRA124_CPUFREQ to m for config mismatch (Justin M. Forbes)
+- Reset RHEL_RELEASE for the 6.17 cycle (Justin M. Forbes)
+- redhat/kernel.spec: fix uname_variant call sites (Jan Stancek) [RHEL-104231]
+- redhat/kernel.spec: fix uname_suffix call sites (Jan Stancek) [RHEL-104231]
+- redhat/configs: Add evaluate_configs.py and documentation (Prarit Bhargava)
+- redhat: Remove old evaluate_configs (Prarit Bhargava)
+- redhat/spec: package full bpftool in selftests (Gregory Bell)
+- selftests/bpf: Remove ksyms_weak_lskel test (Artem Savkov)
+- redhat/spec: Add libxml2-devel dependency for selftests build (Viktor Malik)
+- redhat/spec: Bypass check-rpaths for kselftests/bpf/urandom_read (Viktor Malik)
+- redhat/spec: Do not use source fortification for C++ selftest binaries (Viktor Malik)
+- redhat/spec: Do not use source fortification for selftests (Viktor Malik)
+- redhat/spec: Fix BPF selftests build with PIE (Viktor Malik)
+- redhat/spec: Add EXTRA_CXXFLAGS to bpf samples and selftests make (Artem Savkov)
+- fedora: minor cleanups (Peter Robinson)
+- fedora: aarch64: enable a couple of brcmstb reset drivers (Peter Robinson)
+- rhel/aarch64: enable CONFIG_TCG_ARM_CRB_FFA as a module (Marcin Juszkiewicz)
+- redhat/configs: Move CONFIG_MITIGATION_TSA under common/generic/x86 (Waiman Long)
+- Set CONFIG_TEST_VMALLOC to off for s390 zfcpdump (Justin M. Forbes)
+- Revert "redhat/configs: automotive: Turn off ACPI Processor package for aarch64" (Enric Balletbo i Serra)
+- redhat/configs: automotive: Disable CONFIG_NUMA config (Dorinda Bassey)
+- Consolidate configs to common for 6.16 (Justin M. Forbes)
+- arm64: enable SND_HDA_ACPI as a module (Marcin Juszkiewicz)
+- kernel.spec: always provide kernel-devel-uname-r (Scott Weaver)
+- kernel.spec: always provide kernel (Scott Weaver)
+- kernel.spec: dynamically set provides/requires name (Scott Weaver)
+- kernel.spec: use %%{name} in partner/internal modules (Scott Weaver)
+- kernel.spec: introduce with_automotive_build (Scott Weaver)
+- kernel.spec: fix kernel-automotive packaging (Scott Weaver)
+- kernel.spec: add a few macro option comments (Scott Weaver)
+- kernel.spec: add conditional to include rhel trusted certificates (Eric Chanudet)
+- kernel.spec: Always BuildRequire openssl-devel (Eric Chanudet)
+- kernel.spec: automotive: disable kernel signature by default (Eric Chanudet)
+- redhat/configs: automotive: enable extra system cert (Eric Chanudet)
+- redhat/configs: automotive: Disable module signature with modules_install (Eric Chanudet)
+- kernel.spec: honor packaging flags (Scott Weaver)
+- Fix FIPS mode for Fedora (Justin M. Forbes)
+- Turn on TSA Mitigation for Fedora (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_AMD_HSMP_ACPI and CONFIG_AMD_HSMP_PLAT on RHEL (David Arcari)
+- redhat/configs: CONFIG_WWAN enough as a module (Jose Ignacio Tornos Martinez)
+- redhat/configs: Enable CONFIG_NET_SCH_BPF on RHEL (Viktor Malik)
+- config: new config in drivers/phy (Izabela Bakollari)
+- livepatch: no need to build kselftests with kernel (Radomir Vrbovsky)
+- redhat: Restore the status quo wrt memory onlining (Vitaly Kuznetsov) [2375049]
+- redhat/spec: Disable gdb index for riscv cross-compile (Jennifer Berringer)
+- gitlab-ci: Enable CI for riscv64 on centos/eln (Jennifer Berringer)
+- redhat: Enable RISC-V arch for centos/eln (Jennifer Berringer)
+- redhat/kernel.spec.template: add drivers/net and drivers/net/hw selftest (Hangbin Liu)
+- uki: enable FIPS mode (Vitaly Kuznetsov)
+- redhat/configs: Move CONFIG_MITIGATION_ITS to common/generic/x86 (Waiman Long)
+- redhat/configs: enable fwctl for RHEL (Michal Schmidt) [RHEL-96987]
+- Fedora configs for 6.16 (Justin M. Forbes)
+- aarch64: Switch TI_SCI_CLK and TI_SCI_PM_DOMAINS symbols to built-in (Peter Robinson)
+- redhat/configs: enable CONFIG_TCG_SVSM (Stefano Garzarella)
+- redhat: enable CONFIG_CRASH_DM_CRYPT and CONFIG_KEXEC_HANDOVER for all (Coiby Xu)
+- Simplify include Makefile.rhelver (Don Zickus)
+- redhat/configs/common/generic: enable vgem module via CONFIG_DRM_VGEM (Alexander Kanavin)
+- redhat/configs: enable IWLMLD for rhel (Jose Ignacio Tornos Martinez)
+- kernel.spec: fedora automotive build is not supported (Scott Weaver)
+- gitignore: kernel-automotive generated files (Scott Weaver)
+- gitlab-ci: use AUTOMOTIVE_BUILD with dist-srpm (Scott Weaver)
+- redhat/self-test: update for new automotive variables (Scott Weaver)
+- redhat/Makefile: introduce AUTOMOTIVE_BUILD (Scott Weaver)
+- kernel.spec: updates for automotive-only build (Scott Weaver)
+- fedora: Updates for the 6.16 merge window (Peter Robinson)
+- redhat/kernel.spec: drop modules-extra-matched for noarch (Jan Stancek)
+- redhat/configs: fedora: set some qcom clk, icc, and pinctrl drivers to built in (Brian Masney)
+- fedora: disable SND_OSSEMUL (Peter Robinson)
+- fedora: disable OSS sound for real HW (Peter Robinson)
+- gitlab-ci: disable merge-rt-automotive (Scott Weaver)
+- redhat/configs: automotive: enable j784s4evm DSP remoteproc configs (Jared Kangas) [RHEL-95436]
+- redhat/configs: add LED kernel configs (Rupinderjit Singh)
+- redhat: enable test_kmod, test_module and install kmod selftests (Herton R. Krzesinski)
+- package the newly added cpupower.service (Thorsten Leemhuis)
+- process_configs: always print errors (Thorsten Leemhuis)
+- redhat/configs: disable RZ/V2N in automotive (Eric Chanudet)
+- redhat/configs: Move RZ/G3E config to automotive (Eric Chanudet)
+- redhat: add more namespace selftests to kernel-modules-internal package (Joel Savitz) [RHEL-94503]
+- redhat/configs: Enable CONFIG_PCIE_TPH (Ivan Vecera)
+- spec: fix spec warning for /usr/include/ynl (Jan Stancek)
+- redhat/configs: Move CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE to powerpc (Viktor Malik)
+- Fix up powerpc mismatch (Justin M. Forbes)
+- Fix another mismatch for 6.16 (Justin M. Forbes)
+- Fix up a mismatch for Fedora aarch64 (Justin M. Forbes)
+- Fix up mismatches for RHEL s390 zfpcdump (Justin M. Forbes)
+- More mismatch fixes for 6.16 (Justin M. Forbes)
+- Turn CROS_EC_PROTO to m for Fedora to avoid mismatch (Justin M. Forbes)
+- Reset changelog for 6.16 cycle (Justin M. Forbes)
+- Fix up CRYPTO_SHA256 configs for mismatch (Justin M. Forbes)
+- Reset RHEL_RELEASE for the 6.16 cycle (Justin M. Forbes)
+- fedora: add 'fedora' SBAT suffix for UKI addons (Li Tian)
+- redhat: add downstream SBAT for UKI addons (Emanuele Giuseppe Esposito)
+- uki_addons: provide custom SBAT as input parameter (Emanuele Giuseppe Esposito)
+- uki_addons: remove completely sbat/sbat.conf (Emanuele Giuseppe Esposito)
+- Consolidate configs to common for 6.15 (Justin M. Forbes)
+- redhat/configs: automotive: enable MHI_BUS_EP (Eric Chanudet)
+- Fix PHYSICAL_ALIGN for x86 Fedora (Justin M. Forbes)
+- Switch ZSWAP_ZPOOL_DEFAULT to ZSMALLOC as ZBUD has been removed (Justin M. Forbes)
+- redhat: configs: rhel: Enable CX231XX drivers (Kate Hsuan)
+- configs: add redhat/configs/common/generic/CONFIG_OBJTOOL_WERROR (Ryan Sullivan) [RHEL-85301]
+- redhat: make ENABLE_WERROR also enable OBJTOOL_WERROR (Ryan Sullivan) [RHEL-85301]
+- redhat/configs: Enable CONFIG_X86_POSTED_MSI (Jerry Snitselaar)
+- redhat/configs: remove CRC16 config files (Scott Weaver)
+- Revert CONFIG_GENKSYMS in pending for x86 (Justin M. Forbes)
+- Flip GENKSYMS for RHEL (Justin M. Forbes)
+- Move MITIGATION_ITS to the x86 directory (Justin M. Forbes)
+- Set MITIGATION_ITS for Fedora (Justin M. Forbes)
+- Fedora: arm: Updates for QCom devices (Souradeep Chowdhury)
+- redhat/configs: Explicitly disable CONFIG_VIRTIO_MEM on powerpc in RHEL (Thomas Huth)
+- redhat/configs: Consolidate the CONFIG_AP_DEBUG config switch (Thomas Huth)
+- Set Fedora configs for 6.15 (Justin M. Forbes)
+- Shorten the uname for git snapshots (Justin M. Forbes)
+- nvme: explicitly enable the nvme keyring (Maurizio Lombardi)
+- Enable the gs_usb CAN bus driver in RHEL (Radu Rendec)
+- Stop disabling some modules needed to run on Azure (Pierre-Yves Chibon)
+- redhat/configs: enable ACPI_DEBUG on non-debug kernels (Mark Langsdorf)
+- specfile: add with_toolsonly variable to build only tools packages (Clark Williams)
+- redhat/configs: Enable CONFIG_TYPEC_TBT_ALTMODE in RHEL (Desnes Nunes) [RHEL-78931]
+- Turn on ACPI_DEBUG for Fedora (Justin M. Forbes)
+- redhat: fix kernel-rt-kvm package removal for Fedora (Thorsten Leemhuis)
+- redhat/configs: aarch64: Enable Apple touchbar display driver for Fedora (Neal Gompa)
+- redhat: remove kernel-rt-kvm package (Clark Williams)
+- redhat: introduce modules-extra-matched meta package (Jan Stancek)
+- Fix up some Netfilter configs for Fedora (Justin M. Forbes)
+- Turn NF_CT_NETLINK_TIMEOUT for Fedora (Justin M. Forbes)
+- Turn on NF_CONNTRACK_TIMEOUT for Fedora (Justin M. Forbes)
+- redhat/configs: Adjust CONFIG_TUNE for s390x (Mete Durlu)
+- redhat/spec: fix selftests dependencies (Gregory Bell) [RHEL-88228]
+- redhat: add namespace selftests to kernel-modules-internal package (Joel Savitz) [RHEL-88635]
+- Turn off CONFIG_PCI_REALLOC_ENABLE_AUTO for Fedora (Justin M. Forbes)
+- gitlab-ci: enable pipelines for rt-64k (Clark Williams)
+- rt-64k: Enable building 64k page-size RT kernel (Clark Williams)
+- redhat: drop Y issues from changelog (Jan Stancek)
+- redhat/configs: Update the CONFIG_KERNEL_IMAGE_BASE kernel config option (Thomas Huth)
+- redhat/configs: Remove the obsolete CONFIG_ZCRYPT_DEBUG switches (Thomas Huth)
+- redhat/configs: Consolidate the CONFIG_AP switch (Thomas Huth)
+- fedora: updates for 6.15 (Peter Robinson)
+- redhat/configs: Disable CONFIG_COMPAT option on s390 (Mete Durlu) [RHEL-24047]
+- uki: Add weak dependency on 'uki-direct' (Vitaly Kuznetsov)
+- redhat/kernel.spec: fix duplicate packaging of ynl headers (Jan Stancek)
+- Enable FunctionFS on aarch64 + x86 (Sam Day)
+- Turn on USB Gadget for Fedora x86 (Justin M. Forbes)
+- redhat: enable drm panic screen with a QR code (Scott Weaver)
+- redhat: enable Rust code in ELN (Scott Weaver)
+- redhat: strip leading '(' in dist-get-buildreqs (Jan Stancek)
+- Fix up CONFIG_CRC_ITU_T mismatch (Scott Weaver)
+- Fix up CONFIG_CRC16 mismatch (Scott Weaver)
+- redhat: remove kernel-ipaclones-internal package (Joe Lawrence)
+- redhat/kernel.spec.template: add net packetdrill selftests (Hangbin Liu)
+- redhat/kernel.spec.template: Build rtla with BPF sample collection (Tomas Glozar)
+- redhat/configs: automotive: Enable CONFIG_BOOTPARAM_HUNG_TASK_PANIC config (Dorinda Bassey)
+- samples/bpf: fix build (Gregory Bell)
+- redhat: create 'systemd-volatile-overlay' addon for UKI (Emanuele Giuseppe Esposito)
+- fedora: arm64: move some TI drivers to modular (Peter Robinson)
+- fedora: minor cleanups for 6.14 (Peter Robinson)
+- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Michal Schmidt)
+- redhat: bump RHEL_MAJOR (Jan Stancek)
+- redhat/configs: enable CONFIG_AMD_3D_VCACHE for x86 on RHEL (David Arcari)
+- Switch ZSWAP_ZPOOL_DEFAULT to ZSMALLOC as ZBUD has been removed (Justin M. Forbes)
+- redhat/kernel.spec: list python3-wheel explicitly for Fedora<42 (Jan Stancek)
+- handle man-page for rv-mon-sched in redhat/kernel.spec.template (Thorsten Leemhuis)
+- redhat: find-debuginfo workaround is no longer needed on F42 (Jan Stancek)
+- redhat/kernel.spec: use target versions of tools for debugedit and gdb-add-index (Jan Stancek)
+- redhat: make ENABLE_WERROR enable also KVM_WERROR (Jan Stancek)
+- kernel.spec.template: cpupower: adjust lib versioning (Thorsten Leemhuis)
+- redhat/configs: automotive: builtin virtio-mmio (Eric Chanudet)
+- Fix up mismatches in the 6.15 merge window (Scott Weaver)
+- Reset log for 6.15 cycle (Justin M. Forbes)
+- Reset RHEL_RELEASE for 6.15 cycle (Justin M. Forbes)
+- arm64: cleanup and de-dupe erratum (Peter Robinson)
+- arm64: cleanup and de-dupe configs (Peter Robinson)
+- cleanup: x86: cleanup some x86_32 leftovers (Peter Robinson)
+- all: cleanup CAN_ROCKCHIP_CANFD (Peter Robinson)
+- aarch64: Options required for UEFI HTTP boot on SystemReady-DT (Peter Robinson)
+- common: Move ZONE_DEVICE to generic (Peter Robinson)
+- common: Cleanup BTT (Peter Robinson)
+- cleanup: move DEV_DAX_PMEM to common/generic (Peter Robinson)
+- generic: cleanup the NVDIMM options (Peter Robinson)
+- cleanup: move OF_PMEM to common/generic (Peter Robinson)
+- cleanup: Remove DEV_DAX_PMEM_COMPAT option (Peter Robinson)
+- Consolidate configs into common for 6.14 (Justin M. Forbes)
+- Turn VIRTIO_BLK and VIRTIO_CONSOLE inline for Fedora (Justin M. Forbes)
+- redhat: configs: fedora: enable CONFIG_I2C_HID_OF=m on x86 (Hans de Goede)
+- redhat: move dist-relase-check behind new variable (Jan Stancek)
+- Set last minute config item for 6.14 for Fedora (Justin M. Forbes)
+- redhat/configs: automotive: Disable CONFIG_USERFAULTFD config (Dorinda Bassey)
+- redhat/configs: automotive: Disable VLAN_8021Q_GVRP config (Dorinda Bassey)
+- redhat/configs: automotive: Disable DCB and MPLS configs (Dorinda Bassey)
+- redhat/configs: automotive: Disable IEEE 802.15.4 config (Dorinda Bassey)
+- redhat/configs: automotive: Disable various network classification features (Dorinda Bassey)
+- redhat/configs: automotive: Disable the SMBFS file system (Dorinda Bassey)
+- redhat/configs: automotive: Disable Myricom network adapters (Dorinda Bassey)
+- redhat/configs: automotive: Disable USB4 Ethernet config (Dorinda Bassey)
+- redhat/configs: automotive: Disable the Mellanox SwitchX core driver (Dorinda Bassey)
+- redhat/configs: automotive: Disable network storage related protocols (Dorinda Bassey)
+- redhat/configs: automotive: Disable lightweight tunneling with BPF (Dorinda Bassey)
+- redhat/configs: automotive: Disable RADOS block device configs (Dorinda Bassey)
+- redhat/configs: automotive: Disable switchdev driver framework (Dorinda Bassey)
+- redhat/configs: automotive: Disable network packet generator (Dorinda Bassey)
+- redhat/configs: automotive: Disable NET_CLS_ACT and PSAMPLE configs (Dorinda Bassey)
+- redhat/configs: automotive: Disable BPF STREAM_PARSER (Dorinda Bassey)
+- redhat/configs: automotive: Disable Open vSwitch and NET_NSH configs (Dorinda Bassey)
+- redhat/configs: automotive: Disable IP Virtual Server configs (Dorinda Bassey)
+- redhat/configs: automotive: Disable IP set support (Dorinda Bassey)
+- redhat/configs: automotive: Disable NetLabel subsystem support (Dorinda Bassey)
+- redhat/configs: automotive: Disable TLS Protocol (Dorinda Bassey)
+- redhat/configs: automotive: Disable Advanced TCP Congestion Control (Dorinda Bassey)
+- redhat/configs: automotive: Disable XDP Socket Protocol (Dorinda Bassey)
+- redhat/configs: delete CONFIG_USB_ONBOARD_HUB and use CONFIG_USB_ONBOARD_DEV instead (Desnes Nunes)
+- redhat: check release commit is present for dist-{release-tag,git} (Jan Stancek)
+- Re-enable vxcan (CONFIG_CAN_VXCAN) for automotive (Radu Rendec)
+- Turn on CONFIG_PACKING for RHEL (Justin M. Forbes)
+- main.c: fix initcall blacklisted (Tomas Henzl)
+- redhat/configs: automotive: Disable IPsec Protocols and XFRM (Dorinda Bassey)
+- redhat: Update CONFIG_STRICT_DEVMEM settings (enable it on s390x) (Thomas Huth)
+- redhat: Consolidate CONFIG_VIRTIO_MEM and enable it also for s390x (Thomas Huth)
+- Remove no longer necessary pending entry (Justin M. Forbes)
+- Fedora configs for 6.14 (Justin M. Forbes)
+- redhat/configs: Disable rest of the CONFIG_PKEY_ options on s390 (Mete Durlu) [RHEL-78341]
+- Fix up some debug module loading issues due to BTF mismatch (Justin M. Forbes)
+- Revert "redhat/configs: automotive: disable CONFIG_AIO" (Davide Caratti)
+- redhat/configs: automotive disable ARCH_TEGRA_241_SOC (Eric Chanudet)
+- rhel_files: ensure all qdiscs are in modules-core (Davide Caratti) [RHEL-79818]
+- redhat/configs: automotive: Disable MRP/8021Q_MVRP Protocol (Dorinda Bassey)
+- redhat/configs: enable CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA (Jerry Snitselaar)
+- redhat/configs: enable CONFIG_ARM_SMMU_V3_IOMMUFD (Jerry Snitselaar)
+- redhat: configs: remove CONFIG_DMA_API_DEBUG_SG (Kate Hsuan)
+- kernel.spec: add missing tools-libs on s390x (Jan Stancek)
+- arch/x86/kernel/setup.c: fix rh_check_supported (Tomas Henzl)
+- kernel.spec: add minimum version of setuptools for ynl (Jan Stancek)
+- Revert "Merge: redhat/configs: automotive: Disable POSIX_MQUEUE config (Dorinda Bassey)
+- redhat/configs: enable in kernel compression/decompression of compressed modules (Herton R. Krzesinski)
+- redhat: change compression flags for xz (Herton R. Krzesinski)
+- redhat/configs: automotive: Turn off ACPI Processor package for aarch64 (Enric Balletbo i Serra)
+- redhat/configs: automotive: Disable L2TP Protocol (Dorinda Bassey)
+- redhat/configs: automotive: Disable TIPC Protocol (Dorinda Bassey)
+- redhat/configs: Enable Mediatek Bluetooth USB drivers (Bastien Nocera)
+- redhat/configs: Disable CONFIG_PKEY for zfcpdump configs (Mete Durlu) [RHEL-78341]
+- redhat/configs: automotive: disable VFIO_PLATFORM (Eric Chanudet)
+- Revert "Merge: redhat/configs: automotive: Disable SYSIPC config" (Dorinda Bassey)
+- redhat/configs: Enable CONFIG_KASAN_INLINE for RT debug kernel (Waiman Long)
+- redhat/configs: Move CONFIG_PROVE_RAW_LOCK_NESTING to common/debug (Waiman Long)
+- redhat/configs: Move all the lock debugging Kconfig's to common (Waiman Long)
+- redhat/configs: Enable CONFIG_BLK_CGROUP_PUNT_BIO for RHEL (Neal Gompa) [RHEL-79711]
+- fedora: pending: drop USB_ONBOARD_DEV_USB5744 (Peter Robinson)
+- efi,lockdown: fix kernel lockdown on Secure Boot (Ondrej Mosnacek) {CVE-2025-1272}
+- fedora: Update vbox drivers (Peter Robinson)
+- Drop the s390x CONFIG_REGMAP from RHEL pending as upstream removed the dep (Justin M. Forbes)
+- fedora: arm64: enable RT5616 codec (Marcin Juszkiewicz)
+- redhat/configs: automotive: Disable CONFIG_FS_DAX config (Dorinda Bassey)
+- config: update CONFIG_LSM to match upstream (Ryan Sullivan)
+- redhat: configs: enable CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER for RHEL (David Arcari)
+- redhat/Makefile: Add help text for target dist-dump-variables (Eder Zulian)
+- redhat: update self-test-data for new default RHJOBS value (Patrick Talbert)
+- set a more reasonable default for number of jobs (Thorsten Leemhuis)
+- redhat: automotive: define CONFIG_RH_AUTOMOTIVE (Scott Weaver)
+- redhat/configs: disable CONFIG_TCP_AO on RHEL (Sabrina Dubroca)
+- redhat/configs: amend USB_ONBOARD_DEV_USB5744 (Eric Chanudet)
+- redhat/configs: automotive: Disable SYSIPC and MQUEUE configs (Dorinda Bassey)
+- redhat: kernel.spec: add ynl to kernel-tools (Jan Stancek)
+- fedora: enable USB device USB5744 (Peter Robinson)
+- rhel: enable FW_CACHE on RHEL (Dave Airlie)
+- redhat/configs: automotive: Disable the SCTP Protocol (Dorinda Bassey)
+- redhat: generalize rule for kunit and test kmod placement (Jan Stancek)
+- Move CONFIG_PCI_REALLOC_ENABLE_AUTO out of common as they have diverged (Justin M. Forbes)
+- fedora: arm64: enable Silicon Mitus SM5502 Extcon driver (Sam Day)
+- fedora: arm64: enable Richtek RT5033 MFD+charger+regulator modules (Sam Day)
+- configs/fedora: Enable CONFIG_PCI_REALLOC_ENABLE_AUTO (Yanko Kaneti)
+- Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (Jocelyn Falempe)
+- Enable Intel Xe Graphics (Mika Penttilä)
+- Turn on CONFIG_DRM_ACCEL_AMDXDNA for Fedora (Justin M. Forbes)
+- redhat/configs: disable CONFIG_AF_UNIX_OOB on RHEL (Marcelo Ricardo Leitner)
+- redhat/configs: automotive: Disable wireless network and it's dependencies (Dorinda Bassey)
+- redhat/kernel.spec: work around find-debuginfo aborting cross builds (Jan Stancek)
+- redhat/configs: Default to batched invalidation on s390 (Jerry Snitselaar)
+- redhat/configs: automotive: set CONFIG_TIMEOUT_PANIC (Enric Balletbo i Serra)
+- drop %%{_datadir}/perf-core/* from kernel.spec (Thorsten Leemhuis)
+- put new misc_minor_kunit in modules-internal (Thorsten Leemhuis)
+- put new cirrus kunit tests in modules-internal (Thorsten Leemhuis)
+- redhat/configs: enable iBFT parsing on aarch64 (Chris Leech)
+- redhat: kernel.spec: fix build with merged-sbin (Zbigniew Jędrzejewski-Szmek)
+- Fix up CONFIG_REGMAP mismatch (Scott Weaver)
+- redhat: fix modules.order target (Scott Weaver)
+- Fix up CONFIG_CRC_T10DIF_IMPL_GENERIC mismatch (Justin M. Forbes)
+- Fix mismatches for 6.13 merge window (Justin M. Forbes)
+- Reset rhelver and trim changelog for 6.14 (Justin M. Forbes)
+- Turn off CONFIG_ARM_TIMER_SP804 for automotive (Justin M. Forbes)
+- Set ARM_TIMER_SP804 (Justin M. Forbes)
+- redhat/configs: enable addtional sa8775 related Kconfigs (Brian Masney)
+- redhat: Add rustfmt to deps (Peter Robinson)
+- redhat/configs: Disable deprecated CONFIG_LCS option on s390 (Mete Durlu) [RHEL-68296]
+- redhat/configs: make modular/disable NFS support (Dorinda Bassey)
+- redhat/configs: Disable unsafe queuing disciplines (Dorinda Bassey)
+- configs: move pending RT configs into rhel/rt/generic (Clark Williams)
+- Turn on PROVE_RAW_LOCK_NESTING for RHEL debug builds (Justin M. Forbes)
+- redhat/Makefile: Fix long dist-full-help execution time (Prarit Bhargava)
+- redhat/self-test: Update data to add HELP_TYPES variable (Prarit Bhargava)
+- redhat/Makefile: Add new dist-help functionality (Prarit Bhargava)
+- Makefile: Do not output LOCALVERSION message for help commands (Prarit Bhargava)
+- Fedora 6.13 configs part 2 (Justin M. Forbes)
+- Fedora 6.13 configs part 1 (Justin M. Forbes)
+- redhat/configs: enable CONFIG_VFAT_FS as a module (Dorinda Bassey)
+- redhat: create 'debug' addon for UKI (Li Tian)
+- kernel.spec: Build cpupower on riscv64 (Yanko Kaneti)
+- RHEL: Set correct config option for CRYPTO_HMAC_S390 (Mete Durlu) [RHEL-24137]
+- redhat/kernel.spec: add iputils to the requires list for selftests-internal (Brian Masney)
+- redhat/kernel.spec.template: Require kernel-tools-libs in rtla (Tomas Glozar)
+- redhat: make kernel-debug-uki-virt installable without kernel-debug-core (Vitaly Kuznetsov)
+- redhat/configs: enable CONFIG_USB_XHCI_PCI_RENESAS on RHEL (Desnes Nunes) [RHEL-72093]
+- redhat/configs: Re-enable ZRAM backends and unify configuration (Neal Gompa)
+- redhat/configs: automotive: disable CONFIG_AIO (Davide Caratti)
+- redhat/configs: Re-enable CONFIG_INFINIBAND_VMWARE_PVRDMA (Vitaly Kuznetsov)
+- redhat/configs: PREEMPT_NOTIFIERS does not need to be explicitly listed (Michal Schmidt)
+- redhat/configs: delete all CONFIG_PREEMPT_*BEHAVIOUR (Michal Schmidt)
+- redhat/configs: automotive: disable CONFIG_NET_DROP_MONITOR (Davide Caratti)
+- redhat/configs: Enable the CS42L84 driver on Fedora (Neal Gompa)
+- generic: Remove and cleanups from staging 6.13 (Peter Robinson)
+- redhat: configs: Clean up DVB settings in RHEL (Kate Hsuan)
+- Move CONFIG_ARCH_TEGRA_241_SOC config/common so that it is enabled for RHEL as well as Fedora. Get rid of uneeded CONFIG_TEGRA241_CMDQV in configs/fedora while we're at it. (Mark Salter)
+- fedora: arm64: Enable the rockchip HDMI QP support (Peter Robinson)
+- redhat: configs: rhel: aarch64: Support NV Jetson MIPI camera (Kate Hsuan)
+- gitlab-ci: disable clang CI pipelines (Scott Weaver)
+- redhat/configs: Remove obsolete arch64/64k/CONFIG_FORCE_MAX_ZONEORDER (Waiman Long)
+- Fix up QCOM_EMAC config for Fedora (Justin M. Forbes)
+- redhat/configs: automotive: disable CONFIG_IO_URING (Ian Mullins)
+- redhat/kernel.spec.template: Link rtla against in-tree libcpupower (Tomas Glozar)
+- redhat: configs: enable INTEL_PLR_TPMI for RHEL (David Arcari)
+- configs: Enable CONFIG_NETKIT for RHEL (Toke Høiland-Jørgensen)
+- redhat: fix build/install targets in netfilter kselftest (Davide Caratti)
+- RHEL: disable the btt driver (Jeff Moyer)
+- redhat/configs: default to PREEMPT_LAZY on x86, riscv (Michal Schmidt)
+- redhat/configs: New config CONFIG_PREEMPT_LAZY (Michal Schmidt)
+- crypto: sig - Disable signing (Herbert Xu)
+- redhat/configs: enable SERIAL_AMBA_PL011 for automotive (Radu Rendec)
+- c10s: disable tests in CKI pipelines (Michael Hofmann)
+- redhat: Drop bpftool from kernel spec (Viktor Malik)
+- Better fixes for the fedora mismatch (Justin M. Forbes)
+- Mismatch fix ups for Fedora (Justin M. Forbes)
+- redhat/configs: Enable Intel Bluetooth PCIE drivers (Bastien Nocera)
+- One more pending to fix a mismatch (Justin M. Forbes)
+- redhat: fix RT PREEMPT configs for Fedora and RHEL (Clark Williams)
+- Pending fixes to avoid mismatch for 6.13 (Justin M. Forbes)
+- Reset changelog for 6.13 (Justin M. Forbes)
+- Reset RHEL_RELEASE for 6.13 (Justin M. Forbes)
+- redhat: Move perf_dlfilter.h from libperf-devel to perf (Akihiko Odaki)
+- Consolidate configs to common for 6.12 (Justin M. Forbes)
+- redhat/configs: cleanup CONFIG_DEV_DAX (David Hildenbrand)
+- redhat/configs: cleanup CONFIG_TRANSPARENT_HUGEPAGE_MADVISE for Fedora (David Hildenbrand)
+- redhat/configs: cleanup CONFIG_TRANSPARENT_HUGEPAGE (David Hildenbrand)
+- redhat/configs: enable CONFIG_TRANSPARENT_HUGEPAGE on s390x in Fedora (David Hildenbrand)
+- redhat/configs: automotive: Enable j784s4evm am3359 tscadc configs (Joel Slebodnick)
+- redhat/configs: delete renamed CONFIG_MLX5_EN_MACSEC (Michal Schmidt)
+- rhel: disable DELL_RBU and cleanup related deps (Peter Robinson)
+- gitlab-ci: Add CKI_RETRIGGER_PIPELINE (Tales da Aparecida)
+- redhat: configs: disable the qla4xxx iSCSI driver (Chris Leech) [RHEL-1242]
+- Remove duplicated CONFIGs between automotive and RHEL (Julio Faracco)
+- redhat: update self-test data for addition of automotive (Scott Weaver)
+- gitlab-ci: enable automotive pipeline (Scott Weaver)
+- automotive: move pending configs to automotive/generic (Scott Weaver)
+- redhat/configs: change Renesas eMMC driver and dependencies to built-in (Radu Rendec)
+- redhat/configs: automotive: Remove automotive specific override CONFIG_OMAP2PLUS_MBOX By removing this automotive-specific override, the configuration will default to the common configuration (CONFIG_OMAP2PLUS_MBOX=m), which enables the driver as a module. (Martin McConnell)
+- Config enablement of the Renesas R-Car S4 SoC (Radu Rendec) [RHEL-44306]
+- redhat/configs: automotive: Enable USB_CDNS3_TI for TI platforms (Andrew Halaney)
+- redhat/configs: automotive: Enable j784s4evm SPI configs (Joel Slebodnick)
+- redhat/configs: automotive: Enable TPS6594 MFD (Joel Slebodnick)
+- redhat/configs: automotive: stop overriding CRYPTO_ECDH (Andrew Halaney)
+- redhat/configs: automotive: Enable PCI_J721E (Andrew Halaney)
+- redhat/configs: change some TI platform drivers to built-in (Enric Balletbo i Serra)
+- redhat/configs: automotive: Enable TI j784s4evm display dependencies (Andrew Halaney)
+- redhat/configs: automotive: match ark configs to cs9 main-automotive (Shawn Doherty) [RHEL-35995]
+- redhat/configs: automotive: Enable TI's watchdog driver (Andrew Halaney)
+- redhat/configs: automotive: Enable TI's UFS controller (Andrew Halaney)
+- redhat/configs: automotive: Enable networking on the J784S4EVM (Andrew Halaney) [RHEL-29245]
+- Disable unsupported kernel variants for automotive (Don Zickus)
+- Disable CONFIG_RTW88_22BU (Don Zickus)
+- redhat: Delete CONFIG_EFI_ZBOOT to use the common CONFIG (Julio Faracco)
+- redhat: Update automotive SPEC file with new standards (Julio Faracco)
+- redhat: Disable WERROR for automotive temporarily (Julio Faracco)
+- redhat: Update spec file with automotive macros (Julio Faracco)
+- redhat: Add automotive CONFIGs (Julio Faracco)
+- Fedora configs for 6.12 (Justin M. Forbes)
+- redhat/configs: Add CONFIG_CRYPTO_HMAC_S390 config (Mete Durlu) [RHEL-50799]
+- redhat: configs: common: generic: Clean up EM28XX that are masked behind CONFIG_VIDEO_EM28XX (Kate Hsuan)
+- redhat/configs: Update powerpc NR_CPUS config (Mamatha Inamdar)
+- redhat: use stricter rule for kunit.ko (Jan Stancek)
+- filtermod: fix clk kunit test and kunit location (Nico Pache)
+- redhat/configs: enable xr_serial on rhel (Desnes Nunes)
+- redhat/configs: enable ATH12K for rhel (Jose Ignacio Tornos Martinez)
+- redhat: configs: rhel: generic: x86: Enable IPU6 based MIPI cameras (Kate Hsuan)
+- os-build: enable CONFIG_SCHED_CLASS_EXT for RHEL (Phil Auld)
+- Fedora 6.12 configs part 1 (Justin M. Forbes)
+- redhat: set new gcov configs (Jan Stancek)
+- Don't ignore gitkeep files for ark-infra (Don Zickus)
+- redhat/kernel.spec: don't clear entire libdir when building tools (Jan Stancek)
+- redhat/configs: enable usbip for rhel (Jose Ignacio Tornos Martinez)
+- redhat: create 'crashkernel=' addons for UKI (Vitaly Kuznetsov)
+- redhat: avoid superfluous quotes in UKI cmdline addones (Vitaly Kuznetsov)
+- fedora: arm: updates for 6.12 (Peter Robinson)
+- redhat/configs: add bootconfig to kernel-tools package (Brian Masney)
+- Enable CONFIG_SECURITY_LANDLOCK for RHEL (Zbigniew Jędrzejewski-Szmek) [RHEL-8810]
+- redhat: configs: Drop CONFIG_MEMSTICK_REALTEK_PCI config option (Desnes Nunes)
+- Update the RHEL_DIFFERENCES help string (Don Zickus)
+- Put build framework for RT kernel in place for Fedora (Clark Williams)
+- generic: enable RPMB for all configs that enable MMC (Peter Robinson)
+- fedora: riscv: Don't override MMC platform defaults (Peter Robinson)
+- common: only enable on MMC_DW_BLUEFIELD (Peter Robinson)
+- fedora: aarch64: Stop overriding CONFIG_MMC defaults (Peter Robinson)
+- commong: The KS7010 driver has been removed (Peter Robinson)
+- Trim Changelog for 6.12 (Justin M. Forbes)
+- Enable CONFIG_SECURITY_IPE for Fedora (Zbigniew Jędrzejewski-Szmek)
+- redhat: allow to override VERSION_ON_UPSTREAM from command line (Jan Stancek)
+- redhat: configs: Enable CONFIG_SECURITY_TOMOYO in Fedora kernels (Tetsuo Handa)
+- Revert "Merge branch 'enablement/gpio-expander' into 'os-build'" (Justin M. Forbes)
+- redhat: configs: decrease CONFIG_PCP_BATCH_SCALE_MAX (Rafael Aquini)
+- redhat/configs: Enable CONFIG_RCU_TRACE in Fedora/REHL kernels (Waiman Long)
+- fedora: distable RTL8192E wifi driver (Peter Robinson)
+- common: arm64: Fixup and cleanup some SCMI options (Peter Robinson)
+- common: Cleanup ARM_SCMI_TRANSPORT options (Peter Robinson)
+- configs: fedora/x86: Set CONFIG_CRYPTO_DEV_CCP_DD=y (Hans de Goede)
+- Turn on ZRAM_WRITEBACK for Fedora (Justin M. Forbes)
+- configs: rhel: Fix designware I2C controllers related config settings (Hans de Goede)
+- Enable CONFIG_DMA_NUMA_CMA for x86_64 and aarch64 (Chris von Recklinghausen)
+- new config in drivers/phy (Izabela Bakollari)
+- configs: fedora: Unset CONFIG_I2C_DESIGNWARE_CORE on s390x (Hans de Goede)
+- configs: fedora: Drop duplicate CONFIG_I2C_DESIGNWARE_CORE for x86_64 and aarch64 (Hans de Goede)
+- Enable DESIGNWARE_CORE for ppc as well (Justin M. Forbes)
+- Fix up I2C_DESIGNWARE_CORE config for Fedora (Justin M. Forbes)
+- configs for RT deps (Clark Williams)
+- CONFIG_OF_OVERLAY: enable for aarch64 and powerpc (Scott Weaver)
+- redhat: enable changes to build rt variants (Clark Williams)
+- redhat: clean up pending-rhel (Patrick Talbert)
+- Enable CONFIG_SCHED_CLASS_EXT for Fedora (Jose Fernandez)
+- redhat/configs: new config in arch/s390 (Izabela Bakollari)
+- redhat: ignore rpminspect runpath report on selftests/bpf/cpuv4/urandom_read (Viktor Malik)
+- [fedora] configs: add end of file newline to CONFIG_DMADEVICES_VDEBUG (Patrick Talbert)
+- unset CONFIG_DMADEVICES_VDEBUG (cmurf)
+- stop installing tools/build/Build, gone with ea974028a049f (Thorsten Leemhuis)
+- redhat/configs: Update LOCKDEP configs (Waiman Long)
+- uki-virt: Add i18n module (Vitaly Kuznetsov)
+- uki-virt: Drop DBUS support from initramfs (Vitaly Kuznetsov)
+- uki-virt: Drop redundant modules from dracut-virt.conf (Vitaly Kuznetsov)
+- uki-virt: Drop usrmount dracut module (Vitaly Kuznetsov)
+- redhat: new AMCC_QT2025_PHY config in drivers/net/phy (Patrick Talbert)
+- redhat: change schedule jobs image from cki-tools to builder-rawhide (Patrick Talbert)
+- Add CONFIG_SND_SOC_RT1320_SDW to pending-rhel for mismatch (Justin M. Forbes)
+- Turn on CONFIG_SND_SOC_RT1320_SDW in pending rhel (Justin M. Forbes)
+- configs: disable CONFIG_AMCC_QT2025_PHY in pending (Patrick Talbert)
+- fedora: turn on CONFIG_FDMA for powerpc (Patrick Talbert)
+- Turn on CONFIG_FDMA in pending for Fedora arm and riscv to avoid a mismatch (Justin M. Forbes)
+- Reset RHEL_RELEASE for 6.12 (Justin M. Forbes)
+- Consolidate configs into common for 6.11 kernels (Justin M. Forbes)
+- uki-virt: add systemd-cryptsetup module (Vitaly Kuznetsov)
+- redhat/docs: fix command to install missing build dependencies (Davide Cavalca)
+- spec: Respect rpmbuild --without debuginfo (Orgad Shaneh)
+- fedora/configs: enable GPIO expander drivers (Rupinderjit Singh)
+- redhat/configs: Switch to the Rust implementation of AX88796B_PHY driver for Fedora (Neal Gompa)
+- redhat: Turn on support for Rust code in Fedora (Neal Gompa)
+- Turn off RUST for risc-v (Justin M. Forbes)
+- gitlab-ci: allow failure of clang LTO pipelines (Michael Hofmann)
+- redhat/configs: Consolidate the CONFIG_KVM_BOOK3S_HV_P*_TIMING switches (Thomas Huth)
+- redhat/configs: Consolidate the CONFIG_KVM_SW_PROTECTED_VM switch (Thomas Huth)
+- redhat/configs: Consolidate the CONFIG_KVM_HYPERV switch (Thomas Huth)
+- redhat/configs: Consolidate the CONFIG_KVM_AMD_SEV switch (Thomas Huth)
+- Cleanup some riscv CONFIG locations (Justin M. Forbes)
+- Fix up pending riscv Fedora configs post merge (Justin M. Forbes)
+- fedora/configs: Enable SCMI configuration (Rupinderjit Singh)
+- Remove S390 special config for PHYLIB (Justin M. Forbes)
+- Disable ELN for riscv64 (Isaiah Stapleton)
+- redhat: add checks to ensure only building riscv64 on fedora (Isaiah Stapleton)
+- redhat: Add missing riscv fedora configs (Isaiah Stapleton)
+- Add riscv64 to the CI pipelines (Isaiah Stapleton)
+- redhat: Regenerate dist-self-test-data for riscv64 (Isaiah Stapleton)
+- redhat: Add riscv config changes for fedora (David Abdurachmanov)
+- redhat: Add support for riscv (David Abdurachmanov)
+- redhat: Do not include UKI addons twice (Vitaly Kuznetsov)
+- redhat: update gating.yml (Michael Hofmann)
+- Remove CONFIG_FSCACHE_DEBUG as it has been renamed (Justin M. Forbes)
+- Set Fedora configs for 6.11 (Justin M. Forbes)
+- redhat/configs: Microchip lan743x driver (Izabela Bakollari)
+- redhat: include resolve_btfids in kernel-devel (Jan Stancek)
+- redhat: workaround CKI cross compilation for scripts (Jan Stancek)
+- spec: fix "unexpected argument to non-parametric macro" warnings (Jan Stancek)
+- Add weakdep support to the kernel spec (Justin M. Forbes)
+- redhat: configs: disable PF_KEY in RHEL (Sabrina Dubroca)
+- crypto: akcipher - Disable signing and decryption (Vladis Dronov) [RHEL-54183] {CVE-2023-6240}
+- crypto: dh - implement FIPS PCT (Vladis Dronov) [RHEL-54183]
+- crypto: ecdh - disallow plain "ecdh" usage in FIPS mode (Vladis Dronov) [RHEL-54183]
+- crypto: seqiv - flag instantiations as FIPS compliant (Vladis Dronov) [RHEL-54183]
+- [kernel] bpf: set default value for bpf_jit_harden (Artem Savkov) [RHEL-51896]
+- fedora: disable CONFIG_DRM_WERROR (Patrick Talbert)
+- redhat/configs: Disable dlm in rhel configs (Andrew Price)
+- rhel: aarch64: enable required PSCI configs (Peter Robinson)
+- fedora: Enable AF8133J Magnetometer driver (Peter Robinson)
+- redhat: spec: add cachestat kselftest (Eric Chanudet)
+- redhat: hmac sign the UKI for FIPS (Vitaly Kuznetsov)
+- not upstream: Disable vdso getrandom when FIPS is enabled (Herbert Xu)
+- kernel: config: enable erofs lzma compression (Ian Kent)
+- fedora: disable RTL8192CU in Fedora (Peter Robinson)
+- redhat: Fix the ownership of /lib/modules/<kversion> directory (Vitaly Kuznetsov)
+- new configs in drivers/phy (Izabela Bakollari)
+- Add support to rh_waived cmdline boot parameter (Ricardo Robaina) [RHEL-26170]
+- redhat/configs: Disable gfs2 in rhel configs (Andrew Price)
+- redhat/uki_addons/virt: add common FIPS addon (Emanuele Giuseppe Esposito)
+- redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons (Emanuele Giuseppe Esposito)
+- rh_flags: fix failed when register_sysctl_sz rh_flags_table to kernel (Ricardo Robaina) [RHEL-52629]
+- redhat/dracut-virt.conf: add systemd-veritysetup module (Emanuele Giuseppe Esposito)
+- redhat/configs: enable CONFIG_LOCK_STAT on the debug kernels for aarch64 (Brian Masney)
+- redhat/configs: enable CONFIG_KEYBOARD_GPIO_POLLED for RHEL on aarch64 (Luiz Capitulino)
+- redhat/configs: fedora: Enable new Qualcomm configs (Andrew Halaney)
+- redhat/configs/fedora: set CONFIG_CRYPTO_CURVE25519_PPC64 (Dan Horák)
+- fedora: Updates for 6.11 merge (Peter Robinson)
+- fedora: enable new mipi sensors and devices (Peter Robinson)
+- arm64: enable CRYPTO_DEV_TEGRA on RHEL (Peter Robinson)
+- redhat/kernel.spec: fix file listed twice warning for "kernel" subdir (Jan Stancek)
+- redhat/configs: Double MAX_LOCKDEP_ENTRIES for RT debug kernels (Waiman Long) [RHEL-43425]
+- Support the first day after a rebase (Don Zickus)
+- Support 2 digit versions properly (Don Zickus)
+- Automation cleanups for rebasing rt-devel and automotive-devel (Don Zickus)
+- fedora: set CONFIG_REGULATOR_RZG2L_VBCTRL as a module for arm64 (Patrick Talbert)
+- gitlab-ci: restore bot pipeline behavior (Michael Hofmann)
+- redhat/kernel.spec: drop extra right curly bracket in kernel_kvm_package (Jan Stancek)
+- redhat/configs: enable gpio_keys driver for RHEL on aarch64 (Luiz Capitulino)
+- Move NET_VENDOR_MICROCHIP from common to rhel (Justin M. Forbes)
+- redhat/configs: enable some RTCs for RHEL on aarch64 (Luiz Capitulino)
+- redhat/configs: enable some regulators for RHEL (Luiz Capitulino)
+- redhat/config: disable CXL and CXLFLASH drivers (Dan Horák)
+- Fix up config mismatches in pending (Justin M. Forbes)
+- redhat/configs: Enable watchdog devices modelled by qemu (Richard W.M. Jones) [RHEL-40937]
+- rhel: cleanup unused media tuner configs (Peter Robinson)
+- all: cleanup MEDIA_CONTROLLER options (Peter Robinson)
+- redhat: kernel.spec: add s390x to livepatching kselftest builds (Joe Lawrence)
+- Flip CONFIG_DIMLIB back to inline (Justin M. Forbes)
+- Add vfio/nvgrace-gpu driver CONFIG to RHEL-9.5 ARM64 (Donald Dutile)
+- Enable CONFIG_RTC_DRV_TEGRA for RHEL (Luiz Capitulino)
+- redhat: rh_flags: declare proper static methods when !CONFIG_RHEL_DIFFERENCES (Rafael Aquini)
+- redhat: configs: enable CONFIG_TMPFS_QUOTA for both Fedora and RHEL (Rafael Aquini)
+- Fix up mismatches in the 6.11 merge window. (Justin M. Forbes)
+- Reset Changelog after rebase (Justin M. Forbes)
+- Reset RHEL_RELEASE for the 6.11 cycle (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_VMWARE_VMCI/CONFIG_VMWARE_VMCI_VSOCKETS for RHEL (Vitaly Kuznetsov)
+- Consolidate configs to common for 6.10 (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_PTP_1588_CLOCK_MOCK in kernel-modules-internal (Davide Caratti)
+- fedora: enabled XE GPU drivers on all arches (Peter Robinson)
+- Flip SND_SOC_CS35L56_SPI from off to module for RHEL (Justin M. Forbes)
+- Flip DIMLIB from built-in to module for RHEL (Justin M. Forbes)
+- Also remove the zfcpdump BASE_SMALL config (Justin M. Forbes)
+- redhat: Add cgroup kselftests to kernel-selftests-internal (Waiman Long) [RHEL-43556]
+- Revert "redhat/configs: Disable CONFIG_INFINIBAND_HFI1 and CONFIG_INFINIBAND_RDMAVT" (Kamal Heib)
+- Remove new for GITLAB_TOKEN (Don Zickus)
+- Set Fedora configs for 6.10 (Justin M. Forbes)
+- Fedora: minor driver updates (Peter Robinson)
+- redhat/configs: Remove obsolete x86 CPU mitigations config files (Waiman Long)
+- redhat/configs: increase CONFIG_DEFAULT_MMAP_MIN_ADDR from 32K to 64K for aarch64 (Brian Masney)
+- redhat/configs: Re-enable CONFIG_KEXEC for Fedora (Philipp Rudo)
+- disable LR_WPAN for RHEL10 (Chris von Recklinghausen) [RHEL-40251]
+- Turn on USB_SERIAL_F81232 for Fedora (Justin M. Forbes)
+- redhat/scripts/filtermods.py: show all parent/child kmods in report (Jan Stancek)
+- redhat/kernel.spec: capture filtermods.py return code (Jan Stancek)
+- redhat/kernel.spec: fix run of mod-denylist (Jan Stancek)
+- gitlab-ci: remove unused RHMAINTAINERS variable (Michael Hofmann)
+- gitlab-ci: use environments for jobs that need access to push/gitlab secrets (Michael Hofmann)
+- gitlab-ci: default to os-build for all maintenance jobs (Michael Hofmann)
+- gitlab-ci: use the common git repo setup cki-gating as well (Michael Hofmann)
+- gitlab-ci: help maintenance jobs to cope with missing private key (Michael Hofmann)
+- gitlab-ci: use a common git repo setup for all maintenance jobs (Michael Hofmann)
+- gitlab-ci: move repo setup script into script template holder (Michael Hofmann)
+- gitlab-ci: move maintenance job DIST variable into common template (Michael Hofmann)
+- gitlab-ci: move maintenance job rules into common template (Michael Hofmann)
+- gitlab-ci: move maintenance job retry field into common template (Michael Hofmann)
+- gitlab-ci: provide common non-secret schedule trigger variables (Michael Hofmann)
+- gitlab-ci: rename .scheduled_setup to .git_setup (Michael Hofmann)
+- gitlab-ci: move script snippets into separate template (Michael Hofmann)
+- gitlab-ci: rename maintenance jobs (Michael Hofmann)
+- gitlab-ci: introduce job template for maintenance jobs (Michael Hofmann)
+- Turn on KASAN_HW_TAGS for Fedora aarch64 debug kernels (Justin M. Forbes)
+- redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela)
+- redhat/kernel.spec: fix attributes of symvers file (Jan Stancek)
+- redhat: add filtermods rule for iommu tests (Jan Stancek)
+- fedora: arm: Enable basic support for S32G-VNP-RDB3 board (Enric Balletbo i Serra)
+- redhat: make bnx2xx drivers unmaintained in rhel-10 (John Meneghini) [RHEL-36646 RHEL-41231]
+- redhat/configs: Disable CONFIG_NFP (Kamal Heib) [RHEL-36647]
+- Enable CONFIG_PWRSEQ_{SIMPLIE,EMMC} on aarch64 (Charles Mirabile)
+- Fix SERIAL_SC16IS7XX configs for Fedora (Justin M. Forbes)
+- Enable ALSA (CONFIG_SND) on aarch64 (Charles Mirabile) [RHEL-40411]
+- redhat: Remove DIST_BRANCH variable (Eder Zulian)
+- gitlab-ci: merge ark-latest before tagging cki-gating (Michael Hofmann)
+- gitlab-ci: do not merge ark-latest for gating pipelines for Rawhide (Michael Hofmann)
+- disable CONFIG_KVM_INTEL_PROVE_VE (Paolo Bonzini)
+- redhat: remove the merge subtrees script (Derek Barbosa)
+- redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
+- redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
+- redhat/configs: Disable CONFIG_QLA3XXX (Kamal Heib) [RHEL-36646]
+- redhat/configs: fedora: Enable some drivers for IPU6 support (Hans de Goede)
+- redhat: add missing UKI_secureboot_cert hunk (Patrick Talbert)
+- redhat/kernel.spec: keep extra modules in original directories (Jan Stancek)
+- redhat/configs: Move CONFIG_BLK_CGROUP_IOCOST=y to common/generic (Waiman Long)
+- Turn on CONFIG_MFD_QCOM_PM8008 for Fedora aarch64 (Justin M. Forbes)
+- redhat: Build IMA CA certificate into the Fedora kernel (Coiby Xu)
+- Move CONFIG_RAS_FMPM to the proper location (Aristeu Rozanski)
+- redhat/configs: Remove CONFIG_NET_ACT_IPT (Ivan Vecera)
+- gitlab-ci: add kernel-automotive pipelines (Michael Hofmann)
+- Enable CEC support for TC358743 (Peter Robinson)
+- fedora: arm: Enable ARCH_R9A09G057 (Peter Robinson)
+- fedora: updates for the 6.10 kernel (Peter Robinson)
+- fedora: arm: Enable the MAX96706 GMSL module (Peter Robinson)
+- redhat: Switch UKI to using its own SecureBoot cert (from system-sb-certs) (Jan Stancek)
+- redhat: Add RHEL specifc .sbat section to UKI (Jan Stancek)
+- kernel.spec: add iommu selftests to kernel-selftests-internal (Eder Zulian) [RHEL-32895]
+- redhat/configs: fedora: aarch64: Re-enable CUSE (Neal Gompa)
+- redhat: pass correct RPM_VMLINUX_H to bpftool install (Jan Stancek)
+- rh_flags: Rename rh_features to rh_flags (Ricardo Robaina) [RHEL-32987]
+- kernel: rh_features: fix reading empty feature list from /proc (Ricardo Robaina) [RHEL-32987]
+- rh_features: move rh_features entry to sys/kernel (Ricardo Robaina) [RHEL-32987]
+- rh_features: convert to atomic allocation (Ricardo Robaina) [RHEL-32987]
+- add rh_features to /proc (Ricardo Robaina) [RHEL-32987]
+- add support for rh_features (Ricardo Robaina) [RHEL-32987]
+- Drop kexec_load syscall support (Baoquan He)
+- New configs in lib/kunit (Fedora Kernel Team)
+- Turn off KUNIT_FAULT_TEST as it causes problems for CI (Justin M. Forbes)
+- Add a config entry in pending for CONFIG_DRM_MSM_VALIDATE_XML (Justin M. Forbes)
+- Flip CONFIG_SND_SOC_CS35L56_SPI in pending to avoid a mismatch (Justin M. Forbes)
+- Fix up a mismatch for RHEL (Justin M. Forbes)
+- Reset changelog after rebase (Justin M. Forbes)
+- Reset RHEL_RELEASE to 0 for 6.10 (Justin M. Forbes)
+- configs: move CONFIG_BLK_DEV_UBLK into rhel/configs/generic (Ming Lei)
+- configs: move CONFIG_BLK_SED_OPAL into redhat/configs/common/generic (Ming Lei)
+- RHEL-21097: rhel: aarch64 stop blocking a number of HW sensors (Peter Robinson)
+- redhat/configs: enable RTL8822BU for rhel (Jose Ignacio Tornos Martinez)
+- redhat/configs: remove CONFIG_DMA_PERNUMA_CMA and switch CONFIG_DMA_NUMA_CMA off (Jerry Snitselaar)
+- redhat: add IMA certificates (Jan Stancek)
+- redhat/kernel.spec: fix typo in move_kmod_list() variable (Jan Stancek)
+- redhat: make filtermods.py less verbose by default (Jan Stancek)
+- scsi: sd: condition probe_type under RHEL_DIFFERENCES (Eric Chanudet)
+- Turn on INIT_ON_ALLOC_DEFAULT_ON for Fedora (Justin M. Forbes)
+- Consolidate configs to common for 6.9 (Justin M. Forbes)
+- redhat/rhel_files: move tipc.ko and tipc_diag.ko to modules-extra (Xin Long) [RHEL-23931]
+- redhat: move amd-pstate-ut.ko to modules-internal (Jan Stancek)
+- redhat/configs: enable CONFIG_LEDS_TRIGGER_NETDEV also for RHEL (Michal Schmidt) [RHEL-32110]
+- redhat/configs: Remove CONFIG_AMD_IOMMU_V2 (Jerry Snitselaar)
+- Set DEBUG_INFO_BTF_MODULES for Fedora (Justin M. Forbes)
+- redhat: Use redhatsecureboot701 for ppc64le (Jan Stancek)
+- redhat: switch the kernel package to use certs from system-sb-certs (Jan Stancek)
+- redhat: replace redhatsecureboot303 signing key with redhatsecureboot601 (Jan Stancek)
+- redhat: drop certificates that were deprecated after GRUB's BootHole flaw (Jan Stancek)
+- redhat: correct file name of redhatsecurebootca1 (Jan Stancek)
+- redhat: align file names with names of signing keys for ppc and s390 (Jan Stancek)
+- redhat/configs: Enable CONFIG_DM_VDO in RHEL (Benjamin Marzinski)
+- redhat/configs: Enable DRM_NOUVEAU_GSP_DEFAULT everywhere (Neal Gompa)
+- kernel.spec: adjust for livepatching kselftests (Joe Lawrence)
+- redhat/configs: remove CONFIG_TEST_LIVEPATCH (Joe Lawrence)
+- Turn on CONFIG_RANDOM_KMALLOC_CACHES for Fedora (Justin M. Forbes)
+- Set Fedora configs for 6.9 (Justin M. Forbes)
+- gitlab-ci: enable pipelines with c10s buildroot (Michael Hofmann)
+- Turn on ISM for Fedora (Justin M. Forbes)
+- redhat/configs: enable CONFIG_TEST_LOCKUP for non-debug kernels (Čestmír Kalina)
+- redhat/rhel_files: add test_lockup.ko to modules-extra (Čestmír Kalina)
+- Turn off some Fedora UBSAN options to avoid false positives (Justin M. Forbes)
+- fedora: aarch64: Enable a QCom Robotics platforms requirements (Peter Robinson)
+- fedora: updates for 6.9 merge window (Peter Robinson)
+- gitlab-ci: rename GitLab jobs ark -> rawhide (Michael Hofmann)
+- gitlab-ci: harmonize DataWarehouse tree names (Michael Hofmann)
+- redhat/configs: Enable CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON for rhel (Jerry Snitselaar)
+- spec: make sure posttrans script doesn't fail if /boot is non-POSIX (glb)
+- Turn on UBSAN for Fedora (Justin M. Forbes)
+- Turn on XEN_BALLOON_MEMORY_HOTPLUG for Fedora (Justin M. Forbes)
+- docs: point out that python3-pyyaml is now required (Thorsten Leemhuis)
+- Use LLVM=1 for clang_lto build (Nikita Popov)
+- redhat: fix def_variants.yaml check (Jan Stancek)
+- redhat: sanity check yaml files (Jan Stancek)
+- spec: rework filter-mods and mod-denylist (Jan Stancek)
+- redhat/configs: remove CONFIG_INTEL_MENLOW as it is obsolete. (David Arcari)
+- arch/x86: Fix XSAVE check for x86_64-v2 check (Prarit Bhargava)
+- redhat/Makefile.variables: unquote a variable (Thorsten Leemhuis)
+- redhat/configs: build in Tegra210 SPI driver (Mark Salter)
+- redhat/configs: aarch64: Enable ARM_FFA driver (Mark Salter)
+- Base automotive-devel on rt-devel (Don Zickus)
+- redhat/configs: Enable CONFIG_AMDTEE for x86 (David Arcari)
+- redhat/configs: enable CONFIG_TEST_LOCKUP for debug kernel (Čestmír Kalina)
+- kernel.spec: fix libperf-debuginfo content (Jan Stancek)
+- Turn on DM_VDO for Fedora (Justin M. Forbes)
+- redhat: make libperf-devel require libperf %%{version}-%%{release} (Jan Stancek)
+- kernel.spec: drop custom mode also for System.map ghost entry (Jan Stancek)
+- Octopus merges are too conservative, serialize instead (Don Zickus)
+- Add tracking branches for rt-devel (Don Zickus)
+- all: clean-up i915 (Peter Robinson)
+- Turn on CONFIG_READ_ONLY_THP_FOR_FS for Fedora (Justin M. Forbes)
+- redhat/kernel.spec.template: fix rtonly build (Jan Stancek)
+- redhat/kernel.spec.template: add extra flags for tools build (Scott Weaver)
+- Add iio-test-gts to mod-internal.list (Thorsten Leemhuis)
+- redhat/kernel.spec.template: update license (Scott Weaver)
+- Fix typo in maintaining.rst file (Augusto Caringi)
+- Enable DRM_CDNS_DSI_J721E for fedora (Andrew Halaney)
+- gitlab-ci: do not merge ark-latest for gating pipelines (Michael Hofmann)
+- fedora: Enable MCP9600 (Peter Robinson)
+- redhat/configs: Enable & consolidate BF-3 drivers config (Luiz Capitulino)
+- redhat: Fix RT kernel kvm subpackage requires (Juri Lelli)
+- Add new of_test module to mod-internal.list (Thorsten Leemhuis)
+- Add new string kunit modules to mod-internal.list (Thorsten Leemhuis)
+- redhat/kernel.spec.template: enable cross for base/RT (Peter Robinson)
+- redhat/kernel.spec.template: Fix cross compiling (Peter Robinson)
+- arch/x86/kernel/setup.c: fixup rh_check_supported (Scott Weaver)
+- Enable CONFIG_USB_ONBOARD_HUB for RHEL (Charles Mirabile)
+- redhat/Makefile.cross: Add CROSS_BASEONLY (Prarit Bhargava)
+- gitlab-ci: fix ark-latest merging for parent pipelines running in forks (Michael Hofmann)
+- lsm: update security_lock_kernel_down (Scott Weaver)
+- Fix changelog after rebase (Augusto Caringi)
+- redhat: remove "END OF CHANGELOG" marker from kernel.changelog (Herton R. Krzesinski)
+- gitlab-ci: enable all variants for rawhide/eln builder image gating (Michael Hofmann)
+- Fedora: enable Microchip and their useful drivers (Peter Robinson)
+- spec: suppress "set +x" output (Jan Stancek)
+- redhat/configs: Disable CONFIG_RDMA_SIW (Kamal Heib)
+- redhat/configs: Disable CONFIG_RDMA_RXE (Kamal Heib)
+- redhat/configs: Disable CONFIG_MLX4 (Kamal Heib)
+- redhat/configs: Disable CONFIG_INFINIBAND_HFI1 and CONFIG_INFINIBAND_RDMAVT (Kamal Heib)
+- Consolidate 6.8 configs to common (Justin M. Forbes)
+- Remove rt-automated and master-rt-devel logic (Don Zickus)
+- Add support for CI octopus merging (Don Zickus)
+- redhat/configs: Disable CONFIG_INFINIBAND_VMWARE_PVRDMA (Kamal Heib)
+- gitlab-ci: fix merge tree URL for gating pipelines (Michael Hofmann)
+- Revert "net: bump CONFIG_MAX_SKB_FRAGS to 45" (Marcelo Ricardo Leitner)
+- uki: use systemd-pcrphase dracut module (Gerd Hoffmann)
+- Add libperf-debuginfo subpackage (Justin M. Forbes)
+- redhat/kernel.spec.template: Add log_msg macro (Prarit Bhargava)
+- redhat/configs: Disable CONFIG_INFINIBAND_USNIC (Kamal Heib)
+- Enable CONFIG_BMI323_I2C=m for Fedora x86_64 builds (Hans de Goede)
+- gitlab-ci: drop test_makefile job (Scott Weaver)
+- Enable merge-rt pipeline (Don Zickus)
+- kernel.spec: include the GDB plugin in kernel-debuginfo (Ondrej Mosnacek)
+- Turn on DRM_NOUVEAU_GSP_DEFAULT for Fedora (Justin M. Forbes)
+- Set late new config HDC3020 for Fedora (Justin M. Forbes)
+- redhat/self-test: Update CROSS_DISABLED_PACKAGES (Prarit Bhargava)
+- redhat: Do not build libperf with cross builds (Prarit Bhargava)
+- redhat/configs: enable CONFIG_PINCTRL_INTEL_PLATFORM for RHEL (David Arcari)
+- redhat/configs: enable CONFIG_PINCTRL_METEORPOINT for RHEL (David Arcari)
+- redhat/configs: intel pinctrl config cleanup (David Arcari)
+- redhat/configs: For aarch64/RT, default kstack randomization off (Jeremy Linton)
+- redhat/Makefile: remove an unused target (Ondrej Mosnacek)
+- redhat/Makefile: fix setup-source and document its caveat (Ondrej Mosnacek)
+- redhat/Makefile: fix race condition when making the KABI tarball (Ondrej Mosnacek)
+- redhat/Makefile: refactor KABI tarball creation (Ondrej Mosnacek)
+- Turn XFS_SUPPORT_V4 back on for Fedora (Justin M. Forbes)
+- Add xe to drm module filters (Justin M. Forbes)
+- Turn off the DRM_XE_KUNIT_TEST for Fedora (Justin M. Forbes)
+- Flip secureboot signature order (Justin M. Forbes)
+- all: clean up some removed configs (Peter Robinson)
+- redhat: add nvidia oot signing key (Dave Airlie)
+- gitlab-ci: support CI for zfcpdump kernel on ELN (Michael Hofmann)
+- Fedora configs for 6.8 (Justin M. Forbes)
+- Turn off CONFIG_INTEL_VSC for Fedora (Justin M. Forbes)
+- redhat/configs: rhel wireless requests (Jose Ignacio Tornos Martinez)
+- spec: Set EXTRA_CXXFLAGS for perf demangle-cxx.o (Josh Stone) [2233269]
+- Flip values for FSCACHE and NETFS_SUPPORT to avoid mismatch (Justin M. Forbes)
+- Turn on SECURITY_DMESG_RESTRICT (Justin M. Forbes)
+- redhat: forward-port genlog.py updates from c9s (Jan Stancek)
+- arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated (Prarit Bhargava)
+- fedora: Enable more Renesas RZ platform drivers (Peter Robinson)
+- fedora: a few aarch64 drivers and cleanups (Peter Robinson)
+- fedora: cavium nitrox cnn55xx (Peter Robinson)
+- Fix dist-get-buildreqs breakage around perl(ExtUtils::Embed) (Don Zickus)
+- gitlab-ci: merge ark-latest fixes when running ELN pipelines (Michael Hofmann)
+- gitlab-ci: use all arches for container image gating (Michael Hofmann)
+- Add new os-build targets: rt-devel and automotive-devel (Don Zickus)
+- Remove defines forcing tools on, they override cmdline (Justin M. Forbes)
+- Remove separate license tag for libperf (Justin M. Forbes)
+- Don't use upstream bpftool version for Fedora package (Justin M. Forbes)
+- Don't ship libperf.a in libperf-devel (Justin M. Forbes)
+- add libperf packages and enable perf, libperf, tools and bpftool packages (Thorsten Leemhuis)
+- Add scaffolding to build the kernel-headers package for Fedora (Justin M. Forbes)
+- redhat/spec: use distro CFLAGS when building bootstrap bpftool (Artem Savkov)
+- spec: use just-built bpftool for vmlinux.h generation (Yauheni Kaliuta) [2120968]
+- gitlab-ci: enable native tools for Rawhide CI (Michael Hofmann)
+- Revert "Merge branch 'fix-kabi-build-race' into 'os-build'" (Justin M. Forbes)
+- redhat: configs: fedora: Enable sii902x bridge chip driver (Erico Nunes)
+- Enable CONFIG_TCP_CONG_ILLINOIS for RHEL (Davide Caratti)
+- redhat/Makefile: fix setup-source and document its caveat (Ondrej Mosnacek)
+- redhat/Makefile: fix race condition when making the KABI tarball (Ondrej Mosnacek)
+- redhat/Makefile: refactor KABI tarball creation (Ondrej Mosnacek)
+- redhat/configs: Remove HOTPLUG_CPU0 configs (Prarit Bhargava)
+- gitlab-ci: merge ark-latest before building in MR pipelines (Michael Hofmann)
+- CI: include aarch64 in CKI container image gating (Tales Aparecida)
+- redhat: spec: Fix update_scripts run for CentOS builds (Neal Gompa)
+- New configs in drivers/crypto (Fedora Kernel Team)
+- net: bump CONFIG_MAX_SKB_FRAGS to 45 (Marcelo Ricardo Leitner)
+- Enable CONFIG_MARVELL_88Q2XXX_PHY (Izabela Bakollari)
+- Remove CONFIG_NET_EMATCH_STACK file for RHEL (Justin M. Forbes)
+- CONFIG_NETFS_SUPPORT should be m after the merge (Justin M. Forbes)
+- Turn FSCACHE and NETFS from m to y in pending (Justin M. Forbes)
+- Turn on CONFIG_TCP_AO for Fedora (Justin M. Forbes)
+- Turn on IAA_CRYPTO_STATS for Fedora (Justin M. Forbes)
+- fedora: new drivers and cleanups (Peter Robinson)
+- Turn on Renesas RZ for Fedora IOT rhbz2257913 (Justin M. Forbes)
+- redhat: filter-modules.sh.rhel: add dell-smm-hwmon (Scott Weaver)
+- Add CONFIG_INTEL_MEI_GSC_PROXY=m for DRM 9.4 stable backport (Mika Penttilä)
+- Set configs for ZRAM_TRACK_ENTRY_ACTIME (Justin M. Forbes)
+- Add python3-pyyaml to buildreqs for kernel-docs (Justin M. Forbes)
+- Add nb7vpq904m to singlemods for ppc64le (Thorsten Leemhuis)
+- include drm bridge helpers in kernel-core package (Thorsten Leemhuis)
+- Add dell-smm-hwmon to singlemods (Thorsten Leemhuis)
+- Add drm_gem_shmem_test to mod-internal.list (Thorsten Leemhuis)
+- redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option (Sabrina Dubroca)
+- redhat: rh_kabi: introduce RH_KABI_EXCLUDE_WITH_SIZE (Sabrina Dubroca)
+- redhat: rh_kabi: move semicolon inside __RH_KABI_CHECK_SIZE (Sabrina Dubroca)
+- Fix up ZRAM_TRACK_ENTRY_ACTIME in pending (Justin M. Forbes)
+- random: replace import_single_range() with import_ubuf() (Justin M. Forbes)
+- Flip CONFIG_INTEL_PMC_CORE to m for Fedora (Justin M. Forbes)
+- Add CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y to avoid a mismatch (Justin M. Forbes)
+- common: cleanup MX3_IPU (Peter Robinson)
+- all: The Octeon MDIO driver is aarch64/mips (Peter Robinson)
+- common: rtc: remove bq4802 config (Peter Robinson)
+- common: de-dupe MARVELL_GTI_WDT (Peter Robinson)
+- all: Remove CAN_BXCAN (Peter Robinson)
+- common: cleanup SND_SOC_ROCKCHIP (Peter Robinson)
+- common: move RHEL DP83867_PHY to common (Peter Robinson)
+- common: Make ASYMMETRIC_KEY_TYPE enable explicit (Peter Robinson)
+- common: Disable aarch64 ARCH_MA35 universally (Peter Robinson)
+- common: arm64: enable Tegra234 pinctrl driver (Peter Robinson)
+- rhel: arm64: Enable qoriq thermal driver (Peter Robinson)
+- common: aarch64: Cleanup some i.MX8 config options (Peter Robinson)
+- all: EEPROM_LEGACY has been removed (Peter Robinson)
+- all: rmeove AppleTalk hardware configs (Peter Robinson)
+- all: cleanup: remove references to SLOB (Peter Robinson)
+- all: cleanup: Drop unnessary BRCMSTB configs (Peter Robinson)
+- all: net: remove retired network schedulers (Peter Robinson)
+- all: cleanup removed CONFIG_IMA_TRUSTED_KEYRING (Peter Robinson)
+- BuildRequires: lld for build with selftests for x86 (Jan Stancek)
+- spec: add keyutils to selftest-internal subpackage requirements (Artem Savkov) [2166911]
+- redhat/spec: exclude liburandom_read.so from requires (Artem Savkov) [2120968]
+- rtla: sync summary text with upstream and update Requires (Jan Stancek)
+- uki-virt: add systemd-sysext dracut module (Gerd Hoffmann)
+- uki-virt: add virtiofs dracut module (Gerd Hoffmann)
+- common: disable the FB device creation (Peter Robinson)
+- s390x: There's no FB on Z-series (Peter Robinson)
+- fedora: aarch64: enable SM_VIDEOCC_8350 (Peter Robinson)
+- fedora: arm64: enable ethernet on newer TI industrial (Peter Robinson)
+- fedora: arm64: Disable VIDEO_IMX_MEDIA (Peter Robinson)
+- fedora: use common config for Siemens Simatic IPC (Peter Robinson)
+- fedora: arm: enable Rockchip SPI flash (Peter Robinson)
+- fedora: arm64: enable DRM_TI_SN65DSI83 (Peter Robinson)
+- kernel.spec: remove kernel-smp reference from scripts (Jan Stancek)
+- redhat: do not compress the full kernel changelog in the src.rpm (Herton R. Krzesinski)
+- Auto consolidate configs for the 6.7 cycle (Justin M. Forbes)
+- Enable sound for a line of Huawei laptops (TomZanna)
+- fedora: a few cleanups and driver enablements (Peter Robinson)
+- fedora: arm64: cleanup Allwinner Pinctrl drivers (Peter Robinson)
+- fedora: aarch64: Enable some DW drivers (Peter Robinson)
+- redhat: ship all the changelog from source git into kernel-doc (Herton R. Krzesinski)
+- redhat: create an empty changelog file when changing its name (Herton R. Krzesinski)
+- redhat/self-test: Remove --all from git query (Prarit Bhargava)
+- Disable accel drivers for Fedora x86 (Kate Hsuan)
+- redhat: scripts: An automation script for disabling unused driver for x86 (Kate Hsuan)
+- Fix up Fedora LJCA configs and filters (Justin M. Forbes)
+- Fedora configs for 6.7 (Justin M. Forbes)
+- Some Fedora config updates for MLX5 (Justin M. Forbes)
+- Turn on DRM_ACCEL drivers for Fedora (Justin M. Forbes)
+- redhat: enable the kfence test (Nico Pache)
+- redhat/configs: Enable UCLAMP_TASK for PipeWire and WirePlumber (Neal Gompa)
+- Turn on CONFIG_SECURITY_DMESG_RESTRICT for Fedora (Justin M. Forbes)
+- Turn off shellcheck for the fedora-stable-release script (Justin M. Forbes)
+- Add some initial Fedora stable branch script to redhat/scripts/fedora/ (Justin M. Forbes)
+- redhat: disable iptables-legacy compatibility layer (Florian Westphal)
+- redhat: disable dccp conntrack support (Florian Westphal)
+- configs: enable netfilter_netlink_hook in fedora too (Florian Westphal)
+- ext4: Mark mounting fs-verity filesystems as tech-preview (Alexander Larsson)
+- erofs: Add tech preview markers at mount (Alexander Larsson)
+- Enable fs-verity (Alexander Larsson)
+- Enable erofs (Alexander Larsson)
+- aarch64: enable uki (Gerd Hoffmann)
+- redhat: enable CONFIG_SND_SOC_INTEL_SOF_DA7219_MACH as a module for x86 (Patrick Talbert)
+- Turn CONFIG_MFD_CS42L43_SDW on for RHEL (Justin M. Forbes)
+- Enable cryptographic acceleration config flags for PowerPC (Mamatha Inamdar)
+- Also make vmlinuz-virt.efi world readable (Zbigniew Jędrzejewski-Szmek)
+- Drop custom mode for System.map file (Zbigniew Jędrzejewski-Szmek)
+- Add drm_exec_test to mod-internal.list for depmod to succeed (Mika Penttilä)
+- RHEL 9.4 DRM backport (upto v6.6 kernel), sync Kconfigs (Mika Penttilä)
+- Turn on USB_DWC3 for Fedora (rhbz 2250955) (Justin M. Forbes)
+- redhat/configs: Move IOMMUFD to common (Alex Williamson)
+- redhat: Really remove cpupower files (Prarit Bhargava)
+- redhat: remove update_scripts.sh (Prarit Bhargava)
+- Fix s390 zfcpfdump bpf build failures for cgroups (Don Zickus)
+- Flip CONFIG_NVME_AUTH to m in pending (Justin M. Forbes)
+- Turn CONFIG_SND_SOC_INTEL_AVS_MACH_RT5514 on for Fedora x86 (Jason Montleon)
+- kernel/rh_messages.c: Mark functions as possibly unused (Prarit Bhargava)
+- Add snd-hda-cirrus-scodec-test to mod-internal.list (Scott Weaver)
+- Turn off BPF_SYSCALL in pending for zfcpdump (Justin M. Forbes)
+- Add mean_and_variance_test to mod-internal.list (Justin M. Forbes)
+- Add cfg80211-tests and mac80211-tests to mod-internal.list (Justin M. Forbes)
+- Turn on CONFIG_MFD_CS42L43_SDW for RHEL in pending (Justin M. Forbes)
+- Turn on bcachefs for Fedora (Justin M. Forbes)
+- redhat: configs: fedora: Enable QSEECOM and friends (Andrew Halaney)
+- Add clk-fractional-divider_test to mod-internal.list (Thorsten Leemhuis)
+- Add gso_test to mod-internal.list (Thorsten Leemhuis)
+- Add property-entry-test to mod-internal.list (Thorsten Leemhuis)
+- Fedora 6.7 configs part 1 (Justin M. Forbes)
+- [Scheduled job] Catch config mismatches early during upstream merge (Don Zickus)
+- redhat/self-test: Update data for KABI xz change (Prarit Bhargava)
+- redhat/scripts: Switch KABI tarballs to xz (Prarit Bhargava)
+- redhat/kernel.spec.template: Switch KABI compression to xz (Prarit Bhargava)
+- redhat: self-test: Use a more complete SRPM file suffix (Andrew Halaney)
+- redhat: makefile: remove stray rpmbuild --without (Eric Chanudet)
+- Consolidate configs into common for 6.6 (Justin M. Forbes)
+- Updated Fedora configs (Justin M. Forbes)
+- Turn on UFSHCD for Fedora x86 (Justin M. Forbes)
+- redhat: configs: generic: x86: Disable CONFIG_VIDEO_OV01A10 for x86 platform (Hans de Goede)
+- redhat: remove pending-rhel CONFIG_XFS_ASSERT_FATAL file (Patrick Talbert)
+- New configs in fs/xfs (Fedora Kernel Team)
+- random: Add hook to override device reads and getrandom(2) (Herbert Xu)
+- redhat/configs: share CONFIG_ARM64_ERRATUM_2966298 between rhel and fedora (Mark Salter)
+- configs: Remove S390 IOMMU config options that no longer exist (Jerry Snitselaar)
+- redhat: docs: clarify where bugs and issues are created (Scott Weaver)
+- redhat/scripts/rh-dist-git.sh does not take any arguments: fix error message (Denys Vlasenko)
+- Add target_branch for gen_config_patches.sh (Don Zickus)
+- redhat: disable kunit by default (Nico Pache)
+- redhat/configs: enable the AMD_PMF driver for RHEL (David Arcari)
+- Make CONFIG_ADDRESS_MASKING consistent between fedora and rhel (Chris von Recklinghausen)
+- CI: add ark-latest baseline job to tag cki-gating for successful pipelines (Michael Hofmann)
+- CI: provide child pipelines for CKI container image gating (Michael Hofmann)
+- CI: allow to run as child pipeline (Michael Hofmann)
+- CI: provide descriptive pipeline name for scheduled pipelines (Michael Hofmann)
+- CI: use job templates for variant variables (Michael Hofmann)
+- redhat/kernel.spec.template: simplify __modsign_install_post (Jan Stancek)
+- Fedora filter updates after configs (Justin M. Forbes)
+- Fedora configs for 6.6 (Justin M. Forbes)
+- redhat/configs: Freescale Layerscape SoC family (Steve Best)
+- Add clang MR/baseline pipelines (Michael Hofmann)
+- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
+- Add clang config framework (Don Zickus)
+- Apply partial snippet configs to all configs (Don Zickus)
+- Remove unpackaged kgcov config files (Don Zickus)
+- redhat/configs: enable missing Kconfig options for Qualcomm RideSX4 (Brian Masney)
+- enable CONFIG_ADDRESS_MASKING for x86_64 (Chris von Recklinghausen)
+- common: aarch64: enable NXP Flex SPI (Peter Robinson)
+- fedora: Switch TI_SCI_CLK and TI_SCI_PM_DOMAINS symbols to built-in (Javier Martinez Canillas)
+- kernel.spec: adjust build option comment (Michael Hofmann)
+- kernel.spec: allow to enable arm64_16k variant (Michael Hofmann)
+- gitlab-ci: enable build-only pipelines for Rawhide/16k/aarch64 (Michael Hofmann)
+- kernel.spec.template: Fix --without bpftool (Prarit Bhargava)
+- redhat/configs: NXP BBNSM Power Key Driver (Steve Best)
+- redhat/self-test: Update data for cross compile fields (Prarit Bhargava)
+- redhat/Makefile.cross: Add message for disabled subpackages (Prarit Bhargava)
+- redhat/Makefile.cross: Update cross targets with disabled subpackages (Prarit Bhargava)
+- Remove XFS_ASSERT_FATAL from pending-fedora (Justin M. Forbes)
+- Change default pending for XFS_ONLINE_SCRUB_STATSas it now selects XFS_DEBUG (Justin M. Forbes)
+- gitlab-ci: use --with debug/base to select kernel variants (Michael Hofmann)
+- kernel.spec: add rpmbuild --without base option (Michael Hofmann)
+- redhat: spec: Fix typo for kernel_variant_preun for 16k-debug flavor (Neal Gompa)
+- Turn off appletalk for fedora (Justin M. Forbes)
+- New configs in drivers/media (Fedora Kernel Team)
+- redhat/docs: Add a mention of bugzilla for bugs (Prarit Bhargava)
+- Fix the fixup of Fedora release (Don Zickus)
+- Fix Fedora release scheduled job (Don Zickus)
+- Move squashfs to kernel-modules-core (Justin M. Forbes)
+- redhat: Explicitly disable CONFIG_COPS (Vitaly Kuznetsov)
+- redhat: Add dist-check-licenses target (Vitaly Kuznetsov)
+- redhat: Introduce "Verify SPDX-License-Identifier tags" selftest (Vitaly Kuznetsov)
+- redhat: Use kspdx-tool output for the License: field (Vitaly Kuznetsov)
+- Rename pipeline repo branch and DW tree names (Michael Hofmann)
+- Adjust comments that refer to ARK in a Rawhide context (Michael Hofmann)
+- Rename variable names starting with ark- to rawhide- (Michael Hofmann)
+- Rename trigger-ark to trigger-rawhide (Michael Hofmann)
+- Fix up config mismatches for Fedora (Justin M. Forbes)
+- redhat/configs: Texas Instruments Inc. K3 multicore SoC architecture (Steve Best)
+- Flip CONFIG_VIDEO_V4L2_SUBDEV_API in pending RHEL due to mismatch (Justin M. Forbes)
+- CONFIG_HW_RANDOM_HISI: move to common and set to m (Scott Weaver)
+- Turn off CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for Fedora s390x (Justin M. Forbes)
+- Disable tests for ELN realtime pipelines (Michael Hofmann)
+- New configs in mm/Kconfig (Fedora Kernel Team)
+- Flip CONFIG_SND_SOC_CS35L56_SDW to m and clean up (Justin M. Forbes)
+- Add drm_exec_test to mod-internal.list (Thorsten Leemhuis)
+- Add new pending entry for CONFIG_SND_SOC_CS35L56_SDW to fix mismatch (Justin M. Forbes)
+- Fix tarball creation logic (Don Zickus)
+- redhat: bump libcpupower soname to match upstream (Patrick Talbert)
+- Turn on MEMFD_CREATE in pending as it is selected by CONFIG_TMPFS (Justin M. Forbes)
+- redhat: drop unneeded build-time dependency gcc-plugin-devel (Coiby Xu)
+- all: x86: move wayward x86 specific config home (Peter Robinson)
+- all: de-dupe non standard config options (Peter Robinson)
+- all: x86: clean up microcode loading options (Peter Robinson)
+- common: remove unnessary CONFIG_SND_MESON_AXG* (Peter Robinson)
+- redhat: Fix UKI install with systemd >= 254 (Vitaly Kuznetsov)
+- redhat: Use named parameters for kernel_variant_posttrans()/kernel_variant_preun() (Vitaly Kuznetsov)
+- redhat/kernel.spec.template: update compression variables to support zstd (Brian Masney)
+- Consolidate configs to common for 6.5 (Justin M. Forbes)
+- Remove unused config entry for Fedora (Justin M. Forbes)
+- redhat/self-test: Remove rpmlint test (Prarit Bhargava)
+- Remove the armv7 config directory from Fedora again (Justin M. Forbes)
+- Enable CONFIG_EXPERT for both RHEL and Fedora (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_DEVICE_PRIVATE on aarch64 (David Hildenbrand) [2231407]
+- redhat/configs: disable CONFIG_ROCKCHIP_ERRATUM_3588001 for RHEL (Mark Salter)
+- redhat: shellcheck fixes (Prarit Bhargava)
+- redhat/configs: enable tegra114 SPI (Mark Salter)
+- all: properly cleanup firewire once and for all (Peter Robinson)
+- Fix up filters for Fedora (Justin M. Forbes)
+- New configs in arch/x86 (Fedora Kernel Team)
+- Add an armv7 directory back for the Fedora configs (Justin M. Forbes)
+- Fedora 6.5 config updates (Justin M. Forbes)
+- Turn off DMABUF_SYSFS_STATS (Justin M. Forbes)
+- CI: rawhide_release: switch to using script to push (Don Zickus)
+- redhat/self-test: Update self-test data (Prarit Bhargava)
+- redhat/scripts/cross-compile: Update download_cross.sh (Prarit Bhargava)
+- redhat/Makefile.cross: Remove ARCH selection code (Prarit Bhargava)
+- redhat/Makefile.cross: Update script (Prarit Bhargava)
+- Fix interruptible non MR jobs (Michael Hofmann)
+- all: run evaluate_configs to de-dupe merged aarch64 (Peter Robinson)
+- all: arm: merge the arm and arm/aarch64 (Peter Robinson)
+- fedora: remove ARMv7 AKA armhfp configurations (Peter Robinson)
+- fedora: remove ARMv7 AKA armhfp support (Peter Robinson)
+- redhat/configs: enable CONFIG_VIRTIO_MEM on aarch64 (David Hildenbrand) [2044155]
+- redhat/configs: enable CONFIG_MEMORY_HOTREMOVE aarch64 (David Hildenbrand) [2062054]
+- redhat: Add arm64-16k kernel flavor scaffold for 16K page-size'd AArch64 (Neal Gompa)
+- fedora: enable i3c on aarch64 (Peter Robinson)
+- redhat/configs: Remove `CONFIG_HZ_1000 is not set` for aarch64 (Enric Balletbo i Serra)
+- redhat/configs: turn on the framework for SPI NOR for ARM (Steve Best)
+- configs: add new ChromeOS UART driver (Mark Langsdorf)
+- configs: add new ChromeOS Human Presence Sensor (Mark Langsdorf)
+- redhat/configs: Enable CONFIG_NVIDIA_WMI_EC_BACKLIGHT for both Fedora and RHEL (Kate Hsuan)
+- redhat/configs: Texas Instruments INA3221 driver (Steve Best)
+- arm: i.MX: Some minor NXP i.MX cleanups (Peter Robinson)
+- Description: Set config for Tegra234 pinctrl driver (Joel Slebodnick)
+- Update RPM Scriptlet for kernel-install Changes (Jonathan Steffan)
+- [CI] add exit 0 to the end of CI scripts (Don Zickus)
+- redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Kate Hsuan) [2227793]
+- Remove obsolete variable from gitlab-ci.yml (Ondrej Kinst)
+- redhat/configs: Move GVT-g to Fedora only (Alex Williamson)
+- [CI] Make sure we are on correct branch before running script (Don Zickus)
+- CI: ark-update-configs: sync push command and output (Don Zickus)
+- CI: ark-update-configs: misc changes (Don Zickus)
+- CI: sync ark-create-release push commands with output (Don Zickus)
+- CI: ark-create-release: Add a robust check if nothing changed (Don Zickus)
+- CI: Remove legacy tag check cruft (Don Zickus)
+- CI: Introduce simple environment script (Don Zickus)
+- redhat/configs: Disable FIREWIRE for RHEL (Prarit Bhargava)
+- redhat/scripts/rh-dist-git.sh: print list of uploaded files (Denys Vlasenko)
+- redhat/scripts/expand_srpm.sh: add missing function, robustify (Denys Vlasenko)
+- redhat: Enable HSR and PRP (Felix Maurer)
+- redhat/scripts/rh-dist-git.sh: fix outdated message and comment (Denys Vlasenko)
+- redhat/configs: Disable CONFIG_I8K (Prarit Bhargava)
+- Make sure posttrans script doesn't fail if restorecon is not installed (Daan De Meyer)
+- Update filters for new config items (Justin M. Forbes)
+- More Fedora 6.5 configs (Justin M. Forbes)
+- redhat/configs: disable pre-UVC cameras for RHEL on aarch64 (Dean Nelson)
+- redhat/configs: enable CONFIG_MEDIA_SUPPORT for RHEL on aarch64 (Dean Nelson)
+- move ownership of /lib/modules/<ver>/ to kernel-core (Thorsten Leemhuis)
+- Let kernel-modules-core own the files depmod generates. (Thorsten Leemhuis)
+- redhat: configs: Enable CONFIG_TYPEC_STUSB160X for rhel on aarch64 (Desnes Nunes)
+- Add filters for ptp_dfl_tod on Fedora (Justin M. Forbes)
+- Fedora 6.5 configs part 1 (Justin M. Forbes)
+- fedora: enable CONFIG_ZYNQMP_IPI_MBOX as a builtin in pending-fedora (Patrick Talbert)
+- fedora: arm: some minor updates (Peter Robinson)
+- fedora: bluetooth: enable AOSP extensions (Peter Robinson)
+- fedora: wifi: tweak ZYDAS WiFI config options (Peter Robinson)
+- scsi: sd: Add "probe_type" module parameter to allow synchronous probing (Ewan D. Milne) [2140017]
+- redhat/configs: allow IMA to use MOK keys (Coiby Xu)
+- Simplify documentation jobs (Michael Hofmann)
+- Auto-cancel pipelines only on MRs (Michael Hofmann)
+- CI: Call script directly (Don Zickus)
+- CI: Remove stale TAG and Makefile cruft (Don Zickus)
+- CI: Move os-build tracking to common area (Don Zickus)
+- redhat: use the eln builder for daily jobs (Patrick Talbert)
+- redhat: set CONFIG_XILINX_WINDOW_WATCHDOG as disabled in pending (Patrick Talbert)
+- Add baseline ARK/ELN pipelines (Michael Hofmann)
+- Simplify job rules (Michael Hofmann)
+- Build ELN srpm for bot changes (Michael Hofmann)
+- Run RH selftests for ELN (Michael Hofmann)
+- Simplify job templates (Michael Hofmann)
+- Extract rules to allow orthogonal configuration (Michael Hofmann)
+- Require ELN pipelines if started automatically (Michael Hofmann)
+- Add ARK debug pipeline (Michael Hofmann)
+- Extract common parts of child pipeline job (Michael Hofmann)
+- Move ARK pipeline variables into job template (Michael Hofmann)
+- Simplify ARK pipeline rules (Michael Hofmann)
+- Change pathfix.py to %%py3_shebang_fix (Justin M. Forbes)
+- Turn on NET_VENDOR_QUALCOMM for Fedora to enable rmnet (Justin M. Forbes)
+- redhat: add intel-m10-bmc-hwmon to filter-modules singlemods list (Patrick Talbert)
+- fedira: enable pending-fedora CONFIG_CPUFREQ_DT_PLATDEV as a module (Patrick Talbert)
+- redhat: fix the 'eln BUILD_TARGET' self-test (Patrick Talbert)
+- redhat: update the self-test-data (Patrick Talbert)
+- redhat: remove trailing space in dist-dump-variables output (Patrick Talbert)
+- Allow ELN pipelines failures (Michael Hofmann)
+- Enable cs-like CI (Michael Hofmann)
+- Allow to auto-cancel redundant pipelines (Michael Hofmann)
+- Remove obsolete unused trigger variable (Michael Hofmann)
+- Fix linter warnings in .gitlab-ci.yml (Michael Hofmann)
+- config: wifi: debug options for ath11k, brcm80211 and iwlwifi (Íñigo Huguet)
+- redhat: allow dbgonly cross builds (Jan Stancek)
+- redhat/configs: Clean up x86-64 call depth tracking configs (Waiman Long)
+- redhat: move SND configs from pending-rhel to rhel (Patrick Talbert)
+- Fix up armv7 configs for Fedora (Justin M. Forbes)
+- redhat: Set pending-rhel x86 values for various SND configs (Patrick Talbert)
+- redhat: update self-test data (Patrick Talbert)
+- redhat: ignore SPECBPFTOOLVERSION/bpftoolversion in self-test create-data.sh (Patrick Talbert)
+- fedora/rhel: Move I2C_DESIGNWARE_PLATFORM, I2C_SLAVE, & GPIOLIB from pending (Patrick Talbert)
+- redhat/filter-modules.sh.rhel: add needed deps for intel_rapl_tpmi (Jan Stancek)
+- fedora: Enable CONFIG_SPI_SLAVE (Patrick Talbert)
+- fedora/rhel: enable I2C_DESIGNWARE_PLATFORM, I2C_SLAVE, and GPIOLIB (Patrick Talbert)
+- fedora: Enable CONFIG_SPI_SLAVE in fedora-pending (Patrick Talbert)
+- redhat: remove extra + (plus) from meta package Requires definitions (Patrick Talbert)
+- Add intel-m10-bmc-hwmon to singlemods (Thorsten Leemhuis)
+- Add hid-uclogic-test to mod-internal.list (Thorsten Leemhuis)
+- Add checksum_kunit.ko to mod-internal.list (Thorsten Leemhuis)
+- Add strcat_kunit to mod-internal.list (Thorsten Leemhuis)
+- Add input_test to mod-intenal.list (Thorsten Leemhuis)
+- Revert "Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64" (Justin M. Forbes)
+- Fix up rebase issue with CONFIG_ARCH_FORCE_MAX_ORDER (Justin M. Forbes)
+- redhat/kernel.spec.template: Disable 'extracting debug info' messages (Prarit Bhargava)
+- kernel/rh_messages.c: Another gcc12 warning on redundant NULL test (Florian Weimer) [2216678]
+- redhat: fix signing for realtime and arm64_64k non-debug variants (Jan Stancek)
+- redhat: treat with_up consistently (Jan Stancek)
+- redhat: make with_realtime opt-in (Jan Stancek)
+- redhat/configs: Disable qcom armv7 drippings in the aarch64 tree (Jeremy Linton)
+- kernel.spec: drop obsolete ldconfig (Jan Stancek)
+- Consolidate config items to common for 6.4 cycle (Justin M. Forbes)
+- Turn on CO?NFIg_RMNET for Fedora (Justin M. Forbes)
+- redhat/configs: enable CONFIG_MANA_INFINIBAND=m for ARK (Vitaly Kuznetsov)
+- redhat/config: common: Enable CONFIG_GPIO_SIM for software development (Kate Hsuan)
+- redhat: fix problem with RT kvm modules listed twice in rpm generation (Clark Williams)
+- redhat: turn off 64k kernel builds with rtonly (Clark Williams)
+- redhat: turn off zfcpdump for rtonly (Clark Williams)
+- redhat: don't allow with_rtonly to turn on unsupported arches (Clark Williams)
+- redhat: update self-test data for addition of RT and 64k-page variants (Clark Williams)
+- redhat: fix realtime and efiuki build conflict (Jan Stancek)
+- arm64-64k: Add new kernel variant to RHEL9/CS9 for 64K page-size'd ARM64 (Donald Dutile) [2153073]
+- redhat: TEMPORARY set configs to deal with PREEMPT_RT not available (Clark Williams)
+- redhat: TEMPORARY default realtime to off (Clark Williams)
+- redhat: moved ARM errata configs to arm dir (Clark Williams)
+- redhat: RT packaging changes (Clark Williams)
+- redhat: miscellaneous commits needed due to CONFIG_EXPERT (Clark Williams)
+- redhat: realtime config entries (Clark Williams)
+- common: remove deleted USB PCCARD drivers (Peter Robinson)
+- fedora: further cleanup of pccard/cardbus subsystem (Peter Robinson)
+- common: properly disable PCCARD subsystem (Peter Robinson)
+- redhat/configs: arm: enable SERIAL_TEGRA UART for RHEL (Mark Salter)
+- redhat/configs: enable CONFIG_X86_AMD_PSTATE_UT (David Arcari)
+- redhat/configs: Enable CONFIG_TCG_VTPM_PROXY for RHEL (Štěpán Horáček)
+- redhat: do not package *.mod.c generated files (Denys Vlasenko)
+- ALSA configuration changes for ARK/RHEL 9.3 (Jaroslav Kysela)
+- spec: remove resolve_btfids from kernel-devel (Viktor Malik)
+- Fix typo in filter-modules (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_INIT_STACK_ALL_ZERO for RHEL (Josh Poimboeuf)
+- Remove CONFIG_ARCH_FORCE_MAX_ORDER for aarch64 (Justin M. Forbes)
+- Fix up config and filter for PTP_DFL_TOD (Justin M. Forbes)
+- redhat/configs: IMX8ULP pinctrl driver (Steve Best)
+- redhat/configs: increase CONFIG_FRAME_WARN for Fedora on aarch64 (Brian Masney)
+- redhat/configs: add two missing Kconfig options for the Thinkpad x13s (Brian Masney)
+- Fedora configs for 6.4 (Justin M. Forbes)
+- Change aarch64 CONFIG_ARCH_FORCE_MAX_ORDER to 10 for 4K pages (Justin M. Forbes)
+- kernel.spec: remove "RPM_VMLINUX_H=$DevelDir/vmlinux.h" code chunk in %%install (Denys Vlasenko)
+- redhat/configs: aarch64: Turn on Display for OnePlus 6 (Eric Curtin)
+- redhat/configs: NXP i.MX93 pinctrl, clk, analog to digital converters (Steve Best)
+- redhat/configs: Enable CONFIG_SC_GPUCC_8280XP for fedora (Andrew Halaney)
+- redhat/configs: Enable CONFIG_QCOM_IPCC for fedora (Andrew Halaney)
+- Add rv subpackage for kernel-tools (John Kacur) [2188441]
+- redhat/configs: NXP i.MX9 family (Steve Best)
+- redhat/genlog.py: add support to list/process zstream Jira tickets (Herton R. Krzesinski)
+- redhat: fix duplicate jira issues in the resolves line (Herton R. Krzesinski)
+- redhat: add support for Jira issues in changelog (Herton R. Krzesinski)
+- redhat/configs: turn on IMX8ULP CCM Clock Driver (Steve Best)
+- redhat: update filter-modules fsdrvs list to reference smb instead of cifs (Patrick Talbert)
+- Turn off some debug options found to impact performance (Justin M. Forbes)
+- wifi: rtw89: enable RTL8852BE card in RHEL (Íñigo Huguet)
+- redhat/configs: enable TEGRA186_GPC_DMA for RHEL (Mark Salter)
+- Move imx8m configs from fedora to common (Mark Salter)
+- redhat/configs: turn on lpuart serial port support Driver (Steve Best) [2208834]
+- Turn off DEBUG_VM for non debug Fedora kernels (Justin M. Forbes)
+- Enable CONFIG_BT on aarch64 (Charles Mirabile)
+- redhat/configs: turn on CONFIG_MARVELL_CN10K_TAD_PMU (Michal Schmidt) [2042240]
+- redhat/configs: Fix enabling MANA Infiniband (Kamal Heib)
+- Fix file listing for symvers in uki (Justin M. Forbes)
+- Fix up some Fedora config items (Justin M. Forbes)
+- enable efifb for Nvidia (Justin M. Forbes)
+- kernel.spec: package unstripped test_progs-no_alu32 (Felix Maurer)
+- Turn on NFT_CONNLIMIT for Fedora (Justin M. Forbes)
+- Include the information about builtin symbols into kernel-uki-virt package too (Vitaly Kuznetsov)
+- redhat/configs: Fix incorrect configs location and content (Vladis Dronov)
+- redhat/configs: turn on CONFIG_MARVELL_CN10K_DDR_PMU (Michal Schmidt) [2042241]
+- redhat: configs: generic: x86: Disable CONFIG_VIDEO_OV2740 for x86 platform (Kate Hsuan)
+- Enable IO_URING for RHEL (Justin M. Forbes)
+- Turn on IO_URING for RHEL in pending (Justin M. Forbes)
+- redhat: Remove editconfig (Prarit Bhargava)
+- redhat: configs: fix CONFIG_WERROR replace in build_configs (Jan Stancek)
+- redhat/configs: enable Maxim MAX77620 PMIC for RHEL (Mark Salter)
+- kernel.spec: skip kernel meta package when building without up (Jan Stancek)
+- redhat/configs: enable RDMA_RXE for RHEL (Kamal Heib) [2022578]
+- redhat/configs: update RPCSEC_GSS_KRB5 configs (Scott Mayhew)
+- redhat/Makefile: Support building linux-next (Thorsten Leemhuis)
+- redhat/Makefile: support building stable-rc versions (Thorsten Leemhuis)
+- redhat/Makefile: Add target to print DISTRELEASETAG (Thorsten Leemhuis)
+- Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64 (Justin M. Forbes)
+- Revert "Merge branch 'unstripped-no_alu32' into 'os-build'" (Patrick Talbert)
+- configs: Enable CONFIG_PAGE_POOL_STATS for common/generic (Patrick Talbert)
+- redhat/configs: enable CONFIG_DELL_WMI_PRIVACY for both RHEL and Fedora (David Arcari)
+- kernel.spec: package unstripped test_progs-no_alu32 (Felix Maurer)
+- bpf/selftests: fix bpf selftests install (Jerome Marchand)
+- kernel.spec: add bonding selftest (Hangbin Liu)
+- Change FORCE_MAX_ORDER for ppc64 to be 8 (Justin M. Forbes)
+- kernel.spec.template: Add global compression variables (Prarit Bhargava)
+- kernel.spec.template: Use xz for KABI (Prarit Bhargava)
+- kernel.spec.template: Remove gzip related aarch64 code (Prarit Bhargava)
+- Add apple_bl to filter-modules (Justin M. Forbes)
+- Add handshake-test to mod-intenal.list (Justin M. Forbes)
+- Add regmap-kunit to mod-internal.list (Justin M. Forbes)
+- configs: set CONFIG_PAGE_POOL_STATS (Patrick Talbert)
+- Add apple_bl to fedora module_filter (Justin M. Forbes)
+- Fix up some config mismatches in new Fedora config items (Justin M. Forbes)
+- redhat/configs: disable CONFIG_USB_NET_SR9700 for aarch64 (Jose Ignacio Tornos Martinez)
+- Fix up the RHEL configs for xtables and ipset (Justin M. Forbes)
+- ark: enable wifi on aarch64 (Íñigo Huguet)
+- fedora: wifi: hermes: disable 802.11b driver (Peter Robinson)
+- fedora: wifi: libertas: use the LIBERTAS_THINFIRM driver (Peter Robinson)
+- fedora: wifi: disable Zydas vendor (Peter Robinson)
+- redhat: fix python ValueError in error path of merge.py (Clark Williams)
+- fedora: arm: minor updates (Peter Robinson)
+- kernel.spec: Fix UKI naming to comply with BLS (Philipp Rudo)
+- redhat/kernel.spec.template: Suppress 'extracting debug info' noise in build log (Prarit Bhargava)
+- Fedora 6.3 configs part 2 (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_X86_KERNEL_IBT for Fedora and ARK (Josh Poimboeuf)
+- kernel.spec: gcov: make gcov subpackages per variant (Jan Stancek)
+- kernel.spec: Gemini: add Epoch to perf and rtla subpackages (Jan Stancek)
+- kernel.spec: Gemini: fix header provides for upgrade path (Jan Stancek)
+- redhat: introduce Gemini versioning (Jan Stancek)
+- redhat: separate RPM version from uname version (Jan Stancek)
+- redhat: introduce GEMINI and RHEL_REBASE_NUM variable (Jan Stancek)
+- ipmi: ssif_bmc: Add SSIF BMC driver (Tony Camuso)
+- common: minor de-dupe of parallel port configs (Peter Robinson)
+- Fedora 6.3 configs part 1 (Justin M. Forbes)
+- redhat: configs: Enable CONFIG_MEMTEST to enable memory test (Kate Hsuan)
+- Update Fedora arm filters after config updates (Nicolas Chauvet)
+- redhat/kernel.spec.template: Fix kernel-tools-libs-devel dependency (Prarit Bhargava)
+- redhat: fix the check for the n option (Patrick Talbert)
+- common: de-dupe some options that are the same (Peter Robinson)
+- generic: remove deleted options (Peter Robinson)
+- redhat/configs: enable CONFIG_INTEL_TCC_COOLING for RHEL (David Arcari)
+- Update Fedora ppc filters after config updates (Justin M. Forbes)
+- Update Fedora aarch64 filters after config updates (Justin M. Forbes)
+- fedora: arm: Updates for 6.3 (Peter Robinson)
+- redhat: kunit: cleanup NITRO config and enable rescale test (Nico Pache)
+- kernel.spec: use %%{package_name} to fix kernel-devel-matched Requires (Jan Stancek)
+- kernel.spec: use %%{package_name} also for abi-stablelist subpackages (Jan Stancek)
+- kernel.spec: use %%{package_name} also for tools subpackages (Jan Stancek)
+- generic: common: Parport and paride/ata cleanups (Peter Robinson)
+- CONFIG_SND_SOC_CS42L83 is no longer common (Justin M. Forbes)
+- configs: arm: bring some configs in line with rhel configs in c9s (Mark Salter)
+- arm64/configs: Put some arm64 configs in the right place (Mark Salter)
+- cleanup removed R8188EU config (Peter Robinson)
+- Make RHJOBS container friendly (Don Zickus)
+- Remove scmversion from kernel.spec.template (Don Zickus)
+- redhat/configs: Enable CONFIG_SND_SOC_CS42L83 (Neal Gompa)
+- Use RHJOBS for create-tarball (Don Zickus)
+- Enable CONFIG_NET_SCH_FQ_PIE for Fedora (Justin M. Forbes)
+- Make Fedora debug configs more useful for debug (Justin M. Forbes)
+- redhat/configs: enable Octeon TX2 network drivers for RHEL (Michal Schmidt) [2040643]
+- redhat/kernel.spec.template: fix installonlypkg for meta package (Jan Stancek)
+- redhat: version two of Makefile.rhelver tweaks (Clark Williams)
+- redhat/configs: Disable CONFIG_GCC_PLUGINS (Prarit Bhargava)
+- redhat/kernel.spec.template: Fix typo for process_configs.sh call (Neal Gompa)
+- redhat/configs: CONFIG_CRYPTO_SM3_AVX_X86_64 is x86 only (Vladis Dronov)
+- redhat/configs: Enable CONFIG_PINCTRL_METEORLAKE in RHEL (Prarit Bhargava)
+- fedora: enable new image sensors (Peter Robinson)
+- redhat/self-test: Update self-test data (Prarit Bhargava)
+- redhat/kernel.spec.template: Fix hardcoded "kernel" (Prarit Bhargava)
+- redhat/configs/generate_all_configs.sh: Fix config naming (Prarit Bhargava)
+- redhat/kernel.spec.template: Pass SPECPACKAGE_NAME to generate_all_configs.sh (Prarit Bhargava)
+- kernel.spec.template: Use SPECPACKAGE_NAME (Prarit Bhargava)
+- redhat/Makefile: Copy spec file (Prarit Bhargava)
+- redhat: Change PACKAGE_NAME to SPECPACKAGE_NAME (Prarit Bhargava)
+- redhat/configs: Support the virtio_mmio.device parameter in Fedora (David Michael)
+- Revert "Merge branch 'systemd-boot-unsigned' into 'os-build'" (Patrick Talbert)
+- redhat/Makefile: fix default values for dist-brew's DISTRO and DIST (Íñigo Huguet)
+- Remove cc lines from automatic configs (Don Zickus)
+- Add rtla-hwnoise files (Justin M. Forbes)
+- redhat/kernel.spec.template: Mark it as a non-executable file (Neal Gompa)
+- fedora: arm: Enable DRM_PANEL_HIMAX_HX8394 (Javier Martinez Canillas)
+- redhat/configs: CONFIG_HP_ILO location fix (Vladis Dronov)
+- redhat: Fix build for kselftests mm (Nico Pache)
+- fix tools build after vm to mm rename (Justin M. Forbes)
+- redhat/spec: Update bpftool versioning scheme (Viktor Malik)
+- redhat/configs: CONFIG_CRYPTO_SM4_AESNI_AVX*_X86_64 is x86 only (Prarit Bhargava)
+- redhat: adapt to upstream Makefile change (Clark Williams)
+- redhat: modify efiuki specfile changes to use variants convention (Clark Williams)
+- Turn off DEBUG_INFO_COMPRESSED_ZLIB for Fedora (Justin M. Forbes)
+- redhat/kernel.spec.template: Fix RHEL systemd-boot-unsigned dependency (Prarit Bhargava)
+- Add hashtable_test to mod-internal.list (Justin M. Forbes)
+- Add more kunit tests to mod-internal.list for 6.3 (Justin M. Forbes)
+- Flip CONFIG_I2C_ALGOBIT to m (Justin M. Forbes)
+- Flip I2C_ALGOBIT to m to avoid mismatch (Justin M. Forbes)
+- kernel.spec: move modules.builtin to kernel-core (Jan Stancek)
+- Turn on IDLE_INJECT for x86 (Justin M. Forbes)
+- Flip CONFIG_IDLE_INJECT in pending (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_V4L_TEST_DRIVERS related drivers (Enric Balletbo i Serra)
+- redhat/configs: Enable UCSI_CCG support (David Marlin)
+- Fix underline mark-up after text change (Justin M. Forbes)
+- Turn on CONFIG_XFS_RT for Fedora (Justin M. Forbes)
+- Consolidate common configs for 6.2 (Justin M. Forbes)
+- aarch64: enable zboot (Gerd Hoffmann)
+- redhat: remove duplicate pending-rhel config items (Patrick Talbert)
+- Disable frame pointers (Justin M. Forbes)
+- redhat/configs: update scripts and docs for ark -> rhel rename (Clark Williams)
+- redhat/configs: rename ark configs dir to rhel (Clark Williams)
+- Turn off CONFIG_DEBUG_INFO_COMPRESSED_ZLIB for ppc64le (Justin M. Forbes)
+- kernel.spec: package unstripped kselftests/bpf/test_progs (Jan Stancek)
+- kernel.spec: allow to package some binaries as unstripped (Jan Stancek)
+- redhat/configs: Make merge.py portable for older python (Desnes Nunes)
+- Fedora configs for 6.2 (Justin M. Forbes)
+- redhat: Repair ELN build broken by the recent UKI changes (Vitaly Kuznetsov)
+- redhat/configs: enable CONFIG_INET_DIAG_DESTROY (Andrea Claudi)
+- Enable TDX Guest driver (Vitaly Kuznetsov)
+- redhat/configs: Enable CONFIG_PCIE_PTM generically (Corinna Vinschen)
+- redhat: Add sub-RPM with a EFI unified kernel image for virtual machines (Vitaly Kuznetsov)
+- redhat/Makefile: Remove GIT deprecated message (Prarit Bhargava)
+- Revert "redhat: configs: Disable xtables and ipset" (Phil Sutter)
+- redhat/configs: Enable CONFIG_SENSORS_LM90 for RHEL (Mark Salter)
+- Fix up SQUASHFS decompression configs (Justin M. Forbes)
+- redhat/configs: enable CONFIG_OCTEON_EP as a module in ARK (Michal Schmidt) [2041990]
+- redhat: ignore rpminspect runpath report on urandom_read selftest binaries (Herton R. Krzesinski)
+- kernel.spec: add llvm-devel build requirement (Scott Weaver)
+- Update self-test data to not expect debugbuildsenabled 0 (Justin M. Forbes)
+- Turn off forced debug builds (Justin M. Forbes)
+- Turn on debug builds for aarch64 Fedora (Justin M. Forbes)
+- redhat/configs: modify merge.py to match old overrides input (Clark Williams)
+- redhat: fixup pylint complaints (Clark Williams)
+- redhat: remove merge.pl and references to it (Clark Williams)
+- redhat: update merge.py to handle merge.pl corner cases (Clark Williams)
+- Revert "redhat: fix elf got hardening for vm tools" (Don Zickus)
+- Update rebase notes for Fedora (Justin M. Forbes)
+- Update CONFIG_LOCKDEP_CHAINS_BITS to 19 (cmurf)
+- redhat/configs: Turn on CONFIG_SPI_TEGRA210_QUAD for RHEL (Mark Salter)
+- ark: aarch64: drop CONFIG_SMC911X (Peter Robinson)
+- all: cleanup and de-dupe CDROM_PKTCDVD options. (Peter Robinson)
+- all: remove CRYPTO_GF128MUL (Peter Robinson)
+- all: cleanup UEFI options (Peter Robinson)
+- common: arm64: Enable Ampere Altra SMpro Hardware Monitoring (Peter Robinson)
+- fedora: enable STACKPROTECTOR_STRONG (Peter Robinson)
+- fedora: enable STACKPROTECTOR on arm platforms (Peter Robinson)
+- redhat/self-test: Update data with ENABLE_WERROR (Prarit Bhargava)
+- redhat/Makefile.variables: Add ENABLE_WERROR (Prarit Bhargava)
+- makefile: Add -Werror support for RHEL (Prarit Bhargava)
+- redhat/Makefile.variables: Remove mention of Makefile.rhpkg (Prarit Bhargava)
+- redhat/Makefile.variables: Alphabetize variables (Prarit Bhargava)
+- gitlab-ci: use CI templates from production branch (Michael Hofmann)
+- redhat/kernel.spec.template: Fix internal "File listed twice" errors (Prarit Bhargava)
+- redhat: Remove stale .tmp_versions code and comments (Prarit Bhargava)
+- redhat/kernel.spec.template: Fix vmlinux_decompressor on !s390x (Prarit Bhargava)
+- redhat/kernel.spec.template: Remove unnecessary output from pathfix.py (Prarit Bhargava)
+- Modularize CONFIG_ARM_CORESIGHT_PMU_ARCH_SYSTEM_PMU (Mark Salter)
+- redhat/kernel.spec.template: Parallelize compression (Prarit Bhargava)
+- config: Enable Security Path (Ricardo Robaina)
+- redhat/self-test/data: Regenerate self-test data for make change (Prarit Bhargava)
+- Update module filters for nvmem_u-boot-env (Justin M. Forbes)
+- fedora: Updates for 6.2 merge (Peter Robinson)
+- fedora: Updates for 6.1 merge (Peter Robinson)
+- modules-core: use %%posttrans (Gerd Hoffmann)
+- split sub-rpm kernel-modules-core from kernel-core (Gerd Hoffmann)
+- Turn off CONFIG_MTK_T7XX for S390x (Justin M. Forbes)
+- CI: add variable for variant handling (Veronika Kabatova)
+- Fix up configs with SND_SOC_NAU8315 mismatch (Justin M. Forbes)
+- CI: Do a full build for non-bot runs (Veronika Kabatova)
+- Fix up configs with SND_SOC_NAU8315 mismatch (Justin M. Forbes)
+- kernel/rh_messages.c: gcc12 warning on redundant NULL test (Eric Chanudet) [2142658]
+- redhat/configs: Enable CRYPTO_CURVE25519 in ark (Prarit Bhargava)
+- general: arm: cleanup ASPEED options (Peter Robinson)
+- redhat/configs: ALSA - cleanups for the AMD Pink Sardine DMIC driver (Jaroslav Kysela)
+- redhat/docs: Add FAQ entry for booting between Fedora & ELN/RHEL kernels (Prarit Bhargava)
+- spec: add missing BuildRequires: python3-docutils for tools (Ondrej Mosnacek)
+- config: enable RCU_TRACE for debug kernels (Wander Lairson Costa)
+- Add siphash_kunit and strscpy_kunit to mod-internal.list (Justin M. Forbes)
+- Add drm_kunit_helpers to mod-internal.list (Justin M. Forbes)
+- Fix up configs for Fedora so we don't have a mismatch (Justin M. Forbes)
+- Turn on CONFIG_SQUASHFS_DECOMP_SINGLE in pending (Justin M. Forbes)
+- redhat/kernel.spec.template: Fix cpupower file error (Prarit Bhargava)
+- redhat/configs: aarhc64: clean up some erratum configs (Mark Salter)
+- More Fedora configs for 6.1 as deps were switched on (Justin M. Forbes)
+- redhat/configs: make SOC_TEGRA_CBB a module (Mark Salter)
+- redhat/configs: aarch64: reorganize tegra configs to common dir (Mark Salter)
+- Enforces buildroot if cross_arm (Nicolas Chauvet)
+- Handle automated case when config generation works correctly (Don Zickus)
+- Turn off CONFIG_CRYPTO_ARIA_AESNI_AVX_X86_64 (Justin M. Forbes)
+- Turn off CONFIG_EFI_ZBOOT as it makes CKI choke (Justin M. Forbes)
+- Fedora config updates for 6.1 (Justin M. Forbes)
+- redhat: Remove cpupower files (Prarit Bhargava)
+- redhat/configs: update CXL-related options to match what RHEL will use (John W. Linville)
+- Clean up the config for the Tegra186 timer (Al Stone)
+- redhat/configs: move CONFIG_TEGRA186_GPC_DMA config (Mark Salter)
+- Check for kernel config git-push failures (Don Zickus)
+- redhat: genlog.sh failures should interrupt the recipe (Patrick Talbert)
+- Turn CONFIG_GNSS back on for Fedora (Justin M. Forbes)
+- redhat/configs: enable CONFIG_GNSS for RHEL (Michal Schmidt)
+- Turn off NVMEM_U_BOOT_ENV for fedora (Justin M. Forbes)
+- Consolidate matching fedora and ark entries to common (Justin M. Forbes)
+- Empty out redhat/configs/common (Justin M. Forbes)
+- Adjust path to compressed vmlinux kernel image for s390x (Justin M. Forbes) [2149273]
+- Fedora config updates for 6.1 (Justin M. Forbes)
+- redhat: genlog.sh should expect genlog.py in the current directory (Patrick Talbert)
+- redhat/configs: consolidate CONFIG_TEST_LIVEPATCH=m (Joe Lawrence)
+- redhat/configs: enable CONFIG_TEST_LIVEPATCH=m for s390x (Julia Denham)
+- Revert "Merge branch 'ark-make-help' into 'os-build'" (Scott Weaver)
+- Remove recommendation to use 'common' for config changes. (Don Zickus)
+- Update config to add i3c support for AArch64 (Mark Charlebois)
+- redhat: Move cross-compile scripts into their own directory (Prarit Bhargava)
+- redhat: Move yaml files into their own directory (Prarit Bhargava)
+- redhat: Move update_scripts.sh into redhat/scripts (Prarit Bhargava)
+- redhat: Move kernel-tools scripts into their own directory (Prarit Bhargava)
+- redhat: Move gen-* scripts into their own directory (Prarit Bhargava)
+- redhat: Move mod-* scripts into their own directory (Prarit Bhargava)
+- redhat/Makefile: Fix RHJOBS grep warning (Prarit Bhargava)
+- redhat: Force remove tmp file (Prarit Bhargava)
+- redhat/configs: ALSA - cleanups for the CentOS 9.2 update (Jaroslav Kysela)
+- CI: Use CKI container images from quay.io (Veronika Kabatova)
+- redhat: clean up the partial-kgcov-snip.config file (Patrick Talbert)
+- redhat: avoid picking up stray editor backups when processing configs (Clark Williams)
+- CI: Remove old configs (Veronika Kabatova)
+- redhat: override `make help` to include dist-help (Jonathan Toppins)
+- redhat: make RHTEST stricter (Jonathan Toppins)
+- redhat: Enable support for SN2201 system (Ivan Vecera)
+- redhat/docs/index.rst: Add FLAVOR information to generate configs for local builds (Enric Balletbo i Serra)
+- redhat: fix selftest git command so it picks the right commit (Patrick Talbert)
+- redhat/configs: enable HP_WATCHDOG for aarch64 (Mark Salter)
+- redhat: disable Kfence Kunit Test (Nico Pache)
+- configs: enable CONFIG_LRU_GEN_ENABLED everywhere (Patrick Talbert)
+- redhat: Enable WWAN feature and support for Intel, Qualcomm and Mediatek devices (Jose Ignacio Tornos Martinez)
+- Turn on dln2 support (RHBZ 2110372) (Justin M. Forbes)
+- Enable configs for imx8m PHYs (Al Stone)
+- configs/fedora: Build some SC7180 clock controllers as modules (Javier Martinez Canillas)
+- redhat/configs: Disable fbdev drivers and use simpledrm everywhere (Javier Martinez Canillas) [1986223]
+- redhat: fix the branch we pull from the documentation tree (Herton R. Krzesinski)
+- redhat/configs: change so watchdog is module versus builtin (Steve Best)
+- redhat/configs: move CONFIG_ACPI_VIDEO to common/generic (Mark Langsdorf)
+- enable imx8xm I2C configs properly (Al Stone)
+- configs/fedora: Enable a few more drivers needed by the HP X2 Chromebook (Javier Martinez Canillas)
+- enable the rtc-rv8803 driver on RHEL and Fedora (David Arcari)
+- redhat/Makefile: Remove BUILD_SCRATCH_TARGET (Prarit Bhargava)
+- configs: move CONFIG_INTEL_TDX_GUEST to common directory (Wander Lairson Costa)
+- redhat/Makefile: Use new BUILD_TARGET for RHEL dist[g]-brew target (Prarit Bhargava)
+- redhat: method.py: change the output loop to use 'values' method (Patrick Talbert)
+- redhat: use 'update' method in merge.py (Patrick Talbert)
+- redhat: Use a context manager in merge.py for opening the config file for reading (Patrick Talbert)
+- redhat: automatically strip newlines in merge.py (Clark Williams)
+- redhat: python replacement for merge.pl (Clark Williams)
+- redhat/docs: Update with DISTLOCALVERSION (Prarit Bhargava)
+- redhat/Makefile: Rename LOCALVERSION to DISTLOCALVERSION (Akihiko Odaki)
+- Adjust FIPS module name in RHEL (Vladis Dronov)
+- spec: prevent git apply from searching for the .git directory (Ondrej Mosnacek)
+- redhat: Remove parallel_xz.sh (Prarit Bhargava)
+- Turn on Multi-Gen LRU for Fedora (Justin M. Forbes)
+- Add kasan_test to mod-internal.list (Justin M. Forbes)
+- redhat/Makefile.variables: Fix typo with RHDISTGIT_TMP (Prarit Bhargava)
+- spec: fix path to `installing_core` stamp file for subpackages (Jonathan Lebon)
+- Remove unused ci scripts (Don Zickus)
+- Rename rename FORCE_MAX_ZONEORDER to ARCH_FORCE_MAX_ORDER in configs (Justin M. Forbes)
+- redhat: Add new fortify_kunit & is_signed_type_kunit to mod-internal.list (Patrick Talbert)
+- Rename rename FORCE_MAX_ZONEORDER to ARCH_FORCE_MAX_ORDER in pending (Justin M. Forbes)
+- Add acpi video to the filter_modules.sh for rhel (Justin M. Forbes)
+- Change acpi_bus_get_acpi_device to acpi_get_acpi_dev (Justin M. Forbes)
+- Turn on ACPI_VIDEO for arm (Justin M. Forbes)
+- Turn on CONFIG_PRIME_NUMBERS as a module (Justin M. Forbes)
+- Add new drm kunit tests to mod-internal.list (Justin M. Forbes)
+- redhat: fix elf got hardening for vm tools (Frantisek Hrbata)
+- kernel.spec.template: remove some temporary files early (Ondrej Mosnacek)
+- kernel.spec.template: avoid keeping two copies of vmlinux (Ondrej Mosnacek)
+- Add fortify_kunit to mod-internal.list (Justin M. Forbes)
+- Add module filters for Fedora as acpi video has new deps (Justin M. Forbes)
+- One more mismatch (Justin M. Forbes)
+- Fix up pending for mismatches (Justin M. Forbes)
+- Forgot too remove this from pending, it is set properly in ark (Justin M. Forbes)
+- redhat/Makefile: Add DIST to git tags for RHEL (Prarit Bhargava)
+- redhat/configs: Move CONFIG_ARM_SMMU_QCOM_DEBUG to common (Jerry Snitselaar)
+- Common config cleanup for 6.0 (Justin M. Forbes)
+- Allow selftests to fail without killing the build (Justin M. Forbes)
+- redhat: Remove redhat/Makefile.rhpkg (Prarit Bhargava)
+- redhat/Makefile: Move RHDISTGIT_CACHE and RHDISTGIT_TMP (Prarit Bhargava)
+- redhat/Makefile.rhpkg: Remove RHDISTGIT_USER (Prarit Bhargava)
+- redhat/Makefile: Move RHPKG_BIN to redhat/Makefile (Prarit Bhargava)
+- common: clean up Android option with removal of CONFIG_ANDROID (Peter Robinson)
+- redhat/configs: Remove x86_64 from priority files (Prarit Bhargava)
+- redhat/configs/pending-ark: Remove x86_64 directory (Prarit Bhargava)
+- redhat/configs/pending-fedora: Remove x86_64 directory (Prarit Bhargava)
+- redhat/configs/fedora: Remove x86_64 directory (Prarit Bhargava)
+- redhat/configs/common: Remove x86_64 directory (Prarit Bhargava)
+- redhat/configs/ark: Remove x86_64 directory (Prarit Bhargava)
+- redhat/configs/custom-overrides: Remove x86_64 directory (Prarit Bhargava)
+- configs: use common CONFIG_ARM64_SME for ark and fedora (Mark Salter)
+- redhat/configs: Add a warning message to priority.common (Prarit Bhargava)
+- redhat/configs: Enable INIT_STACK_ALL_ZERO for Fedora (Miko Larsson)
+- redhat: Set CONFIG_MAXLINEAR_GPHY to =m (Petr Oros)
+- redhat/configs enable CONFIG_INTEL_IFS (David Arcari)
+- redhat: Remove filter-i686.sh.rhel (Prarit Bhargava)
+- redhat/Makefile: Set PATCHLIST_URL to none for RHEL/cs9 (Prarit Bhargava)
+- redhat: remove GL_DISTGIT_USER, RHDISTGIT and unify dist-git cloning (Prarit Bhargava)
+- redhat/Makefile.variables: Add ADD_COMMITID_TO_VERSION (Prarit Bhargava)
+- kernel.spec: disable vmlinux.h generation for s390 zfcpdump config (Prarit Bhargava)
+- perf: Require libbpf 0.6.0 or newer (Prarit Bhargava)
+- kabi: add stablelist helpers (Prarit Bhargava)
+- Makefile: add kabi targets (Prarit Bhargava)
+- kabi: add support for symbol namespaces into check-kabi (Prarit Bhargava)
+- kabi: ignore new stablelist metadata in show-kabi (Prarit Bhargava)
+- redhat/Makefile: add dist-assert-tree-clean target (Prarit Bhargava)
+- redhat/kernel.spec.template: Specify vmlinux.h path when building samples/bpf (Prarit Bhargava) [2041365]
+- spec: Fix separate tools build (Prarit Bhargava) [2054579]
+- redhat/scripts: Update merge-subtrees.sh with new subtree location (Prarit Bhargava)
+- redhat/kernel.spec.template: enable dependencies generation (Prarit Bhargava)
+- redhat: build and include memfd to kernel-selftests-internal (Prarit Bhargava) [2027506]
+- redhat/kernel.spec.template: Link perf with --export-dynamic (Prarit Bhargava)
+- redhat: kernel.spec: selftests: abort on build failure (Prarit Bhargava)
+- redhat: configs: move CONFIG_SERIAL_MULTI_INSTANTIATE=m settings to common/x86 (Jaroslav Kysela)
+- configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter)
+- all: cleanup dell config options (Peter Robinson)
+- redhat: Include more kunit tests (Nico Pache)
+- common: some minor cleanups/de-dupe (Peter Robinson)
+- common: enable INTEGRITY_MACHINE_KEYRING on all configuraitons (Peter Robinson)
+- Fedora 6.0 configs update (Justin M. Forbes)
+- redhat/self-test: Ignore .rhpkg.mk files (Prarit Bhargava)
+- redhat/configs: Enable CONFIG_PRINTK_INDEX on Fedora (Prarit Bhargava)
+- redhat/configs: Cleanup CONFIG_X86_KERNEL_IBT (Prarit Bhargava)
+- Fix up SND_CTL debug options (Justin M. Forbes)
+- redhat: create /boot symvers link if it doesn't exist (Jan Stancek)
+- redhat: remove duplicate kunit tests in mod-internal.list (Nico Pache)
+- configs/fedora: Make Fedora work with HNS3 network adapter (Zamir SUN)
+- redhat/configs/fedora/generic: Enable CONFIG_BLK_DEV_UBLK on Fedora (Richard W.M. Jones) [2122595]
+- fedora: disable IWLMEI (Peter Robinson)
+- redhat/configs: enable UINPUT on aarch64 (Benjamin Tissoires)
+- Fedora 6.0 configs part 1 (Justin M. Forbes)
+- redhat/Makefile: Always set UPSTREAM (Prarit Bhargava)
+- redhat/configs: aarch64: Turn on Apple Silicon configs for Fedora (Eric Curtin)
+- Add cpumask_kunit to mod-internal.list (Justin M. Forbes)
+- config - consolidate disabled MARCH options on s390x (Dan Horák)
+- move the baseline arch to z13 for s390x in F-37+ (Dan Horák)
+- redhat/scripts/rh-dist-git.sh: Fix outdated cvs reference (Prarit Bhargava)
+- redhat/scripts/expand_srpm.sh: Use Makefile variables (Prarit Bhargava)
+- redhat/scripts/clone_tree.sh: Use Makefile variables (Prarit Bhargava)
+- Fedora: arm changes for 6.0, part 1, with some ACPI (Peter Robinson)
+- redhat/self-test: Fix shellcheck errors (Prarit Bhargava)
+- redhat/docs: Add dist-brew BUILD_FLAGS information (Prarit Bhargava)
+- redhat: change the changelog item for upstream merges (Herton R. Krzesinski)
+- redhat: fix dist-release build number test (Herton R. Krzesinski)
+- redhat: fix release number bump when dist-release-changed runs (Herton R. Krzesinski)
+- redhat: use new genlog.sh script to detect changes for dist-release (Herton R. Krzesinski)
+- redhat: move changelog addition to the spec file back into genspec.sh (Herton R. Krzesinski)
+- redhat: always add a rebase entry when ark merges from upstream (Herton R. Krzesinski)
+- redhat: drop merge ark patches hack (Herton R. Krzesinski)
+- redhat: don't hardcode temporary changelog file (Herton R. Krzesinski)
+- redhat: split changelog generation from genspec.sh (Herton R. Krzesinski)
+- redhat: configs: Disable FIE on arm (Jeremy Linton) [2012226]
+- redhat/Makefile: Clean linux tarballs (Prarit Bhargava)
+- redhat/configs: Cleanup CONFIG_ACPI_AGDI (Prarit Bhargava)
+- spec: add cpupower daemon reload on install/upgrade (Jarod Wilson)
+- redhat: properly handle binary files in patches (Ondrej Mosnacek)
+- Add python3-setuptools buildreq for perf (Justin M. Forbes)
+- Add cros_kunit to mod-internal.list (Justin M. Forbes)
+- Add new tests to mod-internal.list (Justin M. Forbes)
+- Turn off some Kunit tests in pending (Justin M. Forbes)
+- Clean up a mismatch in Fedora configs (Justin M. Forbes)
+- redhat/configs: Sync up Retbleed configs with centos-stream (Waiman Long)
+- Change CRYPTO_BLAKE2S_X86 from m to y (Justin M. Forbes)
+- Leave CONFIG_ACPI_VIDEO on for x86 only (Justin M. Forbes)
+- Fix BLAKE2S_ARM and BLAKE2S_X86 configs in pending (Justin M. Forbes)
+- Fix pending for ACPI_VIDEO (Justin M. Forbes)
+- redhat/configs: Fix rm warning on config warnings (Eric Chanudet)
+- redhat/Makefile: Deprecate PREBUILD_GIT_ONLY variable (Prarit Bhargava)
+- redhat/Makefile: Deprecate SINGLE_TARBALL variable (Prarit Bhargava)
+- redhat/Makefile: Deprecate GIT variable (Prarit Bhargava)
+- Update CONFIG_LOCKDEP_CHAINS_BITS to 18 (cmurf)
+- Add new FIPS module name and version configs (Vladis Dronov)
+- redhat/configs/fedora: Make PowerPC's nx-gzip buildin (Jakub Čajka)
+- omit unused Provides (Dan Horák)
+- self-test: Add test for DIST=".eln" (Prarit Bhargava)
+- redhat: Enable CONFIG_LZ4_COMPRESS on Fedora (Prarit Bhargava)
+- fedora: armv7: enable MMC_STM32_SDMMC (Peter Robinson)
+- .gitlab-ci.yaml: Add test for dist-get-buildreqs target (Prarit Bhargava)
+- redhat/docs: Add information on build dependencies (Prarit Bhargava)
+- redhat/Makefile: Add better pass message for dist-get-buildreqs (Prarit Bhargava)
+- redhat/Makefile: Provide a better message for system-sb-certs (Prarit Bhargava)
+- redhat/Makefile: Change dist-buildreq-check to a non-blocking target (Prarit Bhargava)
+- create-data: Parallelize spec file data (Prarit Bhargava)
+- create-data.sh: Store SOURCES Makefile variable (Prarit Bhargava)
+- redhat/Makefile: Split up setup-source target (Prarit Bhargava)
+- create-data.sh: Redefine varfilename (Prarit Bhargava)
+- create-data.sh: Parallelize variable file creation (Prarit Bhargava)
+- redhat/configs: Enable CONFIG_LZ4_COMPRESS (Prarit Bhargava)
+- redhat/docs: Update brew information (Prarit Bhargava)
+- redhat/Makefile: Fix eln BUILD_TARGET (Prarit Bhargava)
+- redhat/Makefile: Set BUILD_TARGET for dist-brew (Prarit Bhargava)
+- kernel.spec.template: update (s390x) expoline.o path (Joe Lawrence)
+- fedora: enable BCM_NET_PHYPTP (Peter Robinson)
+- Fedora 5.19 configs update part 2 (Justin M. Forbes)
+- redhat/Makefile: Change fedora BUILD_TARGET (Prarit Bhargava)
+- New configs in security/keys (Fedora Kernel Team)
+- Fedora: arm: enable a pair of drivers (Peter Robinson)
+- redhat: make kernel-zfcpdump-core to not provide kernel-core/kernel (Herton R. Krzesinski)
+- redhat/configs: Enable QAT devices for arches other than x86 (Vladis Dronov)
+- Fedora 5.19 configs pt 1 (Justin M. Forbes)
+- redhat: Exclude cpufreq.h from kernel-headers (Patrick Talbert)
+- Add rtla subpackage for kernel-tools (Justin M. Forbes)
+- fedora: arm: enable a couple of QCom drivers (Peter Robinson)
+- redhat/Makefile: Deprecate BUILD_SCRATCH_TARGET (Prarit Bhargava)
+- redhat: enable CONFIG_DEVTMPFS_SAFE (Mark Langsdorf)
+- redhat/Makefile: Remove deprecated variables and targets (Prarit Bhargava)
+- Split partner modules into a sub-package (Alice Mitchell)
+- Enable kAFS and it's dependancies in RHEL (Alice Mitchell)
+- Enable Marvell OcteonTX2 crypto device in ARK (Vladis Dronov)
+- redhat/Makefile: Remove --scratch from BUILD_TARGET (Prarit Bhargava)
+- redhat/Makefile: Fix dist-brew and distg-brew targets (Prarit Bhargava)
+- fedora: arm64: Initial support for TI Keystone 3 (ARCH_K3) (Peter Robinson)
+- fedora: arm: enable Hardware Timestamping Engine support (Peter Robinson)
+- fedora: wireless: disable SiLabs and PureLiFi (Peter Robinson)
+- fedora: updates for 5.19 (Peter Robinson)
+- fedora: minor updates for Fedora configs (Peter Robinson)
+- configs/fedora: Enable the pinctrl SC7180 driver built-in (Enric Balletbo i Serra)
+- redhat/configs: enable CONFIG_DEBUG_NET for debug kernel (Hangbin Liu)
+- redhat/Makefile: Add SPECKABIVERSION variable (Prarit Bhargava)
+- redhat/self-test: Provide better failure output (Prarit Bhargava)
+- redhat/self-test: Reformat tests to kernel standard (Prarit Bhargava)
+- redhat/self-test: Add purpose and header to each test (Prarit Bhargava)
+- Drop outdated CRYPTO_ECDH configs (Vladis Dronov)
+- Brush up crypto SHA512 and USER configs (Vladis Dronov)
+- Brush up crypto ECDH and ECDSA configs (Vladis Dronov)
+- redhat/self-test: Update data set (Prarit Bhargava)
+- create-data.sh: Reduce specfile data output (Prarit Bhargava)
+- redhat/configs: restore/fix core INTEL_LPSS configs to be builtin again (Hans de Goede)
+- Enable CKI on os-build MRs only (Don Zickus)
+- self-test: Fixup Makefile contents test (Prarit Bhargava)
+- redhat/self-test: self-test data update (Prarit Bhargava)
+- redhat/self-test: Fix up create-data.sh to not report local variables (Prarit Bhargava)
+- redhat/configs/fedora: Enable a set of modules used on some x86 tablets (Hans de Goede)
+- redhat/configs: Make INTEL_SOC_PMIC_CHTDC_TI builtin (Hans de Goede)
+- redhat/configs/fedora: enable missing modules modules for Intel IPU3 camera support (Hans de Goede)
+- Common: minor cleanups (Peter Robinson)
+- fedora: some minor Fedora cleanups (Peter Robinson)
+- fedora: drop X86_PLATFORM_DRIVERS_DELL dupe (Peter Robinson)
+- redhat: change tools_make macro to avoid full override of variables in Makefile (Herton R. Krzesinski)
+- Fix typo in Makefile for Fedora Stable Versioning (Justin M. Forbes)
+- Remove duplicates from ark/generic/s390x/zfcpdump/ (Vladis Dronov)
+- Move common/debug/s390x/zfcpdump/ configs to ark/debug/s390x/zfcpdump/ (Vladis Dronov)
+- Move common/generic/s390x/zfcpdump/ configs to ark/generic/s390x/zfcpdump/ (Vladis Dronov)
+- Drop RCU_EXP_CPU_STALL_TIMEOUT to 0, we are not really android (Justin M. Forbes)
+- redhat/configs/README: Update the README (Prarit Bhargava)
+- redhat/docs: fix hyperlink typo (Patrick Talbert)
+- all: net: remove old NIC/ATM drivers that use virt_to_bus() (Peter Robinson)
+- Explicitly turn off CONFIG_KASAN_INLINE for ppc (Justin M. Forbes)
+- redhat/docs: Add a description of kernel naming (Prarit Bhargava)
+- Change CRYPTO_CHACHA_S390 from m to y (Justin M. Forbes)
+- enable CONFIG_NET_ACT_CTINFO in ark (Davide Caratti)
+- redhat/configs: enable CONFIG_SP5100_TCO (David Arcari)
+- redhat/configs: Set CONFIG_VIRTIO_IOMMU on x86_64 (Eric Auger) [2089765]
+- Turn off KASAN_INLINE for RHEL ppc in pending (Justin M. Forbes)
+- redhat/kernel.spec.template: update selftest data via "make dist-self-test-data" (Denys Vlasenko)
+- redhat/kernel.spec.template: remove stray *.hardlink-temporary files, if any (Denys Vlasenko)
+- Fix up ZSMALLOC config for s390 (Justin M. Forbes)
+- Turn on KASAN_OUTLINE for ppc debug (Justin M. Forbes)
+- Turn on KASAN_OUTLINE for PPC debug to avoid mismatch (Justin M. Forbes)
+- Fix up crypto config mistmatches (Justin M. Forbes)
+- Fix up config mismatches (Justin M. Forbes)
+- generic/fedora: cleanup and disable Lightning Moutain SoC (Peter Robinson)
+- redhat: Set SND_SOC_SOF_HDA_PROBES to =m (Patrick Talbert)
+- Fix versioning on stable Fedora (Justin M. Forbes)
+- Enable PAGE_POOL_STATS for arm only (Justin M. Forbes)
+- Revert "Merge branch 'fix-ci-20220523' into 'os-build'" (Patrick Talbert)
+- Flip CONFIG_RADIO_ADAPTERS to module for Fedora (Justin M. Forbes)
+- redhat/Makefile: Drop quotation marks around string definitions (Prarit Bhargava)
+- Fedora: arm: Updates for QCom devices (Peter Robinson)
+- Fedora arm and generic updates for 5.17 (Peter Robinson)
+- enable COMMON_CLK_SI5341 for Xilinx ZYNQ-MP (Peter Robinson)
+- Turn on CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING for Fedora (Justin M. Forbes)
+- redhat/self-test/data: Update data set (Prarit Bhargava)
+- Revert variable switch for lasttag (Justin M. Forbes)
+- redhat: Add self-tests to .gitlab-ci.yml (Prarit Bhargava)
+- redhat/self-test: Update data (Prarit Bhargava)
+- redhat/self-test: Unset Makefile variables (Prarit Bhargava)
+- redhat/self-test: Omit SHELL variable from test data (Prarit Bhargava)
+- Add CONFIG_EFI_DXE_MEM_ATTRIBUTES (Justin M. Forbes)
+- Update filter-modules for mlx5-vfio-pci (Justin M. Forbes)
+- Fedora configs for 5.18 (Justin M. Forbes)
+- self-test/data/create-data.sh: Avoid SINGLE_TARBALL warning (Prarit Bhargava)
+- redhat/Makefile: Rename PREBUILD to UPSTREAMBUILD (Prarit Bhargava)
+- redhat/Makefile: Rename BUILDID to LOCALVERSION (Prarit Bhargava)
+- redhat/Makefile: Fix dist-brew & distg-brew targets (Prarit Bhargava)
+- redhat/Makefile: Reorganize MARKER code (Prarit Bhargava)
+- redhat/scripts/new_release.sh: Use Makefile variables (Prarit Bhargava)
+- redhat/Makefile: Rename __YSTREAM and __ZSTREAM (Prarit Bhargava)
+- redhat/genspec.sh: Add comment about SPECBUILDID variable (Prarit Bhargava)
+- redhat/kernel.spec.template: Move genspec variables into one section (Prarit Bhargava)
+- redhat/kernel.spec.template: Remove kversion (Prarit Bhargava)
+- redhat/Makefile: Add SPECTARFILE_RELEASE comment (Prarit Bhargava)
+- redhat/Makefile: Rename RPMVERSION to BASEVERSION (Prarit Bhargava)
+- redhat/Makefile: Target whitespace cleanup (Prarit Bhargava)
+- redhat/Makefile: Move SPECRELEASE to genspec.sh (Prarit Bhargava)
+- redhat/Makefile: Add kernel-NVR comment (Prarit Bhargava)
+- redhat/Makefile: Use SPECFILE variable (Prarit Bhargava)
+- redhat/Makefile: Remove KEXTRAVERSION (Prarit Bhargava)
+- redhat: Enable VM kselftests (Nico Pache) [1978539]
+- redhat: enable CONFIG_TEST_VMALLOC for vm selftests (Nico Pache)
+- redhat: Enable HMM test to be used by the kselftest test suite (Nico Pache)
+- redhat/Makefile.variables: Change git hash length to default (Prarit Bhargava)
+- redhat/Makefile: Drop quotation marks around string definitions (Prarit Bhargava)
+- Turn on INTEGRITY_MACHINE_KEYRING for Fedora (Justin M. Forbes)
+- redhat/configs: fix CONFIG_INTEL_ISHTP_ECLITE (David Arcari)
+- redhat/configs: Fix rm warning on error (Prarit Bhargava)
+- Fix nightly merge CI (Don Zickus)
+- redhat/kernel.spec.template: fix standalone tools build (Jan Stancek)
+- Add system-sb-certs for RHEL-9 (Don Zickus)
+- Fix dist-buildcheck-reqs (Don Zickus)
+- move DAMON configs to correct directory (Chris von Recklinghausen)
+- redhat: indicate HEAD state in tarball/rpm name (Jarod Wilson)
+- Fedora 5.18 config set part 1 (Justin M. Forbes)
+- fedora: arm: Enable new Rockchip 356x series drivers (Peter Robinson)
+- fedora: arm: enable DRM_I2C_NXP_TDA998X on aarch64 (Peter Robinson)
+- redhat/self-test: Add test to verify Makefile declarations. (Prarit Bhargava)
+- redhat/Makefile: Add RHTEST (Prarit Bhargava)
+- redhat: shellcheck cleanup (Prarit Bhargava)
+- redhat/self-test/data: Cleanup data (Prarit Bhargava)
+- redhat/self-test: Add test to verify SPEC variables (Prarit Bhargava)
+- redhat/Makefile: Add 'duplicate' SPEC entries for user set variables (Prarit Bhargava)
+- redhat/Makefile: Rename TARFILE_RELEASE to SPECTARFILE_RELEASE (Prarit Bhargava)
+- redhat/genspec: Rename PATCHLIST_CHANGELOG to SPECPATCHLIST_CHANGELOG (Prarit Bhargava)
+- redhat/genspec: Rename DEBUG_BUILDS_ENABLED to SPECDEBUG_BUILDS_ENABLED (Prarit Bhargava)
+- redhat/Makefile: Rename PKGRELEASE to SPECBUILD (Prarit Bhargava)
+- redhat/genspec: Rename BUILDID_DEFINE to SPECBUILDID (Prarit Bhargava)
+- redhat/Makefile: Rename CHANGELOG to SPECCHANGELOG (Prarit Bhargava)
+- redhat/Makefile: Rename RPMKEXTRAVERSION to SPECKEXTRAVERSION (Prarit Bhargava)
+- redhat/Makefile: Rename RPMKSUBLEVEL to SPECKSUBLEVEL (Prarit Bhargava)
+- redhat/Makefile: Rename RPMKPATCHLEVEL to SPECKPATCHLEVEL (Prarit Bhargava)
+- redhat/Makefile: Rename RPMKVERSION to SPECKVERSION (Prarit Bhargava)
+- redhat/Makefile: Rename KVERSION to SPECVERSION (Prarit Bhargava)
+- redhat/Makefile: Deprecate some simple targets (Prarit Bhargava)
+- redhat/Makefile: Use KVERSION (Prarit Bhargava)
+- redhat/configs: Set GUP_TEST in debug kernel (Joel Savitz)
+- enable DAMON configs (Chris von Recklinghausen) [2004233]
+- redhat: add zstream switch for zstream release numbering (Herton R. Krzesinski)
+- redhat: change kabi tarballs to use the package release (Herton R. Krzesinski)
+- redhat: generate distgit changelog in genspec.sh as well (Herton R. Krzesinski)
+- redhat: make genspec prefer metadata from git notes (Herton R. Krzesinski)
+- redhat: use tags from git notes for zstream to generate changelog (Herton R. Krzesinski)
+- ARK: Remove code marking devices unmaintained (Peter Georg)
+- rh_message: Fix function name (Peter Georg) [2019377]
+- Turn on CONFIG_RANDOM_TRUST_BOOTLOADER (Justin M. Forbes)
+- redhat/configs: aarch64: enable CPU_FREQ_GOV_SCHEDUTIL (Mark Salter)
+- Move CONFIG_HW_RANDOM_CN10K to a proper place (Vladis Dronov)
+- redhat/self-test: Clean up data set (Prarit Bhargava)
+- redhat/Makefile.rhpkg: Remove quotes for RHDISTGIT (Prarit Bhargava)
+- redhat/scripts/create-tarball.sh: Use Makefile variables (Prarit Bhargava)
+- redhat/Makefile: Deprecate SINGLE_TARBALL (Prarit Bhargava)
+- redhat/Makefile: Move SINGLE_TARBALL to Makefile.variables (Prarit Bhargava)
+- redhat/Makefile: Use RPMVERSION (Prarit Bhargava)
+- redhat/scripts/rh-dist-git.sh: Use Makefile variables (Prarit Bhargava)
+- redhat/configs/build_configs.sh: Use Makefile variables (Prarit Bhargava)
+- redhat/configs/process_configs.sh: Use Makefile variables (Prarit Bhargava)
+- redhat/kernel.spec.template: Use RPM_BUILD_NCPUS (Prarit Bhargava)
+- redhat/configs/generate_all_configs.sh: Use Makefile variables (Prarit Bhargava)
+- redhat/configs: enable nf_tables SYNPROXY extension on ark (Davide Caratti)
+- fedora: Disable fbdev drivers missed before (Javier Martinez Canillas)
+- Redhat: enable Kfence on production servers (Nico Pache)
+- redhat: ignore known empty patches on the patches rpminspect test (Herton R. Krzesinski)
+- kernel-ark: arch_hw Update CONFIG_MOUSE_VSXXXAA=m (Tony Camuso) [2062909]
+- spec: keep .BTF section in modules for s390 (Yauheni Kaliuta) [2071969]
+- kernel.spec.template: Ship arch/s390/lib/expoline.o in kernel-devel (Ondrej Mosnacek)
+- redhat: disable tv/radio media device infrastructure (Jarod Wilson)
+- redhat/configs: clean up INTEL_LPSS configuration (David Arcari)
+- Have to rename the actual contents too (Justin M. Forbes)
+- The CONFIG_SATA_MOBILE_LPM_POLICY rebane was reverted (Justin M. Forbes)
+- redhat: Enable KASAN on all ELN debug kernels (Nico Pache)
+- redhat: configs: Enable INTEL_IOMMU_DEBUGFS for debug builds (Jerry Snitselaar)
+- generic: can: disable CAN_SOFTING everywhere (Peter Robinson)
+- redhat/configs: Enable CONFIG_DM_ERA=m for all (Yanko Kaneti)
+- redhat/configs: enable CONFIG_SAMPLE_VFIO_MDEV_MTTY (Patrick Talbert)
+- Build intel_sdsi with %%{tools_make} (Justin M. Forbes)
+- configs: remove redundant Fedora config for INTEL_IDXD_COMPAT (Jerry Snitselaar)
+- redhat/configs: enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT (Joel Savitz) [2026319]
+- configs: enable CONFIG_RMI4_F3A (Benjamin Tissoires)
+- redhat: configs: Disable TPM 1.2 specific drivers (Jerry Snitselaar)
+- redhat/configs: Enable cr50 I2C TPM interface (Akihiko Odaki)
+- spec: make HMAC file encode relative path (Jonathan Lebon)
+- redhat/kernel.spec.template: Add intel_sdsi utility (Prarit Bhargava)
+- Spec fixes for intel-speed-select (Justin M. Forbes)
+- Add Partner Supported taint flag to kAFS (Alice Mitchell) [2038999]
+- Add Partner Supported taint flag (Alice Mitchell) [2038999]
+- Enabled INTEGRITY_MACHINE_KEYRING for all configs. (Peter Robinson)
+- redhat/configs: Enable CONFIG_RCU_SCALE_TEST & CONFIG_RCU_REF_SCALE_TEST (Waiman Long)
+- Add clk_test and clk-gate_test to mod-internal.list (Justin M. Forbes)
+- redhat/self-tests: Ignore UPSTREAM (Prarit Bhargava)
+- redhat/self-tests: Ignore RHGITURL (Prarit Bhargava)
+- redhat/Makefile.variables: Extend git hash length to 15 (Prarit Bhargava)
+- redhat/self-test: Remove changelog from spec files (Prarit Bhargava)
+- redhat/genspec.sh: Rearrange genspec.sh (Prarit Bhargava)
+- redhat/self-test: Add spec file data (Prarit Bhargava)
+- redhat/self-test: Add better dist-dump-variables test (Prarit Bhargava)
+- redhat/self-test: Add variable test data (Prarit Bhargava)
+- redhat/config: Remove obsolete CONFIG_MFD_INTEL_PMT (David Arcari)
+- redhat/configs: enable CONFIG_INTEL_ISHTP_ECLITE (David Arcari)
+- Avoid creating files in $RPM_SOURCE_DIR (Nicolas Chauvet)
+- Flip CRC64 from off to y (Justin M. Forbes)
+- New configs in lib/Kconfig (Fedora Kernel Team)
+- disable redundant assignment of CONFIG_BQL on ARK (Davide Caratti)
+- redhat/configs: remove unnecessary GPIO options for aarch64 (Brian Masney)
+- redhat/configs: remove viperboard related Kconfig options (Brian Masney)
+- redhat/configs/process_configs.sh: Avoid race with find (Prarit Bhargava)
+- redhat/configs/process_configs.sh: Remove CONTINUEONERROR (Prarit Bhargava)
+- Remove i686 configs and filters (Justin M. Forbes)
+- redhat/configs: Set CONFIG_X86_AMD_PSTATE built-in on Fedora (Prarit Bhargava)
+- Fix up mismatch with CRC64 (Justin M. Forbes)
+- Fedora config updates to fix process_configs (Justin M. Forbes)
+- redhat: Fix release tagging (Prarit Bhargava)
+- redhat/self-test: Fix version tag test (Prarit Bhargava)
+- redhat/self-test: Fix BUILD verification test (Prarit Bhargava)
+- redhat/self-test: Cleanup SRPM related self-tests (Prarit Bhargava)
+- redhat/self-test: Fix shellcheck test (Prarit Bhargava)
+- redhat/configs: Disable watchdog components (Prarit Bhargava)
+- redhat/README.Makefile: Add a Makefile README file (Prarit Bhargava)
+- redhat/Makefile: Remove duplicated code (Prarit Bhargava)
+- Add BuildRequires libnl3-devel for intel-speed-select (Justin M. Forbes)
+- Add new kunit tests for 5.18 to mod-internal.list (Justin M. Forbes)
+- Fix RHDISTGIT for Fedora (Justin M. Forbes)
+- redhat/configs/process_configs.sh: Fix race with tools generation (Prarit Bhargava)
+- New configs in drivers/dax (Fedora Kernel Team)
+- Fix up CONFIG_SND_AMD_ACP_CONFIG files (Patrick Talbert)
+- Remove CONFIG_SND_SOC_SOF_DEBUG_PROBES files (Patrick Talbert)
+- SATA_MOBILE_LPM_POLICY is now SATA_LPM_POLICY (Justin M. Forbes)
+- Define SNAPSHOT correctly when VERSION_ON_UPSTREAM is 0 (Justin M. Forbes)
+- redhat/Makefile: Fix dist-git (Prarit Bhargava)
+- Change the pending-ark CONFIG_DAX to y due to mismatch (Justin M. Forbes)
+- Enable net reference count trackers in all debug kernels (Jiri Benc)
+- redhat/Makefile: Reorganize variables (Prarit Bhargava)
+- redhat/Makefile: Add some descriptions (Prarit Bhargava)
+- redhat/Makefile: Move SNAPSHOT check (Prarit Bhargava)
+- redhat/Makefile: Deprecate BREW_FLAGS, KOJI_FLAGS, and TEST_FLAGS (Prarit Bhargava)
+- redhat/genspec.sh: Rework RPMVERSION variable (Prarit Bhargava)
+- redhat/Makefile: Remove dead comment (Prarit Bhargava)
+- redhat/Makefile: Cleanup KABI* variables. (Prarit Bhargava)
+- redhat/Makefile.variables: Default RHGITCOMMIT to HEAD (Prarit Bhargava)
+- redhat/scripts/create-tarball.sh: Use Makefile TARBALL variable (Prarit Bhargava)
+- redhat/Makefile: Remove extra DIST_BRANCH (Prarit Bhargava)
+- redhat/Makefile: Remove STAMP_VERSION (Prarit Bhargava)
+- redhat/Makefile: Move NO_CONFIGCHECKS to Makefile.variables (Prarit Bhargava)
+- redhat/Makefile: Move RHJOBS to Makefile.variables (Prarit Bhargava)
+- redhat/Makefile: Move RHGIT* variables to Makefile.variables (Prarit Bhargava)
+- redhat/Makefile: Move PREBUILD_GIT_ONLY to Makefile.variables (Prarit Bhargava)
+- redhat/Makefile: Move BUILD to Makefile.variables (Prarit Bhargava)
+- redhat/Makefile: Move BUILD_FLAGS to Makefile.variables. (Prarit Bhargava)
+- redhat/Makefile: Move BUILD_PROFILE to Makefile.variables (Prarit Bhargava)
+- redhat/Makefile: Move BUILD_TARGET and BUILD_SCRATCH_TARGET to Makefile.variables (Prarit Bhargava)
+- redhat/Makefile: Remove RHPRODUCT variable (Prarit Bhargava)
+- redhat/Makefile: Cleanup DISTRO variable (Prarit Bhargava)
+- redhat/Makefile: Move HEAD to Makefile.variables. (Prarit Bhargava)
+- redhat: Combine Makefile and Makefile.common (Prarit Bhargava)
+- redhat/koji/Makefile: Decouple koji Makefile from Makefile.common (Prarit Bhargava)
+- Set CONFIG_SND_SOC_SOF_MT8195 for Fedora and turn on VDPA_SIM_BLOCK (Justin M. Forbes)
+- Add asus_wmi_sensors modules to filters for Fedora (Justin M. Forbes)
+- redhat: spec: trigger dracut when modules are installed separately (Jan Stancek)
+- Last of the Fedora 5.17 configs initial pass (Justin M. Forbes)
+- redhat/Makefile: Silence dist-clean-configs output (Prarit Bhargava)
+- Fedora 5.17 config updates (Justin M. Forbes)
+- Setting CONFIG_I2C_SMBUS to "m" for ark (Gopal Tiwari)
+- Print arch with process_configs errors (Justin M. Forbes)
+- Pass RHJOBS to process_configs for dist-configs-check as well (Justin M. Forbes)
+- redhat/configs/process_configs.sh: Fix issue with old error files (Prarit Bhargava)
+- redhat/configs/build_configs.sh: Parallelize execution (Prarit Bhargava)
+- redhat/configs/build_configs.sh: Provide better messages (Prarit Bhargava)
+- redhat/configs/build_configs.sh: Create unique output files (Prarit Bhargava)
+- redhat/configs/build_configs.sh: Add local variables (Prarit Bhargava)
+- redhat/configs/process_configs.sh: Parallelize execution (Prarit Bhargava)
+- redhat/configs/process_configs.sh: Provide better messages (Prarit Bhargava)
+- redhat/configs/process_configs.sh: Create unique output files (Prarit Bhargava)
+- redhat/configs/process_configs.sh: Add processing config function (Prarit Bhargava)
+- redhat: Unify genspec.sh and kernel.spec variable names (Prarit Bhargava)
+- redhat/genspec.sh: Remove options and use Makefile variables (Prarit Bhargava)
+- Add rebase note for 5.17 on Fedora stable (Justin M. Forbes)
+- More Fedora config updates for 5.17 (Justin M. Forbes)
+- redhat/configs: Disable CONFIG_MACINTOSH_DRIVERS in RHEL. (Prarit Bhargava)
+- redhat: Fix "make dist-release-finish" to use the correct NVR variables (Neal Gompa) [2053836]
+- Build CROS_EC Modules (Jason Montleon)
+- redhat: configs: change aarch64 default dma domain to lazy (Jerry Snitselaar)
+- redhat: configs: disable ATM protocols (Davide Caratti)
+- configs/fedora: Enable the interconnect SC7180 driver built-in (Enric Balletbo i Serra)
+- configs: clean up CONFIG_PAGE_TABLE_ISOLATION files (Ondrej Mosnacek)
+- redhat: configs: enable CONFIG_INTEL_PCH_THERMAL for RHEL x86 (David Arcari)
+- redhat/Makefile: Fix dist-dump-variables target (Prarit Bhargava)
+- redhat/configs: Enable DEV_DAX and DEV_DAX_PMEM modules on aarch64 for fedora (D Scott Phillips)
+- redhat/configs: Enable CONFIG_TRANSPARENT_HUGEPAGE on aarch64 for fedora (D Scott Phillips)
+- configs/process_configs.sh: Remove orig files (Prarit Bhargava)
+- redhat: configs: Disable CONFIG_MPLS for s390x/zfcpdump (Guillaume Nault)
+- Fedora 5.17 configs round 1 (Justin M. Forbes)
+- redhat: configs: disable the surface platform (David Arcari)
+- redhat: configs: Disable team driver (Hangbin Liu) [1945477]
+- configs: enable LOGITECH_FF for RHEL/CentOS too (Benjamin Tissoires)
+- redhat/configs: Disable CONFIG_SENSORS_NCT6683 in RHEL for arm/aarch64 (Dean Nelson) [2041186]
+- redhat: fix make {distg-brew,distg-koji} (Andrea Claudi)
+- [fedora] Turn on CONFIG_VIDEO_OV5693 for sensor support (Dave Olsthoorn)
+- Cleanup 'disabled' config options for RHEL (Prarit Bhargava)
+- redhat: move CONFIG_ARM64_MTE to aarch64 config directory (Herton R. Krzesinski)
+- Change CONFIG_TEST_BPF to a module (Justin M. Forbes)
+- Change CONFIG_TEST_BPF to module in pending MR coming for proper review (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_TEST_BPF (Viktor Malik)
+- Enable KUNIT tests for testing (Nico Pache)
+- Makefile: Check PKGRELEASE size on dist-brew targets (Prarit Bhargava)
+- kernel.spec: Add glibc-static build requirement (Prarit Bhargava)
+- Enable iSER on s390x (Stefan Schulze Frielinghaus)
+- redhat/configs: Enable CONFIG_ACER_WIRELESS (Peter Georg) [2025985]
+- kabi: Add kABI macros for enum type (Čestmír Kalina) [2024595]
+- kabi: expand and clarify documentation of aux structs (Čestmír Kalina) [2024595]
+- kabi: introduce RH_KABI_USE_AUX_PTR (Čestmír Kalina) [2024595]
+- kabi: rename RH_KABI_SIZE_AND_EXTEND to AUX (Čestmír Kalina) [2024595]
+- kabi: more consistent _RH_KABI_SIZE_AND_EXTEND (Čestmír Kalina) [2024595]
+- kabi: use fixed field name for extended part (Čestmír Kalina) [2024595]
+- kabi: fix dereference in RH_KABI_CHECK_EXT (Čestmír Kalina) [2024595]
+- kabi: fix RH_KABI_SET_SIZE macro (Čestmír Kalina) [2024595]
+- kabi: expand and clarify documentation (Čestmír Kalina) [2024595]
+- kabi: make RH_KABI_USE replace any number of reserved fields (Čestmír Kalina) [2024595]
+- kabi: rename RH_KABI_USE2 to RH_KABI_USE_SPLIT (Čestmír Kalina) [2024595]
+- kabi: change RH_KABI_REPLACE2 to RH_KABI_REPLACE_SPLIT (Čestmír Kalina) [2024595]
+- kabi: change RH_KABI_REPLACE_UNSAFE to RH_KABI_BROKEN_REPLACE (Čestmír Kalina) [2024595]
+- kabi: introduce RH_KABI_ADD_MODIFIER (Čestmír Kalina) [2024595]
+- kabi: Include kconfig.h (Čestmír Kalina) [2024595]
+- kabi: macros for intentional kABI breakage (Čestmír Kalina) [2024595]
+- kabi: fix the note about terminating semicolon (Čestmír Kalina) [2024595]
+- kabi: introduce RH_KABI_HIDE_INCLUDE and RH_KABI_FAKE_INCLUDE (Čestmír Kalina) [2024595]
+- spec: don't overwrite auto.conf with .config (Ondrej Mosnacek)
+- New configs in drivers/crypto (Fedora Kernel Team)
+- Add test_hash to the mod-internal.list (Justin M. Forbes)
+- configs: disable CONFIG_CRAMFS (Abhi Das) [2041184]
+- spec: speed up "cp -r" when it overwrites existing files. (Denys Vlasenko)
+- redhat: use centos x509.genkey file if building under centos (Herton R. Krzesinski)
+- Revert "[redhat] Generate a crashkernel.default for each kernel build" (Coiby Xu)
+- spec: make linux-firmware weak(er) dependency (Jan Stancek)
+- rtw89: enable new driver rtw89 and device RTK8852AE (Íñigo Huguet)
+- Config consolidation into common (Justin M. Forbes)
+- Add packaged but empty /lib/modules/<kver>/systemtap/ (Justin M. Forbes)
+- filter-modules.sh.rhel: Add ntc_thermistor to singlemods (Prarit Bhargava)
+- Move CONFIG_SND_SOC_TLV320AIC31XX as it is now selected by CONFIG_SND_SOC_FSL_ASOC_CARD (Justin M. Forbes)
+- Add dev_addr_lists_test to mod-internal.list (Justin M. Forbes)
+- configs/fedora: Enable CONFIG_NFC_PN532_UART for use PN532 NFC module (Ziqian SUN (Zamir))
+- redhat: ignore ksamples and kselftests on the badfuncs rpminspect test (Herton R. Krzesinski)
+- redhat: disable upstream check for rpminspect (Herton R. Krzesinski)
+- redhat: switch the vsyscall config to CONFIG_LEGACY_VSYSCALL_XONLY=y (Herton R. Krzesinski) [1876977]
+- redhat: configs: increase CONFIG_DEBUG_KMEMLEAK_MEM_POOL_SIZE (Rafael Aquini)
+- move CONFIG_STRICT_SIGALTSTACK_SIZE to the appropriate directory (David Arcari)
+- redhat/configs: Enable CONFIG_DM_MULTIPATH_IOA for fedora (Benjamin Marzinski)
+- redhat/configs: Enable CONFIG_DM_MULTIPATH_HST (Benjamin Marzinski) [2000835]
+- redhat: Pull in openssl-devel as a build dependency correctly (Neal Gompa) [2034670]
+- redhat/configs: Migrate ZRAM_DEF_* configs to common/ (Neal Gompa)
+- redhat/configs: Enable CONFIG_CRYPTO_ZSTD (Neal Gompa) [2032758]
+- Turn CONFIG_DEVMEM back off for aarch64 (Justin M. Forbes)
+- Clean up excess text in Fedora config files (Justin M. Forbes)
+- Fedora config updates for 5.16 (Justin M. Forbes)
+- redhat/configs: enable CONFIG_INPUT_KEYBOARD for AARCH64 (Vitaly Kuznetsov)
+- Fedora configs for 5.16 pt 1 (Justin M. Forbes)
+- redhat/configs: NFS: disable UDP, insecure enctypes (Benjamin Coddington) [1952863]
+- Update rebase-notes with dracut 5.17 information (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_CRYPTO_BLAKE2B (Neal Gompa) [2031547]
+- Enable CONFIG_BPF_SYSCALL for zfcpdump (Jiri Olsa)
+- Enable CONFIG_CIFS_SMB_DIRECT for ARK (Ronnie Sahlberg)
+- mt76: enable new device MT7921E in CentOs/RHEL (Íñigo Huguet) [2004821]
+- Disable CONFIG_DEBUG_PREEMPT on normal builds (Phil Auld)
+- redhat/configs: Enable CONFIG_PCI_P2PDMA for ark (Myron Stowe)
+- pci.h: Fix static include (Prarit Bhargava)
+- Enable CONFIG_VFIO_NOIOMMU for Fedora (Justin M. Forbes)
+- redhat/configs: enable CONFIG_NTB_NETDEV for ark (John W. Linville)
+- drivers/pci/pci-driver.c: Fix if/ifdef typo (Prarit Bhargava)
+- common: arm64: ensure all the required arm64 errata are enabled (Peter Robinson)
+- kernel/rh_taint.c: Update to new messaging (Prarit Bhargava) [2019377]
+- redhat/configs: enable CONFIG_AMD_PTDMA for ark (John W. Linville)
+- redhat/configs: enable CONFIG_RD_ZSTD for rhel (Tao Liu) [2020132]
+- fedora: build TEE as a module for all arches (Peter Robinson)
+- common: build TRUSTED_KEYS in everywhere (Peter Robinson)
+- redhat: make Patchlist.changelog generation conditional (Herton R. Krzesinski)
+- redhat/configs: Add two new CONFIGs (Prarit Bhargava)
+- redhat/configs: Remove dead CONFIG files (Prarit Bhargava)
+- redhat/configs/evaluate_configs: Add find dead configs option (Prarit Bhargava)
+- Add more rebase notes for Fedora 5.16 (Justin M. Forbes)
+- Fedora: Feature: Retire wireless Extensions (Peter Robinson)
+- fedora: arm: some SoC enablement pieces (Peter Robinson)
+- fedora: arm: enable PCIE_ROCKCHIP_DW for rk35xx series (Peter Robinson)
+- fedora: enable RTW89 802.11 WiFi driver (Peter Robinson)
+- fedora: arm: Enable DRM_PANEL_EDP (Peter Robinson)
+- fedora: sound: enable new sound drivers (Peter Robinson)
+- redhat/configs: unset KEXEC_SIG for s390x zfcpdump (Coiby Xu)
+- spec: Keep .BTF section in modules (Jiri Olsa)
+- Fix up PREEMPT configs (Justin M. Forbes)
+- New configs in drivers/media (Fedora Kernel Team)
+- New configs in drivers/net/ethernet/litex (Fedora Kernel Team)
+- spec: add bpf_testmod.ko to kselftests/bpf (Viktor Malik)
+- New configs in drivers/net/wwan (Fedora Kernel Team)
+- New configs in drivers/i2c (Fedora Kernel Team)
+- redhat/docs/index.rst: Add local build information. (Prarit Bhargava)
+- Fix up preempt configs (Justin M. Forbes)
+- Turn on CONFIG_HID_NINTENDO for controller support (Dave Olsthoorn)
+- Fedora: Enable MediaTek bluetooth pieces (Peter Robinson)
+- Add rebase notes to check for PCI patches (Justin M. Forbes)
+- redhat: configs: move CONFIG_ACCESSIBILITY from fedora to common (John W. Linville)
+- Filter updates for hid-playstation on Fedora (Justin M. Forbes)
+- Enable CONFIG_VIRT_DRIVERS for ARK (Vitaly Kuznetsov)
+- redhat/configs: Enable Nitro Enclaves on aarch64 (Vitaly Kuznetsov)
+- Enable e1000 in rhel9 as unsupported (Ken Cox) [2002344]
+- Turn on COMMON_CLK_AXG_AUDIO for Fedora rhbz 2020481 (Justin M. Forbes)
+- Fix up fedora config options from mismatch (Justin M. Forbes)
+- Add nct6775 to filter-modules.sh.rhel (Justin M. Forbes)
+- Enable PREEMPT_DYNAMIC for all but s390x (Justin M. Forbes)
+- Add memcpy_kunit to mod-internal.list (Justin M. Forbes)
+- New configs in fs/ksmbd (Fedora Kernel Team)
+- Add nct6775 to Fedora filter-modules.sh (Justin M. Forbes)
+- New configs in fs/ntfs3 (Fedora Kernel Team)
+- Make CONFIG_IOMMU_DEFAULT_DMA_STRICT default for all but x86 (Justin M. Forbes)
+- redhat/configs: enable KEXEC_IMAGE_VERIFY_SIG for RHEL (Coiby Xu)
+- redhat/configs: enable KEXEC_SIG for aarch64 RHEL (Coiby Xu) [1994858]
+- Fix up fedora and pending configs for PREEMPT to end mismatch (Justin M. Forbes)
+- Enable binder for fedora (Justin M. Forbes)
+- redhat: configs: Update configs for vmware (Kamal Heib)
+- Fedora configs for 5.15 (Justin M. Forbes)
+- redhat/kernel.spec.template: don't hardcode gcov arches (Jan Stancek)
+- redhat/configs: create a separate config for gcov options (Jan Stancek)
+- Update documentation with FAQ and update frequency (Don Zickus)
+- Document force pull option for mirroring (Don Zickus)
+- Ignore the rhel9 kabi files (Don Zickus)
+- Remove legacy elrdy cruft (Don Zickus)
+- redhat/configs/evaluate_configs: walk cfgvariants line by line (Jan Stancek)
+- redhat/configs/evaluate_configs: insert EMPTY tags at correct place (Jan Stancek)
+- redhat: make dist-srpm-gcov add to BUILDOPTS (Jan Stancek)
+- Build CONFIG_SPI_PXA2XX as a module on x86 (Justin M. Forbes)
+- redhat/configs: enable CONFIG_BCMGENET as module (Joel Savitz)
+- Fedora config updates (Justin M. Forbes)
+- Enable CONFIG_FAIL_SUNRPC for debug builds (Justin M. Forbes)
+- fedora: Disable fbdev drivers and use simpledrm instead (Javier Martinez Canillas)
+- spec: Don't fail spec build if ksamples fails (Jiri Olsa)
+- Enable CONFIG_QCOM_SCM for arm (Justin M. Forbes)
+- redhat: Disable clang's integrated assembler on ppc64le and s390x (Tom Stellard)
+- redhat/configs: enable CONFIG_IMA_WRITE_POLICY (Bruno Meneguele)
+- Fix dist-srpm-gcov (Don Zickus)
+- redhat: configs: add CONFIG_NTB and related items (John W. Linville)
+- Add kfence_test to mod-internal.list (Justin M. Forbes)
+- Enable KUNIT tests for redhat kernel-modules-internal (Nico Pache)
+- redhat: add *-matched meta packages to rpminspect emptyrpm config (Herton R. Krzesinski)
+- Use common config for NODES_SHIFT (Mark Salter)
+- redhat: fix typo and make the output more silent for dist-git sync (Herton R. Krzesinski)
+- Fedora NTFS config updates (Justin M. Forbes)
+- Fedora 5.15 configs part 1 (Justin M. Forbes)
+- Fix ordering in genspec args (Justin M. Forbes)
+- redhat/configs: Enable Hyper-V guests on ARM64 (Vitaly Kuznetsov) [2007430]
+- redhat: configs: Enable CONFIG_THINKPAD_LMI (Hans de Goede)
+- redhat/docs: update Koji link to avoid redirect (Joel Savitz)
+- redhat: add support for different profiles with dist*-brew (Herton R. Krzesinski)
+- redhat: configs: Disable xtables and ipset (Phil Sutter) [1945179]
+- redhat: Add mark_driver_deprecated() (Phil Sutter) [1945179]
+- Change s390x CONFIG_NODES_SHIFT from 4 to 1 (Justin M. Forbes)
+- Build CRYPTO_SHA3_*_S390 inline for s390 zfcpdump (Justin M. Forbes)
+- redhat: move the DIST variable setting to Makefile.variables (Herton R. Krzesinski)
+- redhat/kernel.spec.template: Cleanup source numbering (Prarit Bhargava)
+- redhat/kernel.spec.template: Reorganize RHEL and Fedora specific files (Prarit Bhargava)
+- redhat/kernel.spec.template: Add include_fedora and include_rhel variables (Prarit Bhargava)
+- redhat/Makefile: Make kernel-local global (Prarit Bhargava)
+- redhat/Makefile: Use flavors file (Prarit Bhargava)
+- Turn on CONFIG_CPU_FREQ_GOV_SCHEDUTIL for x86 (Justin M. Forbes)
+- redhat/configs: Remove CONFIG_INFINIBAND_I40IW (Kamal Heib)
+- cleanup CONFIG_X86_PLATFORM_DRIVERS_INTEL (David Arcari)
+- redhat: rename usage of .rhel8git.mk to .rhpkg.mk (Herton R. Krzesinski)
+- Manually add pending items that need to be set due to mismatch (Justin M. Forbes)
+- Clean up pending common (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_BLK_CGROUP_IOLATENCY & CONFIG_BLK_CGROUP_FC_APPID (Waiman Long) [2006813]
+- redhat: remove kernel.changelog-8.99 file (Herton R. Krzesinski)
+- redhat/configs: enable CONFIG_SQUASHFS_ZSTD which is already enabled in Fedora 34 (Tao Liu) [1998953]
+- redhat: bump RHEL_MAJOR and add the changelog file for it (Herton R. Krzesinski)
+- redhat: add documentation about the os-build rebase process (Herton R. Krzesinski)
+- redhat/configs: enable SYSTEM_BLACKLIST_KEYRING which is already enabled in rhel8 and Fedora 34 (Coiby Xu)
+- Build kernel-doc for Fedora (Justin M. Forbes)
+- x86_64: Enable Elkhart Lake Quadrature Encoder Peripheral support (Prarit Bhargava)
+- Update CONFIG_WERROR to disabled as it can cause issue with out of tree modules. (Justin M. Forbes)
+- Fixup IOMMU configs in pending so that configs are sane again (Justin M. Forbes)
+- Some initial Fedora config items for 5.15 (Justin M. Forbes)
+- arm64: use common CONFIG_MAX_ZONEORDER for arm kernel (Mark Salter)
+- Create Makefile.variables for a single point of configuration change (Justin M. Forbes)
+- rpmspec: drop traceevent files instead of just excluding them from files list (Herton R. Krzesinski) [1967640]
+- redhat/config: Enablement of CONFIG_PAPR_SCM for PowerPC (Gustavo Walbon) [1962936]
+- Attempt to fix Intel PMT code (David Arcari)
+- CI: Enable realtime branch testing (Veronika Kabatova)
+- CI: Enable realtime checks for c9s and RHEL9 (Veronika Kabatova)
+- ark: wireless: enable all rtw88 pcie wirless variants (Peter Robinson)
+- wireless: rtw88: move debug options to common/debug (Peter Robinson)
+- fedora: minor PTP clock driver cleanups (Peter Robinson)
+- common: x86: enable VMware PTP support on ark (Peter Robinson)
+- Disable liquidio driver on ark/rhel (Herton R. Krzesinski) [1993393]
+- More Fedora config updates (Justin M. Forbes)
+- Fedora config updates for 5.14 (Justin M. Forbes)
+- CI: Rename ARK CI pipeline type (Veronika Kabatova)
+- CI: Finish up c9s config (Veronika Kabatova)
+- CI: Update ppc64le config (Veronika Kabatova)
+- CI: use more templates (Veronika Kabatova)
+- Filter updates for aarch64 (Justin M. Forbes)
+- increase CONFIG_NODES_SHIFT for aarch64 (Chris von Recklinghausen) [1890304]
+- redhat: configs: Enable CONFIG_WIRELESS_HOTKEY (Hans de Goede)
+- redhat/configs: Update CONFIG_NVRAM (Desnes A. Nunes do Rosario) [1988254]
+- common: serial: build in SERIAL_8250_LPSS for x86 (Peter Robinson)
+- powerpc: enable CONFIG_FUNCTION_PROFILER (Diego Domingos) [1831065]
+- redhat/configs: Disable Soft-RoCE driver (Kamal Heib)
+- redhat/configs/evaluate_configs: Update help output (Prarit Bhargava)
+- redhat/configs: Double MAX_LOCKDEP_CHAINS (Justin M. Forbes)
+- fedora: configs: Fix WM5102 Kconfig (Hans de Goede)
+- powerpc: enable CONFIG_POWER9_CPU (Diego Domingos) [1876436]
+- redhat/configs: Fix CONFIG_VIRTIO_IOMMU to 'y' on aarch64 (Eric Auger) [1972795]
+- filter-modules.sh: add more sound modules to filter (Jaroslav Kysela)
+- redhat/configs: sound configuration cleanups and updates (Jaroslav Kysela)
+- common: Update for CXL (Compute Express Link) configs (Peter Robinson)
+- redhat: configs: disable CRYPTO_SM modules (Herton R. Krzesinski) [1990040]
+- Remove fedora version of the LOCKDEP_BITS, we should use common (Justin M. Forbes)
+- Re-enable sermouse for x86 (rhbz 1974002) (Justin M. Forbes)
+- Fedora 5.14 configs round 1 (Justin M. Forbes)
+- redhat: add gating configuration for centos stream/rhel9 (Herton R. Krzesinski)
+- x86: configs: Enable CONFIG_TEST_FPU for debug kernels (Vitaly Kuznetsov) [1988384]
+- redhat/configs: Move CHACHA and POLY1305 to core kernel to allow BIG_KEYS=y (root) [1983298]
+- kernel.spec: fix build of samples/bpf (Jiri Benc)
+- Enable OSNOISE_TRACER and TIMERLAT_TRACER (Jerome Marchand) [1979379]
+- rpmspec: switch iio and gpio tools to use tools_make (Herton R. Krzesinski) [1956988]
+- configs/process_configs.sh: Handle config items with no help text (Patrick Talbert)
+- fedora: sound config updates for 5.14 (Peter Robinson)
+- fedora: Only enable FSI drivers on POWER platform (Peter Robinson)
+- The CONFIG_RAW_DRIVER has been removed from upstream (Peter Robinson)
+- fedora: updates for 5.14 with a few disables for common from pending (Peter Robinson)
+- fedora: migrate from MFD_TPS68470 -> INTEL_SKL_INT3472 (Peter Robinson)
+- fedora: Remove STAGING_GASKET_FRAMEWORK (Peter Robinson)
+- Fedora: move DRM_VMWGFX configs from ark -> common (Peter Robinson)
+- fedora: arm: disabled unused FB drivers (Peter Robinson)
+- fedora: don't enable FB_VIRTUAL (Peter Robinson)
+- redhat/configs: Double MAX_LOCKDEP_ENTRIES (Waiman Long) [1940075]
+- rpmspec: fix verbose output on kernel-devel installation (Herton R. Krzesinski) [1981406]
+- Build Fedora x86s kernels with bytcr-wm5102 (Marius Hoch)
+- Deleted redhat/configs/fedora/generic/x86/CONFIG_FB_HYPERV (Patrick Lang)
+- rpmspec: correct the ghost initramfs attributes (Herton R. Krzesinski) [1977056]
+- rpmspec: amend removal of depmod created files to include modules.builtin.alias.bin (Herton R. Krzesinski) [1977056]
+- configs: remove duplicate CONFIG_DRM_HYPERV file (Patrick Talbert)
+- CI: use common code for merge and release (Don Zickus)
+- rpmspec: add release string to kernel doc directory name (Jan Stancek)
+- redhat/configs: Add CONFIG_INTEL_PMT_CRASHLOG (Michael Petlan) [1880486]
+- redhat/configs: Add CONFIG_INTEL_PMT_TELEMETRY (Michael Petlan) [1880486]
+- redhat/configs: Add CONFIG_MFD_INTEL_PMT (Michael Petlan) [1880486]
+- redhat/configs: enable CONFIG_BLK_DEV_ZONED (Ming Lei) [1638087]
+- Add --with clang_lto option to build the kernel with Link Time Optimizations (Tom Stellard)
+- common: disable DVB_AV7110 and associated pieces (Peter Robinson)
+- Fix fedora-only config updates (Don Zickus)
+- Fedor config update for new option (Justin M. Forbes)
+- redhat/configs: Enable stmmac NIC for x86_64 (Mark Salter)
+- all: hyperv: use the DRM driver rather than FB (Peter Robinson)
+- all: hyperv: unify the Microsoft HyperV configs (Peter Robinson)
+- all: VMWare: clean up VMWare configs (Peter Robinson)
+- Update CONFIG_ARM_FFA_TRANSPORT (Patrick Talbert)
+- CI: Handle all mirrors (Veronika Kabatova)
+- Turn on CONFIG_STACKTRACE for s390x zfpcdump kernels (Justin M. Forbes)
+- arm64: switch ark kernel to 4K pagesize (Mark Salter)
+- Disable AMIGA_PARTITION and KARMA_PARTITION (Prarit Bhargava) [1802694]
+- all: unify and cleanup i2c TPM2 modules (Peter Robinson)
+- redhat/configs: Set CONFIG_VIRTIO_IOMMU on aarch64 (Eric Auger) [1972795]
+- redhat/configs: Disable CONFIG_RT_GROUP_SCHED in rhel config (Phil Auld)
+- redhat/configs: enable KEXEC_SIG which is already enabled in RHEL8 for s390x and x86_64 (Coiby Xu) [1976835]
+- rpmspec: do not BuildRequires bpftool on noarch (Herton R. Krzesinski)
+- redhat/configs: disable {IMA,EVM}_LOAD_X509 (Bruno Meneguele) [1977529]
+- redhat: add secureboot CA certificate to trusted kernel keyring (Bruno Meneguele)
+- redhat/configs: enable IMA_ARCH_POLICY for aarch64 and s390x (Bruno Meneguele)
+- redhat/configs: Enable CONFIG_MLXBF_GIGE on aarch64 (Alaa Hleihel) [1858599]
+- common: enable STRICT_MODULE_RWX everywhere (Peter Robinson)
+- COMMON_CLK_STM32MP157_SCMI is bool and selects COMMON_CLK_SCMI (Justin M. Forbes)
+- kernel.spec: Add kernel{,-debug}-devel-matched meta packages (Timothée Ravier)
+- Turn off with_selftests for Fedora (Justin M. Forbes)
+- Don't build bpftool on Fedora (Justin M. Forbes)
+- Fix location of syscall scripts for kernel-devel (Justin M. Forbes)
+- fedora: arm: Enable some i.MX8 options (Peter Robinson)
+- Enable Landlock for Fedora (Justin M. Forbes)
+- Filter update for Fedora aarch64 (Justin M. Forbes)
+- rpmspec: only build debug meta packages where we build debug ones (Herton R. Krzesinski)
+- rpmspec: do not BuildRequires bpftool on nobuildarches (Herton R. Krzesinski)
+- redhat/configs: Consolidate CONFIG_HMC_DRV in the common s390x folder (Thomas Huth) [1976270]
+- redhat/configs: Consolidate CONFIG_EXPOLINE_OFF in the common folder (Thomas Huth) [1976270]
+- redhat/configs: Move CONFIG_HW_RANDOM_S390 into the s390x/ subfolder (Thomas Huth) [1976270]
+- redhat/configs: Disable CONFIG_HOTPLUG_PCI_SHPC in the Fedora settings (Thomas Huth) [1976270]
+- redhat/configs: Remove the non-existent CONFIG_NO_BOOTMEM switch (Thomas Huth) [1976270]
+- redhat/configs: Compile the virtio-console as a module on s390x (Thomas Huth) [1976270]
+- redhat/configs: Enable CONFIG_S390_CCW_IOMMU and CONFIG_VFIO_CCW for ARK, too (Thomas Huth) [1976270]
+- Revert "Merge branch 'ec_fips' into 'os-build'" (Vladis Dronov) [1947240]
+- Fix typos in fedora filters (Justin M. Forbes)
+- More filtering for Fedora (Justin M. Forbes)
+- Fix Fedora module filtering for spi-altera-dfl (Justin M. Forbes)
+- Fedora 5.13 config updates (Justin M. Forbes)
+- fedora: cleanup TCG_TIS_I2C_CR50 (Peter Robinson)
+- fedora: drop duplicate configs (Peter Robinson)
+- More Fedora config updates for 5.13 (Justin M. Forbes)
+- redhat/configs: Enable needed drivers for BlueField SoC on aarch64 (Alaa Hleihel) [1858592 1858594 1858596]
+- redhat: Rename mod-blacklist.sh to mod-denylist.sh (Prarit Bhargava)
+- redhat/configs: enable CONFIG_NET_ACT_MPLS (Marcelo Ricardo Leitner)
+- configs: Enable CONFIG_DEBUG_KERNEL for zfcpdump (Jiri Olsa)
+- kernel.spec: Add support to use vmlinux.h (Don Zickus)
+- spec: Add vmlinux.h to kernel-devel package (Jiri Olsa)
+- Turn off DRM_XEN_FRONTEND for Fedora as we had DRM_XEN off already (Justin M. Forbes)
+- Fedora 5.13 config updates pt 3 (Justin M. Forbes)
+- all: enable ath11k wireless modules (Peter Robinson)
+- all: Enable WWAN and associated MHI bus pieces (Peter Robinson)
+- spec: Enable sefltests rpm build (Jiri Olsa)
+- spec: Allow bpf selftest/samples to fail (Jiri Olsa)
+- kvm: Add kvm_stat.service file and kvm_stat logrotate config to the tools (Jiri Benc)
+- kernel.spec: Add missing source files to kernel-selftests-internal (Jiri Benc)
+- kernel.spec: selftests: add net/forwarding to TARGETS list (Jiri Benc)
+- kernel.spec: selftests: add build requirement on libmnl-devel (Jiri Benc)
+- kernel.spec: add action.o to kernel-selftests-internal (Jiri Benc)
+- kernel.spec: avoid building bpftool repeatedly (Jiri Benc)
+- kernel.spec: selftests require python3 (Jiri Benc)
+- kernel.spec: skip selftests that failed to build (Jiri Benc)
+- kernel.spec: fix installation of bpf selftests (Jiri Benc)
+- redhat: fix samples and selftests make options (Jiri Benc)
+- kernel.spec: enable mptcp selftests for kernel-selftests-internal (Jiri Benc)
+- kernel.spec: Do not export shared objects from libexecdir to RPM Provides (Jiri Benc)
+- kernel.spec: add missing dependency for the which package (Jiri Benc)
+- kernel.spec: add netfilter selftests to kernel-selftests-internal (Jiri Benc)
+- kernel.spec: move slabinfo and page_owner_sort debuginfo to tools-debuginfo (Jiri Benc)
+- kernel.spec: package and ship VM tools (Jiri Benc)
+- configs: enable CONFIG_PAGE_OWNER (Jiri Benc)
+- kernel.spec: add coreutils (Jiri Benc)
+- kernel.spec: add netdevsim driver selftests to kernel-selftests-internal (Jiri Benc)
+- redhat/Makefile: Clean out the --without flags from the baseonly rule (Jiri Benc)
+- kernel.spec: Stop building unnecessary rpms for baseonly builds (Jiri Benc)
+- kernel.spec: disable more kabi switches for gcov build (Jiri Benc)
+- kernel.spec: Rename kabi-dw base (Jiri Benc)
+- kernel.spec: Fix error messages during build of zfcpdump kernel (Jiri Benc)
+- kernel.spec: perf: remove bpf examples (Jiri Benc)
+- kernel.spec: selftests should not depend on modules-internal (Jiri Benc)
+- kernel.spec: build samples (Jiri Benc)
+- kernel.spec: tools: sync missing options with RHEL 8 (Jiri Benc)
+- redhat/configs: nftables: Enable extra flowtable symbols (Phil Sutter)
+- redhat/configs: Sync netfilter options with RHEL8 (Phil Sutter)
+- Fedora 5.13 config updates pt 2 (Justin M. Forbes)
+- Move CONFIG_ARCH_INTEL_SOCFPGA up a level for Fedora (Justin M. Forbes)
+- fedora: enable the Rockchip rk3399 pcie drivers (Peter Robinson)
+- Fedora 5.13 config updates pt 1 (Justin M. Forbes)
+- Fix version requirement from opencsd-devel buildreq (Justin M. Forbes)
+- configs/ark/s390: set CONFIG_MARCH_Z14 and CONFIG_TUNE_Z15 (Philipp Rudo) [1876435]
+- configs/common/s390: Clean up CONFIG_{MARCH,TUNE}_Z* (Philipp Rudo)
+- configs/process_configs.sh: make use of dummy-tools (Philipp Rudo)
+- configs/common: disable CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} (Philipp Rudo)
+- configs/common/aarch64: disable CONFIG_RELR (Philipp Rudo)
+- redhat/config: enable STMICRO nic for RHEL (Mark Salter)
+- redhat/configs: Enable ARCH_TEGRA on RHEL (Mark Salter)
+- redhat/configs: enable IMA_KEXEC for supported arches (Bruno Meneguele)
+- redhat/configs: enable INTEGRITY_SIGNATURE to all arches (Bruno Meneguele)
+- configs: enable CONFIG_LEDS_BRIGHTNESS_HW_CHANGED (Benjamin Tissoires)
+- RHEL: disable io_uring support (Jeff Moyer) [1964537]
+- all: Changing CONFIG_UV_SYSFS to build uv_sysfs.ko as a loadable module. (Frank Ramsay)
+- Enable NITRO_ENCLAVES on RHEL (Vitaly Kuznetsov)
+- Update the Quick Start documentation (David Ward)
+- redhat/configs: Set PVPANIC_MMIO for x86 and PVPANIC_PCI for aarch64 (Eric Auger) [1961178]
+- bpf: Fix unprivileged_bpf_disabled setup (Jiri Olsa)
+- Enable CONFIG_BPF_UNPRIV_DEFAULT_OFF (Jiri Olsa)
+- configs/common/s390: disable CONFIG_QETH_{OSN,OSX} (Philipp Rudo) [1903201]
+- Make CRYPTO_EC also builtin (Simo Sorce) [1947240]
+- Do not hard-code a default value for DIST (David Ward)
+- Override %%{debugbuildsenabled} if the --with-release option is used (David Ward)
+- Improve comments in SPEC file, and move some option tests and macros (David Ward)
+- configs: enable CONFIG_EXFAT_FS (Pavel Reichl) [1943423]
+- Revert s390x/zfcpdump part of a9d179c40281 and ecbfddd98621 (Vladis Dronov)
+- Embed crypto algos, modes and templates needed in the FIPS mode (Vladis Dronov) [1947240]
+- configs: Add and enable CONFIG_HYPERV_TESTING for debug kernels (Mohammed Gamal)
+- configs: enable CONFIG_CMA on x86_64 in ARK (David Hildenbrand) [1945002]
+- rpmspec: build debug-* meta-packages if debug builds are disabled (Herton R. Krzesinski)
+- UIO: disable unused config options (Aristeu Rozanski) [1957819]
+- ARK-config: Make amd_pinctrl module builtin (Hans de Goede)
+- rpmspec: revert/drop content hash for kernel-headers (Herton R. Krzesinski)
+- rpmspec: fix check that calls InitBuildVars (Herton R. Krzesinski)
+- fedora: enable zonefs (Damien Le Moal)
+- redhat: load specific ARCH keys to INTEGRITY_PLATFORM_KEYRING (Bruno Meneguele)
+- redhat: enable INTEGRITY_TRUSTED_KEYRING across all variants (Bruno Meneguele)
+- redhat: enable SYSTEM_BLACKLIST_KEYRING across all variants (Bruno Meneguele)
+- redhat: enable INTEGRITY_ASYMMETRIC_KEYS across all variants (Bruno Meneguele)
+- Remove unused boot loader specification files (David Ward)
+- redhat/configs: Enable mlx5 IPsec and TLS offloads (Alaa Hleihel) [1869674 1957636]
+- common: disable Apple Silicon generally (Peter Robinson)
+- cleanup Intel's FPGA configs (Peter Robinson)
+- common: move PTP KVM support from ark to common (Peter Robinson)
+- Enable CONFIG_DRM_AMDGPU_USERPTR for everyone (Justin M. Forbes)
+- redhat: add initial rpminspect configuration (Herton R. Krzesinski)
+- fedora: arm updates for 5.13 (Peter Robinson)
+- fedora: Enable WWAN and associated MHI bits (Peter Robinson)
+- Update CONFIG_MODPROBE_PATH to /usr/sbin (Justin Forbes)
+- Fedora set modprobe path (Justin M. Forbes)
+- Keep sctp and l2tp modules in modules-extra (Don Zickus)
+- Fix ppc64le cross build packaging (Don Zickus)
+- Fedora: Make amd_pinctrl module builtin (Hans de Goede)
+- Keep CONFIG_KASAN_HW_TAGS off for aarch64 debug configs (Justin M. Forbes)
+- New configs in drivers/bus (Fedora Kernel Team)
+- RHEL: Don't build KVM PR module on ppc64 (David Gibson) [1930649]
+- Flip CONFIG_USB_ROLE_SWITCH from m to y (Justin M. Forbes)
+- Set valid options for CONFIG_FW_LOADER_USER_HELPER (Justin M. Forbes)
+- Clean up CONFIG_FB_MODE_HELPERS (Justin M. Forbes)
+- Turn off CONFIG_VFIO for the s390x zfcpdump kernel (Justin M. Forbes)
+- Delete unused CONFIG_SND_SOC_MAX98390 pending-common (Justin M. Forbes)
+- Update pending-common configs, preparing to set correctly (Justin M. Forbes)
+- Update fedora filters for surface (Justin M. Forbes)
+- Build CONFIG_CRYPTO_ECDSA inline for s390x zfcpdump (Justin M. Forbes)
+- Replace "flavour" where "variant" is meant instead (David Ward)
+- Drop the %%{variant} macro and fix --with-vanilla (David Ward)
+- Fix syntax of %%kernel_variant_files (David Ward)
+- Change description of --without-vdso-install to fix typo (David Ward)
+- Config updates to work around mismatches (Justin M. Forbes)
+- CONFIG_SND_SOC_FSL_ASOC_CARD selects CONFIG_MFD_WM8994 now (Justin M. Forbes)
+- wireguard: disable in FIPS mode (Hangbin Liu) [1940794]
+- Enable mtdram for fedora (rhbz 1955916) (Justin M. Forbes)
+- Remove reference to bpf-helpers man page (Justin M. Forbes)
+- Fedora: enable more modules for surface devices (Dave Olsthoorn)
+- Fix Fedora config mismatch for CONFIG_FSL_ENETC_IERB (Justin M. Forbes)
+- hardlink is in /usr/bin/ now (Justin M. Forbes)
+- Ensure CONFIG_KVM_BOOK3S_64_PR stays on in Fedora, even if it is turned off in RHEL (Justin M. Forbes)
+- Set date in package release from repository commit, not system clock (David Ward)
+- Use a better upstream tarball filename for snapshots (David Ward)
+- Don't create empty pending-common files on pending-fedora commits (Don Zickus)
+- Add redhat/configs/pending-common/generic/s390x/zfcpdump/CONFIG_NETFS_SUPPORT (Justin M. Forbes)
+- Create ark-latest branch last for CI scripts (Don Zickus)
+- Replace /usr/libexec/platform-python with /usr/bin/python3 (David Ward)
+- Turn off ADI_AXI_ADC and AD9467 which now require CONFIG_OF (Justin M. Forbes)
+- Export ark infrastructure files (Don Zickus)
+- docs: Update docs to reflect newer workflow. (Don Zickus)
+- Use upstream/master for merge-base with fallback to master (Don Zickus)
+- Fedora: Turn off the SND_INTEL_BYT_PREFER_SOF option (Hans de Goede)
+- filter-modules.sh.fedora: clean up "netprots" (Paul Bolle)
+- filter-modules.sh.fedora: clean up "scsidrvs" (Paul Bolle)
+- filter-*.sh.fedora: clean up "ethdrvs" (Paul Bolle)
+- filter-*.sh.fedora: clean up "driverdirs" (Paul Bolle)
+- filter-*.sh.fedora: remove incorrect entries (Paul Bolle)
+- filter-*.sh.fedora: clean up "singlemods" (Paul Bolle)
+- filter-modules.sh.fedora: drop unused list "iiodrvs" (Paul Bolle)
+- Update mod-internal to fix depmod issue (Nico Pache)
+- Turn on CONFIG_VDPA_SIM_NET (rhbz 1942343) (Justin M. Forbes)
+- New configs in drivers/power (Fedora Kernel Team)
+- Turn on CONFIG_NOUVEAU_DEBUG_PUSH for debug configs (Justin M. Forbes)
+- Turn off KFENCE sampling by default for Fedora (Justin M. Forbes)
+- Fedora config updates round 2 (Justin M. Forbes)
+- New configs in drivers/soc (Jeremy Cline)
+- filter-modules.sh: Fix copy/paste error 'input' (Paul Bolle)
+- Update module filtering for 5.12 kernels (Justin M. Forbes)
+- Fix genlog.py to ensure that comments retain "%%" characters. (Mark Mielke)
+- New configs in drivers/leds (Fedora Kernel Team)
+- Limit CONFIG_USB_CDNS_SUPPORT to x86_64 and arm in Fedora (David Ward)
+- Fedora: Enable CHARGER_GPIO on aarch64 too (Peter Robinson)
+- Fedora config updates (Justin M. Forbes)
+- configs: enable CONFIG_WIREGUARD in ARK (Hangbin Liu) [1613522]
+- Remove duplicate configs acroos fedora, ark and common (Don Zickus)
+- Combine duplicate configs across ark and fedora into common (Don Zickus)
+- common/ark: cleanup and unify the parport configs (Peter Robinson)
+- iommu/vt-d: enable INTEL_IDXD_SVM for both fedora and rhel (Jerry Snitselaar)
+- REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70 (Jeremy Linton)
+- configs/common/generic: disable CONFIG_SLAB_MERGE_DEFAULT (Rafael Aquini)
+- Remove _legacy_common_support (Justin M. Forbes)
+- redhat/mod-blacklist.sh: Fix floppy blacklisting (Hans de Goede)
+- New configs in fs/pstore (CKI@GitLab)
+- New configs in arch/powerpc (Fedora Kernel Team)
+- configs: enable BPF LSM on Fedora and ARK (Ondrej Mosnacek)
+- configs: clean up LSM configs (Ondrej Mosnacek)
+- New configs in drivers/platform (CKI@GitLab)
+- New configs in drivers/firmware (CKI@GitLab)
+- New configs in drivers/mailbox (Fedora Kernel Team)
+- New configs in drivers/net/phy (Justin M. Forbes)
+- Update CONFIG_DM_MULTIPATH_IOA (Augusto Caringi)
+- New configs in mm/Kconfig (CKI@GitLab)
+- New configs in arch/powerpc (Jeremy Cline)
+- New configs in arch/powerpc (Jeremy Cline)
+- New configs in drivers/input (Fedora Kernel Team)
+- New configs in net/bluetooth (Justin M. Forbes)
+- New configs in drivers/clk (Fedora Kernel Team)
+- New configs in init/Kconfig (Jeremy Cline)
+- redhat: allow running fedora-configs and rh-configs targets outside of redhat/ (Herton R. Krzesinski)
+- all: unify the disable of goldfish (android emulation platform) (Peter Robinson)
+- common: minor cleanup/de-dupe of dma/dmabuf debug configs (Peter Robinson)
+- common/ark: these drivers/arches were removed in 5.12 (Peter Robinson)
+- Correct kernel-devel make prepare build for 5.12. (Paulo E. Castro)
+- redhat: add initial support for centos stream dist-git sync on Makefiles (Herton R. Krzesinski)
+- redhat/configs: Enable CONFIG_SCHED_STACK_END_CHECK for Fedora and ARK (Josh Poimboeuf) [1856174]
+- CONFIG_VFIO now selects IOMMU_API instead of depending on it, causing several config mismatches for the zfcpdump kernel (Justin M. Forbes)
+- Turn off weak-modules for Fedora (Justin M. Forbes)
+- redhat: enable CONFIG_FW_LOADER_COMPRESS for ARK (Herton R. Krzesinski) [1939095]
+- Fedora: filters: update to move dfl-emif to modules (Peter Robinson)
+- drop duplicate DEVFREQ_GOV_SIMPLE_ONDEMAND config (Peter Robinson)
+- efi: The EFI_VARS is legacy and now x86 only (Peter Robinson)
+- common: enable RTC_SYSTOHC to supplement update_persistent_clock64 (Peter Robinson)
+- generic: arm: enable SCMI for all options (Peter Robinson)
+- fedora: the PCH_CAN driver is x86-32 only (Peter Robinson)
+- common: disable legacy CAN device support (Peter Robinson)
+- common: Enable Microchip MCP251x/MCP251xFD CAN controllers (Peter Robinson)
+- common: Bosch MCAN support for Intel Elkhart Lake (Peter Robinson)
+- common: enable CAN_PEAK_PCIEFD PCI-E driver (Peter Robinson)
+- common: disable CAN_PEAK_PCIEC PCAN-ExpressCard (Peter Robinson)
+- common: enable common CAN layer 2 protocols (Peter Robinson)
+- ark: disable CAN_LEDS option (Peter Robinson)
+- Fedora: Turn on SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC option (Hans de Goede)
+- Fedora: enable modules for surface devices (Dave Olsthoorn)
+- Turn on SND_SOC_INTEL_SOUNDWIRE_SOF_MACH for Fedora again (Justin M. Forbes)
+- common: fix WM8804 codec dependencies (Peter Robinson)
+- Build SERIO_SERPORT as a module (Peter Robinson)
+- input: touchscreen: move ELO and Wacom serial touchscreens to x86 (Peter Robinson)
+- Sync serio touchscreens for non x86 architectures to the same as ARK (Peter Robinson)
+- Only enable SERIO_LIBPS2 on x86 (Peter Robinson)
+- Only enable PC keyboard controller and associated keyboard on x86 (Peter Robinson)
+- Generic: Mouse: Tweak generic serial mouse options (Peter Robinson)
+- Only enable PS2 Mouse options on x86 (Peter Robinson)
+- Disable bluetooth highspeed by default (Peter Robinson)
+- Fedora: A few more general updates for 5.12 window (Peter Robinson)
+- Fedora: Updates for 5.12 merge window (Peter Robinson)
+- Fedora: remove dead options that were removed upstream (Peter Robinson)
+- redhat: remove CONFIG_DRM_PANEL_XINGBANGDA_XBD599 (Herton R. Krzesinski)
+- New configs in arch/powerpc (Fedora Kernel Team)
+- Turn on CONFIG_PPC_QUEUED_SPINLOCKS as it is default upstream now (Justin M. Forbes)
+- Update pending-common configs to address new upstream config deps (Justin M. Forbes)
+- rpmspec: ship gpio-watch.debug in the proper debuginfo package (Herton R. Krzesinski)
+- Removed description text as a comment confuses the config generation (Justin M. Forbes)
+- New configs in drivers/dma-buf (Jeremy Cline)
+- Fedora: ARMv7: build for 16 CPUs. (Peter Robinson)
+- Fedora: only enable DEBUG_HIGHMEM on debug kernels (Peter Robinson)
+- process_configs.sh: fix find/xargs data flow (Ondrej Mosnacek)
+- Fedora config update (Justin M. Forbes)
+- fedora: minor arm sound config updates (Peter Robinson)
+- Fix trailing white space in redhat/configs/fedora/generic/CONFIG_SND_INTEL_BYT_PREFER_SOF (Justin M. Forbes)
+- Add a redhat/rebase-notes.txt file (Hans de Goede)
+- Turn on SND_INTEL_BYT_PREFER_SOF for Fedora (Hans de Goede)
+- CI: Drop MR ID from the name variable (Veronika Kabatova)
+- redhat: add DUP and kpatch certificates to system trusted keys for RHEL build (Herton R. Krzesinski)
+- The comments in CONFIG_USB_RTL8153_ECM actually turn off CONFIG_USB_RTL8152 (Justin M. Forbes)
+- Update CKI pipeline project (Veronika Kabatova)
+- Turn off additional KASAN options for Fedora (Justin M. Forbes)
+- Rename the master branch to rawhide for Fedora (Justin M. Forbes)
+- Makefile targets for packit integration (Ben Crocker)
+- Turn off KASAN for rawhide debug builds (Justin M. Forbes)
+- New configs in arch/arm64 (Justin Forbes)
+- Remove deprecated Intel MIC config options (Peter Robinson)
+- redhat: replace inline awk script with genlog.py call (Herton R. Krzesinski)
+- redhat: add genlog.py script (Herton R. Krzesinski)
+- kernel.spec.template - fix use_vdso usage (Ben Crocker)
+- redhat: remove remaining references of CONFIG_RH_DISABLE_DEPRECATED (Herton R. Krzesinski)
+- Turn off vdso_install for ppc (Justin M. Forbes)
+- Remove bpf-helpers.7 from bpftool package (Jiri Olsa)
+- New configs in lib/Kconfig.debug (Fedora Kernel Team)
+- Turn off CONFIG_VIRTIO_CONSOLE for s390x zfcpdump (Justin M. Forbes)
+- New configs in drivers/clk (Justin M. Forbes)
+- Keep VIRTIO_CONSOLE on s390x available. (Jakub Čajka)
+- New configs in lib/Kconfig.debug (Jeremy Cline)
+- Fedora 5.11 config updates part 4 (Justin M. Forbes)
+- Fedora 5.11 config updates part 3 (Justin M. Forbes)
+- Fedora 5.11 config updates part 2 (Justin M. Forbes)
+- Update internal (test) module list from RHEL-8 (Joe Lawrence) [1915073]
+- Fix USB_XHCI_PCI regression (Justin M. Forbes)
+- fedora: fixes for ARMv7 build issue by disabling HIGHPTE (Peter Robinson)
+- all: s390x: Increase CONFIG_PCI_NR_FUNCTIONS to 512 (#1888735) (Dan Horák)
+- Fedora 5.11 configs pt 1 (Justin M. Forbes)
+- redhat: avoid conflict with mod-blacklist.sh and released_kernel defined (Herton R. Krzesinski)
+- redhat: handle certificate files conditionally as done for src.rpm (Herton R. Krzesinski)
+- specfile: add %%{?_smp_mflags} to "make headers_install" in tools/testing/selftests (Denys Vlasenko)
+- specfile: add %%{?_smp_mflags} to "make samples/bpf/" (Denys Vlasenko)
+- Run MR testing in CKI pipeline (Veronika Kabatova)
+- Reword comment (Nicolas Chauvet)
+- Add with_cross_arm conditional (Nicolas Chauvet)
+- Redefines __strip if with_cross (Nicolas Chauvet)
+- fedora: only enable ACPI_CONFIGFS, ACPI_CUSTOM_METHOD in debug kernels (Peter Robinson)
+- fedora: User the same EFI_CUSTOM_SSDT_OVERLAYS as ARK (Peter Robinson)
+- all: all arches/kernels enable the same DMI options (Peter Robinson)
+- all: move SENSORS_ACPI_POWER to common/generic (Peter Robinson)
+- fedora: PCIE_HISI_ERR is already in common (Peter Robinson)
+- all: all ACPI platforms enable ATA_ACPI so move it to common (Peter Robinson)
+- all: x86: move shared x86 acpi config options to generic (Peter Robinson)
+- All: x86: Move ACPI_VIDEO to common/x86 (Peter Robinson)
+- All: x86: Enable ACPI_DPTF (Intel DPTF) (Peter Robinson)
+- All: enable ACPI_BGRT for all ACPI platforms. (Peter Robinson)
+- All: Only build ACPI_EC_DEBUGFS for debug kernels (Peter Robinson)
+- All: Disable Intel Classmate PC ACPI_CMPC option (Peter Robinson)
+- cleanup: ACPI_PROCFS_POWER was removed upstream (Peter Robinson)
+- All: ACPI: De-dupe the ACPI options that are the same across ark/fedora on x86/arm (Peter Robinson)
+- Enable the vkms module in Fedora (Jeremy Cline)
+- Fedora: arm updates for 5.11 and general cross Fedora cleanups (Peter Robinson)
+- Add gcc-c++ to BuildRequires (Justin M. Forbes)
+- Update CONFIG_KASAN_HW_TAGS (Justin M. Forbes)
+- fedora: arm: move generic power off/reset to all arm (Peter Robinson)
+- fedora: ARMv7: build in DEVFREQ_GOV_SIMPLE_ONDEMAND until I work out why it's changed (Peter Robinson)
+- fedora: cleanup joystick_adc (Peter Robinson)
+- fedora: update some display options (Peter Robinson)
+- fedora: arm: enable TI PRU options (Peter Robinson)
+- fedora: arm: minor exynos plaform updates (Peter Robinson)
+- arm: SoC: disable Toshiba Visconti SoC (Peter Robinson)
+- common: disable ARCH_BCM4908 (NFC) (Peter Robinson)
+- fedora: minor arm config updates (Peter Robinson)
+- fedora: enable Tegra 234 SoC (Peter Robinson)
+- fedora: arm: enable new Hikey 3xx options (Peter Robinson)
+- Fedora: USB updates (Peter Robinson)
+- fedora: enable the GNSS receiver subsystem (Peter Robinson)
+- Remove POWER_AVS as no longer upstream (Peter Robinson)
+- Cleanup RESET_RASPBERRYPI (Peter Robinson)
+- Cleanup GPIO_CDEV_V1 options. (Peter Robinson)
+- fedora: arm crypto updates (Peter Robinson)
+- CONFIG_KASAN_HW_TAGS for aarch64 (Justin M. Forbes)
+- Fedora: cleanup PCMCIA configs, move to x86 (Peter Robinson)
+- New configs in drivers/rtc (Fedora Kernel Team)
+- redhat/configs: Enable CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL (Josh Poimboeuf) [1856176]
+- redhat/configs: Enable CONFIG_GCC_PLUGIN_STRUCTLEAK (Josh Poimboeuf) [1856176]
+- redhat/configs: Enable CONFIG_GCC_PLUGINS on ARK (Josh Poimboeuf) [1856176]
+- redhat/configs: Enable CONFIG_KASAN on Fedora (Josh Poimboeuf) [1856176]
+- New configs in init/Kconfig (Fedora Kernel Team)
+- build_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
+- genspec.sh: Fix syntax flagged by shellcheck (Ben Crocker)
+- mod-blacklist.sh: Fix syntax flagged by shellcheck (Ben Crocker)
+- Enable Speakup accessibility driver (Justin M. Forbes)
+- New configs in init/Kconfig (Fedora Kernel Team)
+- Fix fedora config mismatch due to dep changes (Justin M. Forbes)
+- New configs in drivers/crypto (Jeremy Cline)
+- Remove duplicate ENERGY_MODEL configs (Peter Robinson)
+- This is selected by PCIE_QCOM so must match (Justin M. Forbes)
+- drop unused BACKLIGHT_GENERIC (Peter Robinson)
+- Remove cp instruction already handled in instruction below. (Paulo E. Castro)
+- Add all the dependencies gleaned from running `make prepare` on a bloated devel kernel. (Paulo E. Castro)
+- Add tools to path mangling script. (Paulo E. Castro)
+- Remove duplicate cp statement which is also not specific to x86. (Paulo E. Castro)
+- Correct orc_types failure whilst running `make prepare` https://bugzilla.redhat.com/show_bug.cgi?id=1882854 (Paulo E. Castro)
+- redhat: ark: enable CONFIG_IKHEADERS (Jiri Olsa)
+- Add missing '$' sign to (GIT) in redhat/Makefile (Augusto Caringi)
+- Remove filterdiff and use native git instead (Don Zickus)
+- New configs in net/sched (Justin M. Forbes)
+- New configs in drivers/mfd (CKI@GitLab)
+- New configs in drivers/mfd (Fedora Kernel Team)
+- New configs in drivers/firmware (Fedora Kernel Team)
+- Temporarily backout parallel xz script (Justin M. Forbes)
+- redhat: explicitly disable CONFIG_IMA_APPRAISE_SIGNED_INIT (Bruno Meneguele)
+- redhat: enable CONFIG_EVM_LOAD_X509 on ARK (Bruno Meneguele)
+- redhat: enable CONFIG_EVM_ATTR_FSUUID on ARK (Bruno Meneguele)
+- redhat: enable CONFIG_EVM in all arches and flavors (Bruno Meneguele)
+- redhat: enable CONFIG_IMA_LOAD_X509 on ARK (Bruno Meneguele)
+- redhat: set CONFIG_IMA_DEFAULT_HASH to SHA256 (Bruno Meneguele)
+- redhat: enable CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT (Bruno Meneguele)
+- redhat: enable CONFIG_IMA_READ_POLICY on ARK (Bruno Meneguele)
+- redhat: set default IMA template for all ARK arches (Bruno Meneguele)
+- redhat: enable CONFIG_IMA_DEFAULT_HASH_SHA256 for all flavors (Bruno Meneguele)
+- redhat: disable CONFIG_IMA_DEFAULT_HASH_SHA1 (Bruno Meneguele)
+- redhat: enable CONFIG_IMA_ARCH_POLICY for ppc and x86 (Bruno Meneguele)
+- redhat: enable CONFIG_IMA_APPRAISE_MODSIG (Bruno Meneguele)
+- redhat: enable CONFIG_IMA_APPRAISE_BOOTPARAM (Bruno Meneguele)
+- redhat: enable CONFIG_IMA_APPRAISE (Bruno Meneguele)
+- redhat: enable CONFIG_INTEGRITY for aarch64 (Bruno Meneguele)
+- kernel: Update some missing KASAN/KCSAN options (Jeremy Linton)
+- kernel: Enable coresight on aarch64 (Jeremy Linton)
+- Update CONFIG_INET6_ESPINTCP (Justin Forbes)
+- New configs in net/ipv6 (Justin M. Forbes)
+- fedora: move CONFIG_RTC_NVMEM options from ark to common (Peter Robinson)
+- configs: Enable CONFIG_DEBUG_INFO_BTF (Don Zickus)
+- fedora: some minor arm audio config tweaks (Peter Robinson)
+- Ship xpad with default modules on Fedora and RHEL (Bastien Nocera)
+- Fedora: Only enable legacy serial/game port joysticks on x86 (Peter Robinson)
+- Fedora: Enable the options required for the Librem 5 Phone (Peter Robinson)
+- Fedora config update (Justin M. Forbes)
+- Fedora config change because CONFIG_FSL_DPAA2_ETH now selects CONFIG_FSL_XGMAC_MDIO (Justin M. Forbes)
+- redhat: generic enable CONFIG_INET_MPTCP_DIAG (Davide Caratti)
+- Fedora config update (Justin M. Forbes)
+- Enable NANDSIM for Fedora (Justin M. Forbes)
+- Re-enable CONFIG_ACPI_TABLE_UPGRADE for Fedora since upstream disables this if secureboot is active (Justin M. Forbes)
+- Ath11k related config updates (Justin M. Forbes)
+- Fedora config updates for ath11k (Justin M. Forbes)
+- Turn on ATH11K for Fedora (Justin M. Forbes)
+- redhat: enable CONFIG_INTEL_IOMMU_SVM (Jerry Snitselaar)
+- More Fedora config fixes (Justin M. Forbes)
+- Fedora 5.10 config updates (Justin M. Forbes)
+- Fedora 5.10 configs round 1 (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- Allow kernel-tools to build without selftests (Don Zickus)
+- Allow building of kernel-tools standalone (Don Zickus)
+- redhat: ark: disable CONFIG_NET_ACT_CTINFO (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_TEQL (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_SFB (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_QFQ (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_PLUG (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_PIE (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_HHF (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_DSMARK (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_DRR (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_CODEL (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_CHOKE (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_CBQ (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_SCH_ATM (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_EMATCH and sub-targets (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_CLS_TCINDEX (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_CLS_RSVP6 (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_CLS_RSVP (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_CLS_ROUTE4 (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_CLS_BASIC (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_ACT_SKBMOD (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_ACT_SIMP (Davide Caratti)
+- redhat: ark: disable CONFIG_NET_ACT_NAT (Davide Caratti)
+- arm64/defconfig: Enable CONFIG_KEXEC_FILE (Bhupesh Sharma) [1821565]
+- redhat/configs: Cleanup CONFIG_CRYPTO_SHA512 (Prarit Bhargava)
+- New configs in drivers/mfd (Fedora Kernel Team)
+- Fix LTO issues with kernel-tools (Don Zickus)
+- Point pathfix to the new location for gen_compile_commands.py (Justin M. Forbes)
+- configs: Disable CONFIG_SECURITY_SELINUX_DISABLE (Ondrej Mosnacek)
+- [Automatic] Handle config dependency changes (Don Zickus)
+- configs/iommu: Add config comment to empty CONFIG_SUN50I_IOMMU file (Jerry Snitselaar)
+- New configs in kernel/trace (Fedora Kernel Team)
+- Fix Fedora config locations (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- configs: enable CONFIG_CRYPTO_CTS=y so cts(cbc(aes)) is available in FIPS mode (Vladis Dronov) [1855161]
+- Partial revert: Add master merge check (Don Zickus)
+- Update Maintainers doc to reflect workflow changes (Don Zickus)
+- WIP: redhat/docs: Update documentation for single branch workflow (Prarit Bhargava)
+- Add CONFIG_ARM64_MTE which is not picked up by the config scripts for some reason (Justin M. Forbes)
+- Disable Speakup synth DECEXT (Justin M. Forbes)
+- Enable Speakup for Fedora since it is out of staging (Justin M. Forbes)
+- Modify patchlist changelog output (Don Zickus)
+- process_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
+- generate_all_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
+- redhat/self-test: Initial commit (Ben Crocker)
+- arch/x86: Remove vendor specific CPU ID checks (Prarit Bhargava)
+- redhat: Replace hardware.redhat.com link in Unsupported message (Prarit Bhargava) [1810301]
+- x86: Fix compile issues with rh_check_supported() (Don Zickus)
+- KEYS: Make use of platform keyring for module signature verify (Robert Holmes)
+- ARM: tegra: usb no reset (Peter Robinson)
+- arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT (Jon Masters)
+- redhat: rh_kabi: deduplication friendly structs (Jiri Benc)
+- redhat: rh_kabi add a comment with warning about RH_KABI_EXCLUDE usage (Jiri Benc)
+- redhat: rh_kabi: introduce RH_KABI_EXTEND_WITH_SIZE (Jiri Benc)
+- redhat: rh_kabi: Indirect EXTEND macros so nesting of other macros will resolve. (Don Dutile)
+- redhat: rh_kabi: Fix RH_KABI_SET_SIZE to use dereference operator (Tony Camuso)
+- redhat: rh_kabi: Add macros to size and extend structs (Prarit Bhargava)
+- Removing Obsolete hba pci-ids from rhel8 (Dick Kennedy) [1572321]
+- mptsas: pci-id table changes (Laura Abbott)
+- mptspi: pci-id table changes (Laura Abbott)
+- qla2xxx: Remove PCI IDs of deprecated adapter (Jeremy Cline)
+- hpsa: remove old cciss-based smartarray pci ids (Joseph Szczypek) [1471185]
+- kernel: add SUPPORT_REMOVED kernel taint (Tomas Henzl) [1602033]
+- Rename RH_DISABLE_DEPRECATED to RHEL_DIFFERENCES (Don Zickus)
+- s390: Lock down the kernel when the IPL secure flag is set (Jeremy Cline)
+- efi: Lock down the kernel if booted in secure boot mode (David Howells)
+- efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode (David Howells)
+- security: lockdown: expose a hook to lock the kernel down (Jeremy Cline)
+- Make get_cert_list() use efi_status_to_str() to print error messages. (Peter Jones)
+- Add efi_status_to_str() and rework efi_status_to_err(). (Peter Jones)
+- Add support for deprecating processors (Laura Abbott) [1565717 1595918 1609604 1610493]
+- arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT (Jeremy Cline)
+- iommu/arm-smmu: workaround DMA mode issues (Laura Abbott)
+- rh_kabi: introduce RH_KABI_EXCLUDE (Jakub Racek) [1652256]
+- ipmi: do not configure ipmi for HPE m400 (Laura Abbott) [1670017]
+- kABI: Add generic kABI macros to use for kABI workarounds (Myron Stowe) [1546831]
+- add pci_hw_vendor_status() (Maurizio Lombardi) [1590829]
+- ahci: thunderx2: Fix for errata that affects stop engine (Robert Richter) [1563590]
+- Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon (Robert Richter) [1563590]
+- bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter (Eugene Syromiatnikov) [1561171]
+- add Red Hat-specific taint flags (Eugene Syromiatnikov) [1559877]
+- tags.sh: Ignore redhat/rpm (Jeremy Cline)
+- put RHEL info into generated headers (Laura Abbott) [1663728]
+- aarch64: acpi scan: Fix regression related to X-Gene UARTs (Mark Salter) [1519554]
+- ACPI / irq: Workaround firmware issue on X-Gene based m400 (Mark Salter) [1519554]
+- modules: add rhelversion MODULE_INFO tag (Laura Abbott)
+- ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support (Al Stone) [1518076]
+- Add Red Hat tainting (Laura Abbott) [1565704 1652266]
+- Introduce CONFIG_RH_DISABLE_DEPRECATED (Laura Abbott)
+- Stop merging ark-patches for release (Don Zickus)
+- Fix path location for ark-update-configs.sh (Don Zickus)
+- Combine Red Hat patches into single patch (Don Zickus)
+- New configs in drivers/misc (Jeremy Cline)
+- New configs in drivers/net/wireless (Justin M. Forbes)
+- New configs in drivers/phy (Fedora Kernel Team)
+- New configs in drivers/tty (Fedora Kernel Team)
+- Set SquashFS decompression options for all flavors to match RHEL (Bohdan Khomutskyi)
+- configs: Enable CONFIG_ENERGY_MODEL (Phil Auld)
+- New configs in drivers/pinctrl (Fedora Kernel Team)
+- Update CONFIG_THERMAL_NETLINK (Justin Forbes)
+- Separate merge-upstream and release stages (Don Zickus)
+- Re-enable CONFIG_IR_SERIAL on Fedora (Prarit Bhargava)
+- Create Patchlist.changelog file (Don Zickus)
+- Filter out upstream commits from changelog (Don Zickus)
+- Merge Upstream script fixes (Don Zickus)
+- kernel.spec: Remove kernel-keys directory on rpm erase (Prarit Bhargava)
+- Add mlx5_vdpa to module filter for Fedora (Justin M. Forbes)
+- Add python3-sphinx_rtd_theme buildreq for docs (Justin M. Forbes)
+- redhat/configs/process_configs.sh: Remove *.config.orig files (Prarit Bhargava)
+- redhat/configs/process_configs.sh: Add process_configs_known_broken flag (Prarit Bhargava)
+- redhat/Makefile: Fix '*-configs' targets (Prarit Bhargava)
+- dist-merge-upstream: Checkout known branch for ci scripts (Don Zickus)
+- kernel.spec: don't override upstream compiler flags for ppc64le (Dan Horák)
+- Fedora config updates (Justin M. Forbes)
+- Fedora confi gupdate (Justin M. Forbes)
+- mod-sign.sh: Fix syntax flagged by shellcheck (Ben Crocker)
+- Swap how ark-latest is built (Don Zickus)
+- Add extra version bump to os-build branch (Don Zickus)
+- dist-release: Avoid needless version bump. (Don Zickus)
+- Add dist-fedora-release target (Don Zickus)
+- Remove redundant code in dist-release (Don Zickus)
+- Makefile.common rename TAG to _TAG (Don Zickus)
+- Fedora config change (Justin M. Forbes)
+- Fedora filter update (Justin M. Forbes)
+- Config update for Fedora (Justin M. Forbes)
+- enable PROTECTED_VIRTUALIZATION_GUEST for all s390x kernels (Dan Horák)
+- redhat: ark: enable CONFIG_NET_SCH_TAPRIO (Davide Caratti)
+- redhat: ark: enable CONFIG_NET_SCH_ETF (Davide Caratti)
+- More Fedora config updates (Justin M. Forbes)
+- New config deps (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- First half of config updates for Fedora (Justin M. Forbes)
+- Updates for Fedora arm architectures for the 5.9 window (Peter Robinson)
+- Merge 5.9 config changes from Peter Robinson (Justin M. Forbes)
+- Add config options that only show up when we prep on arm (Justin M. Forbes)
+- Config updates for Fedora (Justin M. Forbes)
+- fedora: enable enery model (Peter Robinson)
+- Use the configs/generic config for SND_HDA_INTEL everywhere (Peter Robinson)
+- Enable ZSTD compression algorithm on all kernels (Peter Robinson)
+- Enable ARM_SMCCC_SOC_ID on all aarch64 kernels (Peter Robinson)
+- iio: enable LTR-559 light and proximity sensor (Peter Robinson)
+- iio: chemical: enable some popular chemical and partical sensors (Peter Robinson)
+- More mismatches (Justin M. Forbes)
+- Fedora config change due to deps (Justin M. Forbes)
+- CONFIG_SND_SOC_MAX98390 is now selected by SND_SOC_INTEL_DA7219_MAX98357A_GENERIC (Justin M. Forbes)
+- Config change required for build part 2 (Justin M. Forbes)
+- Config change required for build (Justin M. Forbes)
+- Fedora config update (Justin M. Forbes)
+- Add ability to sync upstream through Makefile (Don Zickus)
+- Add master merge check (Don Zickus)
+- Replace hardcoded values 'os-build' and project id with variables (Don Zickus)
+- redhat/Makefile.common: Fix MARKER (Prarit Bhargava)
+- gitattributes: Remove unnecesary export restrictions (Prarit Bhargava)
+- Add new certs for dual signing with boothole (Justin M. Forbes)
+- Update secureboot signing for dual keys (Justin M. Forbes)
+- fedora: enable LEDS_SGM3140 for arm configs (Peter Robinson)
+- Enable CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG (Justin M. Forbes)
+- redhat/configs: Fix common CONFIGs (Prarit Bhargava)
+- redhat/configs: General CONFIG cleanups (Prarit Bhargava)
+- redhat/configs: Update & generalize evaluate_configs (Prarit Bhargava)
+- fedora: arm: Update some meson config options (Peter Robinson)
+- redhat/docs: Add Fedora RPM tagging date (Prarit Bhargava)
+- Update config for renamed panel driver. (Peter Robinson)
+- Enable SERIAL_SC16IS7XX for SPI interfaces (Peter Robinson)
+- s390x-zfcpdump: Handle missing Module.symvers file (Don Zickus)
+- Fedora config updates (Justin M. Forbes)
+- redhat/configs: Add .tmp files to .gitignore (Prarit Bhargava)
+- disable uncommon TCP congestion control algorithms (Davide Caratti)
+- Add new bpf man pages (Justin M. Forbes)
+- Add default option for CONFIG_ARM64_BTI_KERNEL to pending-common so that eln kernels build (Justin M. Forbes)
+- redhat/Makefile: Add fedora-configs and rh-configs make targets (Prarit Bhargava)
+- redhat/configs: Use SHA512 for module signing (Prarit Bhargava)
+- genspec.sh: 'touch' empty Patchlist file for single tarball (Don Zickus)
+- Fedora config update for rc1 (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- redhat/Makefile.common: fix RPMKSUBLEVEL condition (Ondrej Mosnacek)
+- redhat/Makefile: silence KABI tar output (Ondrej Mosnacek)
+- One more Fedora config update (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- Fix PATCHLEVEL for merge window (Justin M. Forbes)
+- Change ark CONFIG_COMMON_CLK to yes, it is selected already by other options (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- More module filtering for Fedora (Justin M. Forbes)
+- Update filters for rnbd in Fedora (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- Fix up module filtering for 5.8 (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- More Fedora config work (Justin M. Forbes)
+- RTW88BE and CE have been extracted to their own modules (Justin M. Forbes)
+- Set CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK for Fedora (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- Arm64 Use Branch Target Identification for kernel (Justin M. Forbes)
+- Change value of CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE (Justin M. Forbes)
+- Fedora config updates (Justin M. Forbes)
+- Fix configs for Fedora (Justin M. Forbes)
+- Add zero-commit to format-patch options (Justin M. Forbes)
+- Copy Makefile.rhelver as a source file rather than a patch (Jeremy Cline)
+- Move the sed to clear the patch templating outside of conditionals (Justin M. Forbes)
+- Match template format in kernel.spec.template (Justin M. Forbes)
+- Break out the Patches into individual files for dist-git (Justin M. Forbes)
+- Break the Red Hat patch into individual commits (Jeremy Cline)
+- Fix update_scripts.sh unselective pattern sub (David Howells)
+- Add cec to the filter overrides (Justin M. Forbes)
+- Add overrides to filter-modules.sh (Justin M. Forbes)
+- redhat/configs: Enable CONFIG_SMC91X and disable CONFIG_SMC911X (Prarit Bhargava) [1722136]
+- Include bpftool-struct_ops man page in the bpftool package (Jeremy Cline)
+- Add sharedbuffer_configuration.py to the pathfix.py script (Jeremy Cline)
+- Use __make macro instead of make (Tom Stellard)
+- Sign off generated configuration patches (Jeremy Cline)
+- Drop the static path configuration for the Sphinx docs (Jeremy Cline)
+- redhat: Add dummy-module kernel module (Prarit Bhargava)
+- redhat: enable CONFIG_LWTUNNEL_BPF (Jiri Benc)
+- Remove typoed config file aarch64CONFIG_SM_GCC_8150 (Justin M. Forbes)
+- Add Documentation back to kernel-devel as it has Kconfig now (Justin M. Forbes)
+- Copy distro files rather than moving them (Jeremy Cline)
+- kernel.spec: fix 'make scripts' for kernel-devel package (Brian Masney)
+- Makefile: correct help text for dist-cross-<arch>-rpms (Brian Masney)
+- redhat/Makefile: Fix RHEL8 python warning (Prarit Bhargava)
+- redhat: Change Makefile target names to dist- (Prarit Bhargava)
+- configs: Disable Serial IR driver (Prarit Bhargava)
+- Fix "multiple %%files for package kernel-tools" (Pablo Greco)
+- Introduce a Sphinx documentation project (Jeremy Cline)
+- Build ARK against ELN (Don Zickus)
+- Drop the requirement to have a remote called linus (Jeremy Cline)
+- Rename 'internal' branch to 'os-build' (Don Zickus)
+- Only include open merge requests with "Include in Releases" label (Jeremy Cline)
+- Package gpio-watch in kernel-tools (Jeremy Cline)
+- Exit non-zero if the tag already exists for a release (Jeremy Cline)
+- Adjust the changelog update script to not push anything (Jeremy Cline)
+- Drop --target noarch from the rh-rpms make target (Jeremy Cline)
+- Add a script to generate release tags and branches (Jeremy Cline)
+- Set CONFIG_VDPA for fedora (Justin M. Forbes)
+- Add a README to the dist-git repository (Jeremy Cline)
+- Provide defaults in ark-rebase-patches.sh (Jeremy Cline)
+- Default ark-rebase-patches.sh to not report issues (Jeremy Cline)
+- Drop DIST from release commits and tags (Jeremy Cline)
+- Place the buildid before the dist in the release (Jeremy Cline)
+- Sync up with Fedora arm configuration prior to merging (Jeremy Cline)
+- Disable CONFIG_PROTECTED_VIRTUALIZATION_GUEST for zfcpdump (Jeremy Cline)
+- Add RHMAINTAINERS file and supporting conf (Don Zickus)
+- Add a script to test if all commits are signed off (Jeremy Cline)
+- Fix make rh-configs-arch (Don Zickus)
+- Drop RH_FEDORA in favor of the now-merged RHEL_DIFFERENCES (Jeremy Cline)
+- Sync up Fedora configs from the first week of the merge window (Jeremy Cline)
+- Migrate blacklisting floppy.ko to mod-blacklist.sh (Don Zickus)
+- kernel packaging: Combine mod-blacklist.sh and mod-extra-blacklist.sh (Don Zickus)
+- kernel packaging: Fix extra namespace collision (Don Zickus)
+- mod-extra.sh: Rename to mod-blacklist.sh (Don Zickus)
+- mod-extra.sh: Make file generic (Don Zickus)
+- Fix a painfully obvious YAML syntax error in .gitlab-ci.yml (Jeremy Cline)
+- Add in armv7hl kernel header support (Don Zickus)
+- Disable all BuildKernel commands when only building headers (Don Zickus)
+- Drop any gitlab-ci patches from ark-patches (Jeremy Cline)
+- Build the srpm for internal branch CI using the vanilla tree (Jeremy Cline)
+- Pull in the latest ARM configurations for Fedora (Jeremy Cline)
+- Fix xz memory usage issue (Neil Horman)
+- Use ark-latest instead of master for update script (Jeremy Cline)
+- Move the CI jobs back into the ARK repository (Jeremy Cline)
+- Sync up ARK's Fedora config with the dist-git repository (Jeremy Cline)
+- Pull in the latest configuration changes from Fedora (Jeremy Cline)
+- configs: enable CONFIG_NET_SCH_CBS (Marcelo Ricardo Leitner)
+- Drop configuration options in fedora/ that no longer exist (Jeremy Cline)
+- Set RH_FEDORA for ARK and Fedora (Jeremy Cline)
+- redhat/kernel.spec: Include the release in the kernel COPYING file (Jeremy Cline)
+- redhat/kernel.spec: add scripts/jobserver-exec to py3_shbang_opts list (Jeremy Cline)
+- redhat/kernel.spec: package bpftool-gen man page (Jeremy Cline)
+- distgit-changelog: handle multiple y-stream BZ numbers (Bruno Meneguele)
+- redhat/kernel.spec: remove all inline comments (Bruno Meneguele)
+- redhat/genspec: awk unknown whitespace regex pattern (Bruno Meneguele)
+- Improve the readability of gen_config_patches.sh (Jeremy Cline)
+- Fix some awkward edge cases in gen_config_patches.sh (Jeremy Cline)
+- Update the CI environment to use Fedora 31 (Jeremy Cline)
+- redhat: drop whitespace from with_gcov macro (Jan Stancek)
+- configs: Enable CONFIG_KEY_DH_OPERATIONS on ARK (Ondrej Mosnacek)
+- configs: Adjust CONFIG_MPLS_ROUTING and CONFIG_MPLS_IPTUNNEL (Laura Abbott)
+- New configs in lib/crypto (Jeremy Cline)
+- New configs in drivers/char (Jeremy Cline)
+- Turn on BLAKE2B for Fedora (Jeremy Cline)
+- kernel.spec.template: Clean up stray *.h.s files (Laura Abbott)
+- Build the SRPM in the CI job (Jeremy Cline)
+- New configs in net/tls (Jeremy Cline)
+- New configs in net/tipc (Jeremy Cline)
+- New configs in lib/kunit (Jeremy Cline)
+- Fix up released_kernel case (Laura Abbott)
+- New configs in lib/Kconfig.debug (Jeremy Cline)
+- New configs in drivers/ptp (Jeremy Cline)
+- New configs in drivers/nvme (Jeremy Cline)
+- New configs in drivers/net/phy (Jeremy Cline)
+- New configs in arch/arm64 (Jeremy Cline)
+- New configs in drivers/crypto (Jeremy Cline)
+- New configs in crypto/Kconfig (Jeremy Cline)
+- Add label so the Gitlab to email bridge ignores the changelog (Jeremy Cline)
+- Temporarily switch TUNE_DEFAULT to y (Jeremy Cline)
+- Run config test for merge requests and internal (Jeremy Cline)
+- Add missing licensedir line (Laura Abbott)
+- redhat/scripts: Remove redhat/scripts/rh_get_maintainer.pl (Prarit Bhargava)
+- configs: Take CONFIG_DEFAULT_MMAP_MIN_ADDR from Fedra (Laura Abbott)
+- configs: Turn off ISDN (Laura Abbott)
+- Add a script to generate configuration patches (Laura Abbott)
+- Introduce rh-configs-commit (Laura Abbott)
+- kernel-packaging: Remove kernel files from kernel-modules-extra package (Prarit Bhargava)
+- configs: Enable CONFIG_DEBUG_WX (Laura Abbott)
+- configs: Disable wireless USB (Laura Abbott)
+- Clean up some temporary config files (Laura Abbott)
+- configs: New config in drivers/gpu for v5.4-rc1 (Jeremy Cline)
+- configs: New config in arch/powerpc for v5.4-rc1 (Jeremy Cline)
+- configs: New config in crypto for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/usb for v5.4-rc1 (Jeremy Cline)
+- AUTOMATIC: New configs (Jeremy Cline)
+- Skip ksamples for bpf, they are broken (Jeremy Cline)
+- configs: New config in fs/erofs for v5.4-rc1 (Jeremy Cline)
+- configs: New config in mm for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/md for v5.4-rc1 (Jeremy Cline)
+- configs: New config in init for v5.4-rc1 (Jeremy Cline)
+- configs: New config in fs/fuse for v5.4-rc1 (Jeremy Cline)
+- merge.pl: Avoid comments but do not skip them (Don Zickus)
+- configs: New config in drivers/net/ethernet/pensando for v5.4-rc1 (Jeremy Cline)
+- Update a comment about what released kernel means (Laura Abbott)
+- Provide both Fedora and RHEL files in the SRPM (Laura Abbott)
+- kernel.spec.template: Trim EXTRAVERSION in the Makefile (Laura Abbott)
+- kernel.spec.template: Add macros for building with nopatches (Laura Abbott)
+- kernel.spec.template: Add some macros for Fedora differences (Laura Abbott)
+- kernel.spec.template: Consolodate the options (Laura Abbott)
+- configs: Add pending direcory to Fedora (Laura Abbott)
+- kernel.spec.template: Don't run hardlink if rpm-ostree is in use (Laura Abbott)
+- configs: New config in net/can for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/net/phy for v5.4-rc1 (Jeremy Cline)
+- configs: Increase x86_64 NR_UARTS to 64 (Prarit Bhargava) [1730649]
+- configs: turn on ARM64_FORCE_52BIT for debug builds (Jeremy Cline)
+- kernel.spec.template: Tweak the python3 mangling (Laura Abbott)
+- kernel.spec.template: Add --with verbose option (Laura Abbott)
+- kernel.spec.template: Switch to using %%install instead of %%__install (Laura Abbott)
+- kernel.spec.template: Make the kernel.org URL https (Laura Abbott)
+- kernel.spec.template: Update message about secure boot signing (Laura Abbott)
+- kernel.spec.template: Move some with flags definitions up (Laura Abbott)
+- kernel.spec.template: Update some BuildRequires (Laura Abbott)
+- kernel.spec.template: Get rid of %%clean (Laura Abbott)
+- configs: New config in drivers/char for v5.4-rc1 (Jeremy Cline)
+- configs: New config in net/sched for v5.4-rc1 (Jeremy Cline)
+- configs: New config in lib for v5.4-rc1 (Jeremy Cline)
+- configs: New config in fs/verity for v5.4-rc1 (Jeremy Cline)
+- configs: New config in arch/aarch64 for v5.4-rc4 (Jeremy Cline)
+- configs: New config in arch/arm64 for v5.4-rc1 (Jeremy Cline)
+- Flip off CONFIG_ARM64_VA_BITS_52 so the bundle that turns it on applies (Jeremy Cline)
+- New configuration options for v5.4-rc4 (Jeremy Cline)
+- Correctly name tarball for single tarball builds (Laura Abbott)
+- configs: New config in drivers/pci for v5.4-rc1 (Jeremy Cline)
+- Allow overriding the dist tag on the command line (Laura Abbott)
+- Allow scratch branch target to be overridden (Laura Abbott)
+- Remove long dead BUILD_DEFAULT_TARGET (Laura Abbott)
+- Amend the changelog when rebasing (Laura Abbott)
+- configs: New config in drivers/platform for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/pinctrl for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/net/wireless for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/net/ethernet/mellanox for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/net/can for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/hid for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/dma-buf for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/crypto for v5.4-rc1 (Jeremy Cline)
+- configs: New config in arch/s390 for v5.4-rc1 (Jeremy Cline)
+- configs: New config in block for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/cpuidle for v5.4-rc1 (Jeremy Cline)
+- redhat: configs: Split CONFIG_CRYPTO_SHA512 (Laura Abbott)
+- redhat: Set Fedora options (Laura Abbott)
+- Set CRYPTO_SHA3_*_S390 to builtin on zfcpdump (Jeremy Cline)
+- configs: New config in drivers/edac for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/firmware for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/hwmon for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/iio for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/mmc for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/tty for v5.4-rc1 (Jeremy Cline)
+- configs: New config in arch/s390 for v5.4-rc1 (Jeremy Cline)
+- configs: New config in drivers/bus for v5.4-rc1 (Jeremy Cline)
+- Add option to allow mismatched configs on the command line (Laura Abbott)
+- configs: New config in drivers/crypto for v5.4-rc1 (Jeremy Cline)
+- configs: New config in sound/pci for v5.4-rc1 (Jeremy Cline)
+- configs: New config in sound/soc for v5.4-rc1 (Jeremy Cline)
+- gitlab: Add CI job for packaging scripts (Major Hayden)
+- Speed up CI with CKI image (Major Hayden)
+- Disable e1000 driver in ARK (Neil Horman)
+- configs: Fix the pending default for CONFIG_ARM64_VA_BITS_52 (Jeremy Cline)
+- configs: Turn on OPTIMIZE_INLINING for everything (Jeremy Cline)
+- configs: Set valid pending defaults for CRYPTO_ESSIV (Jeremy Cline)
+- Add an initial CI configuration for the internal branch (Jeremy Cline)
+- New drop of configuration options for v5.4-rc1 (Jeremy Cline)
+- New drop of configuration options for v5.4-rc1 (Jeremy Cline)
+- Pull the RHEL version defines out of the Makefile (Jeremy Cline)
+- Sync up the ARK build scripts (Jeremy Cline)
+- Sync up the Fedora Rawhide configs (Jeremy Cline)
+- Sync up the ARK config files (Jeremy Cline)
+- configs: Adjust CONFIG_FORCE_MAX_ZONEORDER for Fedora (Laura Abbott)
+- configs: Add README for some other arches (Laura Abbott)
+- configs: Sync up Fedora configs (Laura Abbott)
+- [initial commit] Add structure for building with git (Laura Abbott)
+- [initial commit] Add Red Hat variables in the top level makefile (Laura Abbott)
+- [initial commit] Red Hat gitignore and attributes (Laura Abbott)
+- [initial commit] Add changelog (Laura Abbott)
+- [initial commit] Add makefile (Laura Abbott)
+- [initial commit] Add files for generating the kernel.spec (Laura Abbott)
+- [initial commit] Add rpm directory (Laura Abbott)
+- [initial commit] Add files for packaging (Laura Abbott)
+- [initial commit] Add kabi files (Laura Abbott)
+- [initial commit] Add scripts (Laura Abbott)
+- [initial commit] Add configs (Laura Abbott)
+- [initial commit] Add Makefiles (Laura Abbott)
+- Linux v7.3.0-0.rc0.0f23d56f17fd
+Resolves: RHEL-100104, RHEL-104231, RHEL-119326, RHEL-122979, RHEL-1242, RHEL-135256, RHEL-141647, RHEL-142637, RHEL-147296, RHEL-150853, RHEL-185930, RHEL-186934, RHEL-1927, RHEL-23931, RHEL-24047, RHEL-24137, RHEL-26170, RHEL-29245, RHEL-32110, RHEL-32895, RHEL-32987, RHEL-35995, RHEL-36646, RHEL-36647, RHEL-40251, RHEL-40411, RHEL-40937, RHEL-41231, RHEL-43425, RHEL-43556, RHEL-44306, RHEL-49398, RHEL-50799, RHEL-51896, RHEL-52629, RHEL-54183, RHEL-56069, RHEL-68296, RHEL-72093, RHEL-78341, RHEL-78931, RHEL-79711, RHEL-79818, RHEL-82779, RHEL-85301, RHEL-8810, RHEL-88228, RHEL-88635, RHEL-94503, RHEL-95436, RHEL-96987, rhbz#1471185, rhbz#1518076, rhbz#1519554, rhbz#1546831, rhbz#1559877, rhbz#1561171, rhbz#1563590, rhbz#1565704, rhbz#1565717, rhbz#1572321, rhbz#1590829, rhbz#1595918, rhbz#1602033, rhbz#1609604, rhbz#1610493, rhbz#1613522, rhbz#1638087, rhbz#1652256, rhbz#1652266, rhbz#1663728, rhbz#1670017, rhbz#1722136, rhbz#1730649, rhbz#1802694, rhbz#1810301, rhbz#1821565, rhbz#1831065, rhbz#1855161, rhbz#1856174, rhbz#1856176, rhbz#1858592, rhbz#1858594, rhbz#1858596, rhbz#1858599, rhbz#1869674, rhbz#1871130, rhbz#1876435, rhbz#1876436, rhbz#1876977, rhbz#1877192, rhbz#1880486, rhbz#1890304, rhbz#1903201, rhbz#1915073, rhbz#1915290, rhbz#1930649, rhbz#1939095, rhbz#1940075, rhbz#1940794, rhbz#1943423, rhbz#1945002, rhbz#1945179, rhbz#1945477, rhbz#1947240, rhbz#1948340, rhbz#1952426, rhbz#1952863, rhbz#1953486, rhbz#1956988, rhbz#1957210, rhbz#1957219, rhbz#1957305, rhbz#1957636, rhbz#1957819, rhbz#1961178, rhbz#1962936, rhbz#1964537, rhbz#1967640, rhbz#1972795, rhbz#1976270, rhbz#1976835, rhbz#1976877, rhbz#1976884, rhbz#1977056, rhbz#1977529, rhbz#1978539, rhbz#1979379, rhbz#1981406, rhbz#1983298, rhbz#1986223, rhbz#1988254, rhbz#1988384, rhbz#1990040, rhbz#1993393, rhbz#1994858, rhbz#1998953, rhbz#2000835, rhbz#2002344, rhbz#2004233, rhbz#2004821, rhbz#2006813, rhbz#2007430, rhbz#2012226, rhbz#2014492, rhbz#2019377, rhbz#2020132, rhbz#2022578, rhbz#2023782, rhbz#2024595, rhbz#2025985, rhbz#2026319, rhbz#2027506, rhbz#2031547, rhbz#2032758, rhbz#2034670, rhbz#2038999, rhbz#2040643, rhbz#2041184, rhbz#2041186, rhbz#2041365, rhbz#2041990, rhbz#2042240, rhbz#2042241, rhbz#2043141, rhbz#2044155, rhbz#2053836, rhbz#2054579, rhbz#2062054, rhbz#2062909, rhbz#2071969, rhbz#2089765, rhbz#2115876, rhbz#2120968, rhbz#2122595, rhbz#2140017, rhbz#2142658, rhbz#2149273, rhbz#2153073, rhbz#2166911, rhbz#2188441, rhbz#2208834, rhbz#2216678, rhbz#2227793, rhbz#2231407, rhbz#2233269, rhbz#2375049
+
+* Tue Aug 18 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-1]
+- Reset Makefile.rhelver for the 7.3 cycle (Justin M. Forbes)
+- Merge configs into common for 7.2 (Justin M. Forbes)
+- redhat/configs: automotive: enable RTC_DRV_PL031 (Eric Chanudet)
+- redhat: name the dtb and UKI arch lists (Jan Stancek)
+- redhat: use one spelling for the nobuildarches files guard (Jan Stancek)
+- redhat: drop stale ppc64 from the kabidw-base arch list (Jan Stancek)
+- redhat: document the kabichk force-off as a seasonal toggle (Jan Stancek)
+- redhat: use one spelling for the include and gemini conditionals (Jan Stancek)
+- redhat: remove unused elf_image_install_path and duplicate defines (Jan Stancek)
+- redhat: drop the dead kernel-tools __requires_exclude python filter (Jan Stancek)
+- redhat: drop the Fedora 41 cross-build gdb-index workaround (Jan Stancek)
+- redhat: drop stale build switches from dist-perf and dist-rpm-baseonly (Jan Stancek)
+- redhat: give kernel-automotive its own summary (Jan Stancek)
+- redhat: drop leftover kernel_kvm_post calls for rt-64k (Jan Stancek)
+- redhat: restore missing summary of the kernel-debug variant (Jan Stancek)
+- redhat: fix parse error in baseonly sanity check message (Jan Stancek)
+Resolves:
+
* Mon Aug 17 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-60]
- dracut-virt.conf: change systemd-pcrphase to systemd-pcrextend (Vitaly Kuznetsov)
- redhat/kernel.spec.template: Switch UKI addons to using UKI cert (Vitaly Kuznetsov)
diff --git a/kernel.spec b/kernel.spec
index 8132f7f..7d1e29f 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -122,6 +122,11 @@ Summary: The Linux kernel
%global signkernel 0
%endif
+# Arches whose kernels ship device tree blobs
+%global dtb_arches aarch64 riscv64
+# Arches that build the EFI unified kernel images
+%global uki_arches x86_64 aarch64 riscv64
+
# RHEL/CentOS specific .SBAT entries
%if 0%{?centos}
%global sbat_suffix centos
@@ -187,18 +192,18 @@ Summary: The Linux kernel
# the --with-release option overrides this setting.)
%define debugbuildsenabled 1
# define buildid .local
-%define specrpmversion 7.2.0
-%define specversion 7.2.0
-%define patchversion 7.2
-%define pkgrelease 61
+%define specrpmversion 7.3.0
+%define specversion 7.3.0
+%define patchversion 7.3
+%define pkgrelease 0.rc0.260818g0f23d56f17fd.3
%define kversion 7
-%define tarfile_release 7.2
+%define tarfile_release 7.2-437-g0f23d56f17fd
# This is needed to do merge window version magic
-%define patchlevel 2
+%define patchlevel 3
# This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 61%{?buildid}%{?dist}
+%define specrelease 0.rc0.260818g0f23d56f17fd.3%{?buildid}%{?dist}
# This defines the kabi tarball version
-%define kabiversion 7.2.0
+%define kabiversion 7.3.0
# If this variable is set to 1, a bpf selftests build failure will cause a
# fatal kernel package build error
@@ -305,7 +310,9 @@ Summary: The Linux kernel
%define with_toolsonly %{?_with_toolsonly: 1} %{?!_with_toolsonly: 0}
# Control whether we perform a compat. check against published ABI.
%define with_kabichk %{?_without_kabichk: 0} %{?!_without_kabichk: 1}
-# Temporarily disable kabi checks until RC.
+# Seasonal toggle, not dead code: flipped off after a rebase and back on
+# once the kABI stablelists are updated for the new release (at RC).
+# While 0, it also forces with_kabidupchk and with_kabidwchk off below.
%define with_kabichk 0
# Control whether we perform a compat. check against DUP ABI.
%define with_kabidupchk %{?_with_kabidupchk: 1} %{?!_with_kabidupchk: 0}
@@ -341,7 +348,7 @@ Summary: The Linux kernel
# Want to build a vanilla kernel build without any non-upstream patches?
%define with_vanilla %{?_with_vanilla: 1} %{?!_with_vanilla: 0}
-%ifarch x86_64 aarch64 riscv64
+%ifarch %{uki_arches}
%define with_efiuki %{?_without_efiuki: 0} %{?!_without_efiuki: 1}
%else
%define with_efiuki 0
@@ -515,8 +522,6 @@ Summary: The Linux kernel
%define with_kabidwchk 0
%define with_kabidw_base 0
%define with_kernel_abi_stablelists 0
-%define with_selftests 0
-%define with_vdso_install 0
%define with_configchecks 0
%endif
@@ -645,7 +650,6 @@ Summary: The Linux kernel
%define hdrarch powerpc
%define make_target vmlinux
%define kernel_image vmlinux
-%define kernel_image_elf 1
%define use_vdso 0
%endif
@@ -934,16 +938,6 @@ BuildRequires: pesign >= 0.10-4
BuildRequires: binutils-%{_build_arch}-linux-gnu, gcc-%{_build_arch}-linux-gnu
%define cross_opts CROSS_COMPILE=%{_build_arch}-linux-gnu-
%define __strip %{_build_arch}-linux-gnu-strip
-
-%if 0%{?fedora} && 0%{?fedora} <= 41
-# Work around find-debuginfo for cross builds.
-# find-debuginfo doesn't support any of CROSS options (RHEL-21797),
-# and since debugedit > 5.0-16.el10, or since commit
-# dfe1f7ff30f4 ("find-debuginfo.sh: Exit with real exit status in parallel jobs")
-# it now aborts on failure and build fails.
-# debugedit-5.1-5 in F42 added support to override tools with target versions.
-%undefine _include_gdb_index
-%endif
%endif
# These below are required to build man pages
@@ -1066,7 +1060,7 @@ Source44: %{name}-riscv64-rhel.config
Source45: %{name}-riscv64-debug-rhel.config
%endif
-%if %{include_rhel} || %{include_automotive}
+%if 0%{?include_rhel} || 0%{?include_automotive}
Source23: x509.genkey.rhel
Source34: def_variants.yaml.rhel
Source41: x509.genkey.centos
@@ -1160,8 +1154,8 @@ Source214: Module.kabi_dup_riscv64
Source300: kernel-abi-stablelists-%{kabiversion}.tar.xz
Source301: kernel-kabi-dw-%{kabiversion}.tar.xz
-%if 0%{include_rt}
-%if 0%{include_rhel}
+%if 0%{?include_rt}
+%if 0%{?include_rhel}
Source474: %{name}-aarch64-rt-rhel.config
Source475: %{name}-aarch64-rt-debug-rhel.config
Source476: %{name}-aarch64-rt-64k-rhel.config
@@ -1169,7 +1163,7 @@ Source477: %{name}-aarch64-rt-64k-debug-rhel.config
Source478: %{name}-x86_64-rt-rhel.config
Source479: %{name}-x86_64-rt-debug-rhel.config
%endif
-%if 0%{include_fedora}
+%if 0%{?include_fedora}
Source480: %{name}-aarch64-rt-fedora.config
Source481: %{name}-aarch64-rt-debug-fedora.config
Source482: %{name}-aarch64-rt-64k-fedora.config
@@ -1181,7 +1175,7 @@ Source487: %{name}-riscv64-rt-debug-fedora.config
%endif
%endif
-%if %{include_automotive}
+%if 0%{?include_automotive}
%if %{with_automotive_build}
Source488: %{name}-aarch64-rhel.config
Source489: %{name}-aarch64-debug-rhel.config
@@ -1320,7 +1314,7 @@ It provides the kernel source files common to all builds.
%if %{with_perf}
%package -n perf
-%if 0%{gemini}
+%if 0%{?gemini}
Epoch: %{gemini}
%endif
Summary: Performance monitoring for the Linux kernel
@@ -1330,7 +1324,7 @@ This package contains the perf tool, which enables performance monitoring
of the Linux kernel.
%package -n perf-debuginfo
-%if 0%{gemini}
+%if 0%{?gemini}
Epoch: %{gemini}
%endif
Summary: Debug information for package perf
@@ -1346,7 +1340,7 @@ This package provides debug information for the perf package.
%{expand:%%global _find_debuginfo_opts %{?_find_debuginfo_opts} -p '.*%%{_bindir}/perf(\.debug)?|.*%%{_libexecdir}/perf-core/.*|.*%%{_libdir}/libperf-jvmti.so(\.debug)?|XXX' -o perf-debuginfo.list}
%package -n python3-perf
-%if 0%{gemini}
+%if 0%{?gemini}
Epoch: %{gemini}
%endif
Summary: Python bindings for apps which will manipulate perf events
@@ -1356,7 +1350,7 @@ written in the Python programming language to use the interface
to manipulate perf events.
%package -n python3-perf-debuginfo
-%if 0%{gemini}
+%if 0%{?gemini}
Epoch: %{gemini}
%endif
Summary: Debug information for package perf python bindings
@@ -1413,7 +1407,6 @@ Obsoletes: cpufrequtils < 1:009-0.6.p1
Obsoletes: cpuspeed < 1:1.5-16
Requires: %{name}-tools-libs = %{specrpmversion}-%{release}
%endif
-%define __requires_exclude ^%{_bindir}/python
%description -n %{name}-tools
This package contains the tools/ directory from the kernel source
and the supporting documentation.
@@ -1459,7 +1452,7 @@ shipped as part of the kernel tools including ynl.
%endif
%package -n rtla
-%if 0%{gemini}
+%if 0%{?gemini}
Epoch: %{gemini}
%endif
Summary: Real-Time Linux Analysis tools
@@ -1477,7 +1470,7 @@ about the properties and root causes of unexpected results.
%if %{with_debuginfo}
%package -n rtla-debuginfo
-%if 0%{gemini}
+%if 0%{?gemini}
Epoch: %{gemini}
%endif
Summary: Debug information for package rtla
@@ -1494,7 +1487,7 @@ This package provides debug information for the rtla package.
%endif
%package -n rv
-%if 0%{gemini}
+%if 0%{?gemini}
Epoch: %{gemini}
%endif
Summary: RV: Runtime Verification
@@ -1508,7 +1501,7 @@ to analyze the logical and timing behavior of Linux.
%if %{with_debuginfo}
%package -n rv-debuginfo
-%if 0%{gemini}
+%if 0%{?gemini}
Epoch: %{gemini}
%endif
Summary: Debug information for package rv
@@ -1996,7 +1989,7 @@ on kernel bugs, as some of these options impact performance noticably.
%endif
%if %{with_debug} && %{with_automotive} && !%{with_automotive_build}
-%define variant_summary The Linux Automotive kernel compiled with extra debugging enabled
+%define variant_summary The Linux kernel compiled for Automotive use with PREEMPT_RT and extra debugging enabled
%kernel_variant_package automotive-debug
%description automotive-debug-core
The kernel package contains the Linux kernel (vmlinuz), the core of any
@@ -2010,7 +2003,7 @@ on kernel bugs, as some of these options impact performance noticably.
%endif
%if %{with_automotive_base}
-%define variant_summary The Linux kernel compiled with PREEMPT_RT enabled
+%define variant_summary The Linux kernel compiled for Automotive use with PREEMPT_RT enabled
%kernel_variant_package automotive
%description automotive-core
This package includes a version of the Linux kernel compiled with the
@@ -2018,6 +2011,7 @@ PREEMPT_RT real-time preemption support, targeted for Automotive platforms
%endif
%if %{with_stock} && %{with_debug}
+%define variant_summary The Linux kernel compiled with extra debugging enabled
%if !%{debugbuildsenabled}
%kernel_variant_package -m debug
%else
@@ -2126,7 +2120,7 @@ Prebuilt default kernel image with auto DTB selection for ARM64 UEFI devices.
# do a few sanity-checks for --with *only builds
%if %{with_baseonly}
%if !%{with_stock}
-%{log_msg "Cannot build --with baseonly, stock build is disabled"}
+%{log_msg "Cannot build with baseonly, stock build is disabled"}
exit 1
%endif
%endif
@@ -2550,7 +2544,7 @@ BuildKernel() {
mkdir -p $RPM_BUILD_ROOT%{debuginfodir}/%{image_install_path}
%endif
-%ifarch aarch64 riscv64
+%ifarch %{dtb_arches}
%{log_msg "Build dtb kernel"}
mkdir -p $RPM_BUILD_ROOT/%{image_install_path}/dtb-$KernelVer
%{make} ARCH=$Arch dtbs INSTALL_DTBS_PATH=$RPM_BUILD_ROOT/%{image_install_path}/dtb-$KernelVer
@@ -4529,13 +4523,11 @@ fi\
%if %{with_realtime_arm64_64k_base}
%kernel_variant_preun -v rt-64k
%kernel_variant_post -v rt-64k
-%kernel_kvm_post rt-64k
%endif
%if %{with_debug} && %{with_realtime_arm64_64k}
%kernel_variant_preun -v rt-64k-debug
%kernel_variant_post -v rt-64k-debug
-%kernel_kvm_post rt-64k-debug
%endif
%if %{with_automotive} && %{with_debug} && !%{with_automotive_build}
@@ -4567,7 +4559,7 @@ fi\
%endif
%if %{with_kabidw_base}
-%ifarch x86_64 s390x ppc64 ppc64le aarch64 riscv64
+%ifarch x86_64 s390x ppc64le aarch64 riscv64
%files kernel-kabidw-base-internal
%defattr(-,root,root)
/kabidw-base/%{_target_cpu}/*
@@ -4768,15 +4760,11 @@ fi\
# empty meta-package
%if %{with_stock_base}
-%ifnarch %nobuildarches noarch
+%ifnarch noarch %{nobuildarches}
%files
%endif
%endif
-# This is %%{image_install_path} on an arch where that includes ELF files,
-# or empty otherwise.
-%define elf_image_install_path %{?kernel_image_elf:%{image_install_path}}
-
#
# This macro defines the %%files sections for a kernel package
# and its devel and debuginfo packages.
@@ -4809,7 +4797,7 @@ fi\
%ghost /%{image_install_path}/%{?-k:%{-k*}}%{!?-k:vmlinuz}-%{KVERREL}%{?3:+%{3}}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/.vmlinuz.hmac \
%ghost /%{image_install_path}/.vmlinuz-%{KVERREL}%{?3:+%{3}}.hmac \
-%ifarch aarch64 riscv64\
+%ifarch %{dtb_arches}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/dtb \
%ghost /%{image_install_path}/dtb-%{KVERREL}%{?3:+%{3}} \
%endif\
@@ -4899,7 +4887,7 @@ fi\
%ghost %attr(0644, root, root) /boot/symvers-%{KVERREL}%{?3:+%{3}}.%compext\
%ghost %attr(0755, root, root) /%{image_install_path}/%{?-k:%{-k*}}%{!?-k:vmlinuz}-%{KVERREL}%{?3:+%{3}}\
%ghost %attr(0644, root, root) /%{image_install_path}/.%{?-k:%{-k*}}%{!?-k:vmlinuz}-%{KVERREL}%{?3:+%{3}}.hmac\
-%ifarch aarch64 riscv64\
+%ifarch %{dtb_arches}\
/lib/modules/%{KVERREL}%{?3:+%{3}}/dtb \
%ghost /%{image_install_path}/dtb-%{KVERREL}%{?3:+%{3}} \
%endif\
@@ -4908,7 +4896,7 @@ fi\
%{expand:%%files %{3}}\
%endif\
%if %{with_gcov}\
-%ifnarch %nobuildarches noarch\
+%ifnarch noarch %{nobuildarches}\
%{expand:%%files -f kernel-%{?3:%{3}-}gcov.list %{?3:%{3}-}gcov}\
%endif\
%endif\
@@ -4976,109 +4964,50 @@ fi\
#
#
%changelog
-* Mon Aug 17 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-61]
+* Tue Aug 18 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.3.0-0.rc0.0f23d56f17fd.3]
- automotive: enable HUGETLBFS to workaround build error (Scott Weaver)
-* Mon Aug 17 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-60]
+* Tue Aug 18 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.3.0-0.rc0.0f23d56f17fd.2]
+- Turn on CONFIG_BLK_INLINE_ENCRYPTION for RHEL pending too (Justin M. Forbes)
+- Turn on BLK_INLINE_ENCRYPTION_FALLBACK for mismatch (Justin M. Forbes)
+- Reset Makefile.rhelver for the 7.3 cycle (Justin M. Forbes)
+- Merge configs into common for 7.2 (Justin M. Forbes)
+- redhat/configs: automotive: enable RTC_DRV_PL031 (Eric Chanudet)
+- redhat: name the dtb and UKI arch lists (Jan Stancek)
+- redhat: use one spelling for the nobuildarches files guard (Jan Stancek)
+- redhat: drop stale ppc64 from the kabidw-base arch list (Jan Stancek)
+- redhat: document the kabichk force-off as a seasonal toggle (Jan Stancek)
+- redhat: use one spelling for the include and gemini conditionals (Jan Stancek)
+- redhat: remove unused elf_image_install_path and duplicate defines (Jan Stancek)
+- redhat: drop the dead kernel-tools __requires_exclude python filter (Jan Stancek)
+- redhat: drop the Fedora 41 cross-build gdb-index workaround (Jan Stancek)
+- redhat: drop stale build switches from dist-perf and dist-rpm-baseonly (Jan Stancek)
+- redhat: give kernel-automotive its own summary (Jan Stancek)
+- redhat: drop leftover kernel_kvm_post calls for rt-64k (Jan Stancek)
+- redhat: restore missing summary of the kernel-debug variant (Jan Stancek)
+- redhat: fix parse error in baseonly sanity check message (Jan Stancek)
- dracut-virt.conf: change systemd-pcrphase to systemd-pcrextend (Vitaly Kuznetsov)
- redhat/kernel.spec.template: Switch UKI addons to using UKI cert (Vitaly Kuznetsov)
-- Linux v7.2.0
-
-* Sun Aug 16 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.3eb40771c00a.59]
-- Linux v7.2.0-0.rc7.3eb40771c00a
-
-* Sat Aug 15 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.15ef2f78c49d.58]
-- Linux v7.2.0-0.rc7.15ef2f78c49d
-
-* Fri Aug 14 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.2f1baf1fc892.57]
- redhat/configs: automotive: disable CONFIG_MD (Jared Kangas)
-- Linux v7.2.0-0.rc7.2f1baf1fc892
-
-* Thu Aug 13 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.3d6d817622b0.56]
-- Linux v7.2.0-0.rc7.3d6d817622b0
-
-* Wed Aug 12 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.f5bbbfec59b4.55]
-- Linux v7.2.0-0.rc7.f5bbbfec59b4
-
-* Tue Aug 11 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.d58772d8520c.54]
- Clean up unnecessary pending entries (Justin M. Forbes)
- Turn on CONFIG_CRYPTO_MLDSA for Fedora (Justin M. Forbes)
-- Linux v7.2.0-0.rc7.d58772d8520c
-
-* Mon Aug 10 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc7.53]
-- Linux v7.2.0-0.rc7
-
-* Sun Aug 09 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc6.06cf61899d64.52]
- Fix up mismatch for rhel automotive (Justin M. Forbes)
- Fix up a config mismatch in pending (Justin M. Forbes)
-- Linux v7.2.0-0.rc6.06cf61899d64
-
-* Fri Aug 07 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc6.f9a2394a2348.51]
-- Linux v7.2.0-0.rc6.f9a2394a2348
-
-* Thu Aug 06 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc6.0d8395707651.50]
-- Linux v7.2.0-0.rc6.0d8395707651
-
-* Wed Aug 05 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc6.c21bb4193868.49]
- redhat/configs: automotive: debug: enable KASAN_INLINE (Jared Kangas)
-- Linux v7.2.0-0.rc6.c21bb4193868
-
-* Tue Aug 04 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc6.848acc8ffe1b.48]
- Remove stale config items from 7.1 (Justin M. Forbes)
-- Linux v7.2.0-0.rc6.848acc8ffe1b
-
-* Mon Aug 03 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc6.47]
-- Linux v7.2.0-0.rc6
-
-* Sun Aug 02 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc5.2d2338c93da7.46]
-- Linux v7.2.0-0.rc5.2d2338c93da7
-
-* Sat Aug 01 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc5.02dc699f83d0.45]
- Last configs for 7.2 Fedora (Justin M. Forbes)
-- Linux v7.2.0-0.rc5.02dc699f83d0
-
-* Fri Jul 31 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc5.8ba098e6b6ff.44]
- redhat: Disable the CRYPTO_LIB_AESCFB config switch (Thomas Huth)
-- Linux v7.2.0-0.rc5.8ba098e6b6ff
-
-* Thu Jul 30 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc5.11028ab62899.43]
- redhat/configs: do not enable IPQ_GCC_9650 (Eric Chanudet)
- redhat/configs: do not enable CLK_X1P42100_* (Eric Chanudet)
-- Linux v7.2.0-0.rc5.11028ab62899
-
-* Wed Jul 29 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc5.fc02acf6ac0c.42]
-- Linux v7.2.0-0.rc5.fc02acf6ac0c
-
-* Tue Jul 28 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc5.62cc90241548.41]
- redhat: always overwrite spec template copy (Jan Stancek)
- gitlab-ci: enable ELN clang builds (Scott Weaver)
- Turn on CONFIG_REGMAP for RHEL s390x (Justin M. Forbes)
- Turn ACPI_PLATFORM_PROFILE to built-in for RHEL x86 (Justin M. Forbes)
- Turn on CONFIG_RESCTRL_FS for RHEL x86 (Justin M. Forbes)
- redhat: configs: rhel: Enable AMD ISP4 MIPI camera solution (Kate Hsuan)
-- Linux v7.2.0-0.rc5.62cc90241548
-
-* Mon Jul 27 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc5.40]
-- Linux v7.2.0-0.rc5
-
-* Sun Jul 26 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc4.3dab139d4795.39]
-- Linux v7.2.0-0.rc4.3dab139d4795
-
-* Sat Jul 25 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc4.0ce37745d4bf.38]
-- Linux v7.2.0-0.rc4.0ce37745d4bf
-
-* Thu Jul 23 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc4.4539944e5151.37]
- fedora: updates for the 7.2 merge window (Peter Robinson)
-- Linux v7.2.0-0.rc4.4539944e5151
-
-* Wed Jul 22 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc4.248951ddc14d.36]
- redhat/configs: Enable deadline and stall monitors (Gabriele Monaco)
-- Linux v7.2.0-0.rc4.248951ddc14d
-
-* Tue Jul 21 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc4.b95f03f04d47.35]
- redhat/kernel.spec: fix build for rtonly (Jan Stancek)
-
-* Tue Jul 21 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc4.b95f03f04d47.34]
- redhat: filtermods.py: document exact_pkg and ignore_deps rule attributes (Jan Stancek)
- redhat: filtermods.py: make pick_best() deterministic on tied packages (Jan Stancek)
- redhat: filtermods.py: add ignore_deps rule option (Jan Stancek)
@@ -5094,136 +5023,34 @@ fi\
- redhat: filtermods.py: fix do_rpm_mapping_test() (Jan Stancek)
- redhat: filtermods.py: simplify algorithm (Jan Stancek)
- redhat: filtermods.py: add new tests (Jan Stancek)
-- Linux v7.2.0-0.rc4.b95f03f04d47
-
-* Mon Jul 20 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc4.33]
-- Linux v7.2.0-0.rc4
-
-* Sun Jul 19 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc3.c6859eed755d.32]
-- Linux v7.2.0-0.rc3.c6859eed755d
-
-* Sat Jul 18 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc3.1229e2e57a5c.31]
-- Linux v7.2.0-0.rc3.1229e2e57a5c
-
-* Fri Jul 17 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc3.fce2dfa773ce.30]
-- Linux v7.2.0-0.rc3.fce2dfa773ce
-
-* Thu Jul 16 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc3.37e2f878a7a6.29]
- redhat/configs: enable QCS615 pinctrl and interconnect drivers (Wu Fang)
- redhat/configs: automotive: enable SENSORS_INA2XX (Jared Kangas)
- redhat/configs: automotive: enable PWM_FSL_FTM as a module (Jared Kangas)
-- Linux v7.2.0-0.rc3.37e2f878a7a6
-
-* Wed Jul 15 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc3.58717b2a1365.28]
- Add fedora entry in pending for weird mismatch in scripts (Justin M. Forbes)
- Fix up config mismatches (Justin M. Forbes)
-- Linux v7.2.0-0.rc3.58717b2a1365
-
-* Wed Jul 15 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc3.3b029c035b34.27]
- redhat/kernel.spec: derive pesign_name_0 from secureboot_key_0 (Jan Stancek)
- redhat/configs: Move IOMMU_PT_* from rhel-pending to rhel (Jennifer Berringer)
-
-* Tue Jul 14 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc3.3b029c035b34.26]
- redhat/kernel.spec: require libbabeltrace2-devel (Yaakov Selkowitz)
- redhat: move ynltool debuginfo to kernel-tools-debuginfo (Augusto Caringi)
-- Linux v7.2.0-0.rc3.3b029c035b34
-
-* Mon Jul 13 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc3.25]
-- Linux v7.2.0-0.rc3
-
-* Sun Jul 12 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc2.44696aa3a489.24]
-- Linux v7.2.0-0.rc2.44696aa3a489
-
-* Sat Jul 11 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc2.dd3210c47e8d.23]
- Turn on CONFIG_REGMAP for RHEL s390x pending for mismatch (Justin M. Forbes)
- redhat: add kmap.py tool and kernel-kmap-internal package (Rado Vrbovsky)
-- Linux v7.2.0-0.rc2.dd3210c47e8d
-
-* Thu Jul 09 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc2.0e35b9b6ec0f.22]
- uki-virt: Add fdisk to the initramfs to make systemd-repart functional (Vitaly Kuznetsov)
- redhat/configs: Enable Epson RX8111 RTC driver for arm/aarch64 builds. Signed-off-by: Nirmala Dalvi <ndalvi@redhat.com> (Nirmala Dalvi)
-
-* Tue Jul 07 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc2.0e35b9b6ec0f.21]
- redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek)
-- Linux v7.2.0-0.rc2.0e35b9b6ec0f
-
-* Mon Jul 06 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc2.20]
-- Linux v7.2.0-0.rc2
-
-* Sun Jul 05 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc1.7404ce516372.19]
-- Linux v7.2.0-0.rc1.7404ce516372
-
-* Sat Jul 04 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc1.1e9cdc2ea15a.18]
-- Linux v7.2.0-0.rc1.1e9cdc2ea15a
-
-* Fri Jul 03 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc1.d2c9a99135da.17]
- redhat/mod-sign.sh: use CONFIG_MODULE_SIG_HASH (Jan Stancek)
- redhat/kernel.spec.template: Pack a bit more descriptive name for extras/ (Vitaly Kuznetsov)
- redhat/configs: Enable IOMMU_DEBUG_PAGEALLOC and AMD_IOMMU_IOMMUFD (Jerry Snitselaar)
-- Linux v7.2.0-0.rc1.d2c9a99135da
-
-* Thu Jul 02 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc1.4a50a141f05a.16]
-- Linux v7.2.0-0.rc1.4a50a141f05a
-
-* Wed Jul 01 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc1.665159e24674.15]
-- Linux v7.2.0-0.rc1.665159e24674
-
-* Sun Jun 28 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc1.14]
-- Linux v7.2.0-0.rc1
-
-* Sun Jun 28 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.780d569e6c4b.13]
-- Linux v7.2.0-0.rc0.780d569e6c4b
-
-* Sat Jun 27 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.5a66900afbd6.12]
- redhat: configs: Enable USB4STREAM protocol (Dennis Chen) [RHEL-186934]
-- Linux v7.2.0-0.rc0.5a66900afbd6
-
-* Fri Jun 26 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.4edcdefd4083.11]
- Fix up a mismatch for automotive CONFIG_CLK_X1E80100_GCC (Justin M. Forbes)
-- Linux v7.2.0-0.rc0.4edcdefd4083
-
-* Fri Jun 26 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.ab9de95c9cf9.10]
- fedora: aarch64: Set CONFIG_DRIVER_DEFERRED_PROBE_TIMEOUT=-1 (Ali Erdinc Koroglu)
- redhat: configs: Enable AMD ISP4 MIPI camera solution (Kate Hsuan)
- redhat: configs: Enable Intel CVS (Kate Hsuan)
-
-* Thu Jun 25 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.ab9de95c9cf9.9]
-- Revert "Input: rmi4 - remove the need for artificial IRQ in case of HID" (Justin M. Forbes)
-- Linux v7.2.0-0.rc0.ab9de95c9cf9
-
-* Thu Jun 25 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.840ef6c78e6a.8]
- Increase the s390x kernel baseline (Justin M. Forbes)
- redhat/kspdx: remove redundant OR terms from joint license expression (Jan Stancek)
-
-* Wed Jun 24 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.840ef6c78e6a.7]
-- Linux v7.2.0-0.rc0.840ef6c78e6a
-
-* Tue Jun 23 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.502d801f0ab0.6]
- redhat/kernel.spec: set also HOST_EXTRACFLAGS for BPF bootstrap build (Jan Stancek)
- Trim changelog duplicates after rebase (Justin M. Forbes)
-- Linux v7.2.0-0.rc0.502d801f0ab0
-
-* Mon Jun 22 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.ef0c9f75a195.5]
- redhat/configs: do not disable PCIEPORTBUS on ppc64le (Dan Horák)
-- Linux v7.2.0-0.rc0.ef0c9f75a195
-
-* Sun Jun 21 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.322008f87f91.4]
-- Linux v7.2.0-0.rc0.322008f87f91
-
-* Sat Jun 20 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.1a3746ccbb0a.3]
-- Linux v7.2.0-0.rc0.1a3746ccbb0a
-
-* Fri Jun 19 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.9ecfb2f7287a.2]
-- Linux v7.2.0-0.rc0.9ecfb2f7287a
-
-* Thu Jun 18 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [7.2.0-0.rc0.e771677c937d.1]
- Reset RHEL_RELEASE for the 7.2 cycle (Scott Weaver)
-- Revert "crypto: rng - Override drivers/char/random in FIPS mode" (Patrick Talbert)
-- Revert "crypto: rng - Ensure stdrng is tested before user-space starts" (Patrick Talbert)
-- Revert "crypto: rng - Fix extrng EFAULT handling" (Patrick Talbert)
-- Revert "Correct manual merge error in crypto/rng.c" (Patrick Talbert)
-- Revert "Fix up rebase issues with rng.c" (Patrick Talbert)
-- Fix up rebase issues with rng.c (Justin M. Forbes)
- fedora: cleanup the Cadence USB options (Peter Robinson)
- Consolidate configs to common for 7.1 (Justin M. Forbes)
- redhat/kernel.spec.template: Move UKI addons to extras/ (Vitaly Kuznetsov)
@@ -5276,7 +5103,6 @@ fi\
- Revert "redhat/configs: enable CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT" (David Arcari)
- redhat/configs: rhel: Enable SPD5118 sensor driver (Jennifer Berringer)
- Trim changelog and reset RHEL_RELEASE for 7.1 (Justin M. Forbes)
-- Correct manual merge error in crypto/rng.c (Patrick Talbert)
- Fix up pending for mismatches (Justin M. Forbes)
- Fix up rebase typo in drivers/pci/quirks.c (Justin M. Forbes)
- Fix up mismatc with ACPI_PLATFORM_PROFILE (Justin M. Forbes)
@@ -5856,7 +5682,6 @@ fi\
- redhat: configs: Clean up DVB settings in RHEL (Kate Hsuan)
- Move CONFIG_ARCH_TEGRA_241_SOC config/common so that it is enabled for RHEL as well as Fedora. Get rid of uneeded CONFIG_TEGRA241_CMDQV in configs/fedora while we're at it. (Mark Salter)
- fedora: arm64: Enable the rockchip HDMI QP support (Peter Robinson)
-- crypto: rng - Fix extrng EFAULT handling (Herbert Xu)
- redhat: configs: rhel: aarch64: Support NV Jetson MIPI camera (Kate Hsuan)
- gitlab-ci: disable clang CI pipelines (Scott Weaver)
- redhat/configs: Remove obsolete arch64/64k/CONFIG_FORCE_MAX_ZONEORDER (Waiman Long)
@@ -5890,7 +5715,6 @@ fi\
- redhat/configs: automotive: Enable j784s4evm am3359 tscadc configs (Joel Slebodnick)
- redhat/configs: delete renamed CONFIG_MLX5_EN_MACSEC (Michal Schmidt)
- rhel: disable DELL_RBU and cleanup related deps (Peter Robinson)
-- crypto: rng - Ensure stdrng is tested before user-space starts (Herbert Xu)
- gitlab-ci: Add CKI_RETRIGGER_PIPELINE (Tales da Aparecida)
- redhat: configs: disable the qla4xxx iSCSI driver (Chris Leech) [RHEL-1242]
- Remove duplicated CONFIGs between automotive and RHEL (Julio Faracco)
@@ -6443,7 +6267,6 @@ fi\
- redhat: configs: generic: x86: Disable CONFIG_VIDEO_OV01A10 for x86 platform (Hans de Goede)
- redhat: remove pending-rhel CONFIG_XFS_ASSERT_FATAL file (Patrick Talbert)
- New configs in fs/xfs (Fedora Kernel Team)
-- crypto: rng - Override drivers/char/random in FIPS mode (Herbert Xu)
- random: Add hook to override device reads and getrandom(2) (Herbert Xu)
- redhat/configs: share CONFIG_ARM64_ERRATUM_2966298 between rhel and fedora (Mark Salter)
- configs: Remove S390 IOMMU config options that no longer exist (Jerry Snitselaar)
@@ -8139,7 +7962,6 @@ fi\
- redhat: Replace hardware.redhat.com link in Unsupported message (Prarit Bhargava) [1810301]
- x86: Fix compile issues with rh_check_supported() (Don Zickus)
- KEYS: Make use of platform keyring for module signature verify (Robert Holmes)
-- Input: rmi4 - remove the need for artificial IRQ in case of HID (Benjamin Tissoires)
- ARM: tegra: usb no reset (Peter Robinson)
- arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT (Jon Masters)
- redhat: rh_kabi: deduplication friendly structs (Jiri Benc)
@@ -8499,11 +8321,4 @@ fi\
- [initial commit] Add scripts (Laura Abbott)
- [initial commit] Add configs (Laura Abbott)
- [initial commit] Add Makefiles (Laura Abbott)
-- Linux v7.2.0-0.rc0.e771677c937d
-
-###
-# The following Emacs magic makes C-c C-e use UTC dates.
-# Local Variables:
-# rpm-change-log-uses-utc: t
-# End:
-###
+- Linux v7.3.0-0.rc0.0f23d56f17fd
diff --git a/patch-7.2-redhat.patch b/patch-7.2-redhat.patch
deleted file mode 100644
index 798546b..0000000
--- a/patch-7.2-redhat.patch
+++ /dev/null
@@ -1,4103 +0,0 @@
- Documentation/admin-guide/kernel-parameters.txt | 23 +
- Documentation/admin-guide/rh-waived-items.rst | 29 ++
- Kconfig | 2 +
- Kconfig.redhat | 31 ++
- Makefile | 38 +-
- arch/arm/Kconfig | 4 +-
- arch/arm64/Kconfig | 2 +-
- arch/arm64/kernel/setup.c | 27 +
- arch/s390/include/asm/ipl.h | 1 +
- arch/s390/kernel/ipl.c | 5 +
- arch/s390/kernel/setup.c | 4 +
- arch/x86/kernel/cpu/common.c | 1 +
- arch/x86/kernel/setup.c | 101 +++-
- crypto/akcipher.c | 3 +-
- crypto/dh.c | 25 +
- crypto/seqiv.c | 15 +-
- crypto/sig.c | 3 +-
- crypto/testmgr.c | 6 +-
- drivers/acpi/apei/hest.c | 8 +
- drivers/acpi/irq.c | 17 +-
- drivers/acpi/scan.c | 9 +
- drivers/ata/libahci.c | 18 +
- drivers/char/ipmi/ipmi_dmi.c | 15 +
- drivers/char/ipmi/ipmi_msghandler.c | 16 +-
- drivers/char/random.c | 126 ++++-
- drivers/firmware/efi/Makefile | 1 +
- drivers/firmware/efi/efi.c | 124 +++--
- drivers/firmware/efi/libstub/fdt.c | 5 +
- drivers/firmware/efi/libstub/secureboot.c | 14 +-
- drivers/firmware/efi/secureboot.c | 38 ++
- drivers/hwtracing/coresight/coresight-etm4x-core.c | 19 +
- drivers/iommu/iommu.c | 22 +
- drivers/message/fusion/mptsas.c | 5 +
- drivers/message/fusion/mptspi.c | 5 +
- drivers/net/wireguard/main.c | 6 +
- drivers/pci/pci-driver.c | 9 +
- drivers/pci/quirks.c | 24 +
- drivers/scsi/hpsa.c | 4 +
- drivers/scsi/qla2xxx/qla_os.c | 6 +
- drivers/scsi/sd.c | 12 +
- drivers/usb/core/hub.c | 7 +
- fs/afs/main.c | 3 +
- fs/erofs/super.c | 9 +
- fs/ext4/super.c | 11 +
- include/linux/crypto.h | 2 +
- include/linux/efi.h | 22 +-
- include/linux/kernel.h | 28 ++
- include/linux/lsm_hook_defs.h | 1 +
- include/linux/module.h | 5 +
- include/linux/panic.h | 17 +-
- include/linux/pci.h | 5 +
- include/linux/random.h | 10 +
- include/linux/rh_flags.h | 34 ++
- include/linux/rh_kabi.h | 541 +++++++++++++++++++++
- include/linux/rh_waived.h | 19 +
- include/linux/security.h | 9 +
- init/main.c | 5 +
- kernel/Makefile | 2 +
- kernel/bpf/core.c | 5 +
- kernel/bpf/syscall.c | 23 +
- kernel/module/main.c | 13 +
- kernel/module/signing.c | 9 +-
- kernel/panic.c | 12 +
- kernel/rh_flags.c | 115 +++++
- kernel/rh_messages.c | 414 ++++++++++++++++
- kernel/rh_messages.h | 334 +++++++++++++
- kernel/rh_waived.c | 147 ++++++
- scripts/Makefile.lib | 3 +
- scripts/mod/modpost.c | 8 +
- scripts/tags.sh | 2 +
- security/integrity/platform_certs/load_uefi.c | 6 +-
- security/lockdown/Kconfig | 13 +
- security/lockdown/lockdown.c | 11 +
- tools/testing/selftests/bpf/DENYLIST.rhel | 76 +++
- tools/testing/selftests/bpf/Makefile | 2 +-
- tools/testing/selftests/bpf/prog_tests/ksyms_btf.c | 31 --
- 76 files changed, 2669 insertions(+), 108 deletions(-)
-
-diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
-index e8ff36982d97..0abff56b135d 100644
---- a/Documentation/admin-guide/kernel-parameters.txt
-+++ b/Documentation/admin-guide/kernel-parameters.txt
-@@ -6641,6 +6641,20 @@ Kernel parameters
- 2 The "airplane mode" button toggles between everything
- blocked and everything unblocked.
-
-+ rh_waived=
-+ Enable waived items in RHEL.
-+
-+ Some specific features, or security mitigations, can be
-+ waived (toggled on/off) on demand in RHEL. However,
-+ waiving any of these items should be used judiciously,
-+ as it generally means the system might end up being
-+ considered insecure or even out-of-scope for support.
-+
-+ Format: <item-1>,<item-2>...<item-n>
-+
-+ Use 'rh_waived' to enable all waived features listed at
-+ Documentation/admin-guide/rh-waived-features.rst
-+
- ring3mwait=disable
- [KNL] Disable ring 3 MONITOR/MWAIT feature on supported
- CPUs.
-@@ -8061,6 +8075,15 @@ Kernel parameters
- unknown_nmi_panic
- [X86] Cause panic on unknown NMI.
-
-+ unprivileged_bpf_disabled=
-+ Format: { "0" | "1" | "2" }
-+ Sets the initial value of
-+ kernel.unprivileged_bpf_disabled sysctl knob.
-+ 0 - unprivileged bpf() syscall access is enabled.
-+ 1 - unprivileged bpf() syscall access is disabled permanently.
-+ 2 - unprivileged bpf() syscall access is disabled.
-+ Default value is 2.
-+
- unwind_debug [X86-64,EARLY]
- Enable unwinder debug output. This can be
- useful for debugging certain unwinder error
-diff --git a/Documentation/admin-guide/rh-waived-items.rst b/Documentation/admin-guide/rh-waived-items.rst
-new file mode 100644
-index 000000000000..7471c891419c
---- /dev/null
-+++ b/Documentation/admin-guide/rh-waived-items.rst
-@@ -0,0 +1,29 @@
-+.. _rh_waived_items:
-+
-+====================
-+Red Hat Waived Items
-+====================
-+
-+Waived Items is a mechanism offered by Red Hat which allows customers to "waive"
-+and utilize features that are not enabled by default as these are considered as
-+unmaintained, insecure, rudimentary, or deprecated, but are shipped with the
-+RHEL kernel for customer's convinience only.
-+Waived Items can range from features that can be enabled on demand to specific
-+security mitigations that can be disabled on demand.
-+
-+To explicitly "waive" any of these items, RHEL offers the ``rh_waived``
-+kernel boot parameter. To allow set of waived items, append
-+``rh_waived=<item name>,...,<item name>`` to the kernel
-+cmdline.
-+Appending ``rh_waived=features`` will waive all features listed below,
-+and appending ``rh_waived=cves`` will waive all security mitigations
-+listed below.
-+
-+The waived items listed in the next session follow the pattern below:
-+
-+- item name
-+ item description
-+
-+List of Red Hat Waived Items
-+============================
-+
-diff --git a/Kconfig b/Kconfig
-index 307e581144de..11e93e479ce4 100644
---- a/Kconfig
-+++ b/Kconfig
-@@ -32,3 +32,5 @@ source "lib/Kconfig.debug"
- source "Documentation/Kconfig"
-
- source "io_uring/Kconfig"
-+
-+source "Kconfig.redhat"
-diff --git a/Kconfig.redhat b/Kconfig.redhat
-new file mode 100644
-index 000000000000..85771d74c34f
---- /dev/null
-+++ b/Kconfig.redhat
-@@ -0,0 +1,31 @@
-+# SPDX-License-Identifier: GPL-2.0-only
-+#
-+# Red Hat specific options
-+#
-+
-+menu "Red Hat options"
-+
-+config RHEL_DIFFERENCES
-+ bool "Enable RHEL-only code"
-+ help
-+ This option controls whether rhel-only changes are enabled during
-+ the build. Unless you want to enable rhel-only changes, say N here.
-+
-+config RH_KABI_SIZE_ALIGN_CHECKS
-+ bool "Enables more stringent kabi checks in the macros"
-+ depends on RHEL_DIFFERENCES
-+ default y
-+ help
-+ This option enables more stringent kabi checks. Those must
-+ be disabled in case of a debug build, because debug builds
-+ allow to change struct sizes.
-+
-+config RH_AUTOMOTIVE
-+ bool "Enable automotive only code"
-+ depends on RHEL_DIFFERENCES
-+ default n
-+ help
-+ This option controls whether code is included in the automotive
-+ kernel build. If you are building an automotive kernel, say Y.
-+
-+endmenu
-diff --git a/Makefile b/Makefile
-index ddcc6dca1ece..7c52f4c368ef 100644
---- a/Makefile
-+++ b/Makefile
-@@ -358,6 +358,17 @@ ifneq ($(filter install,$(MAKECMDGOALS)),)
- endif
- endif
-
-+# CKI/cross compilation hack
-+# Do we need to rebuild scripts after cross compilation?
-+# If kernel was cross-compiled, these scripts have arch of build host.
-+REBUILD_SCRIPTS_FOR_CROSS:=0
-+
-+# Regenerating config with incomplete source tree will produce different
-+# config options. Disable it.
-+ifeq ($(REBUILD_SCRIPTS_FOR_CROSS),1)
-+may-sync-config:=
-+endif
-+
- ifdef mixed-build
- # ===========================================================================
- # We're called with mixed targets (*config and build targets).
-@@ -1432,6 +1443,8 @@ uapi-asm-generic:
- # Generate some files
- # ---------------------------------------------------------------------------
-
-+include $(srctree)/Makefile.rhelver
-+
- # KERNELRELEASE can change from a few different places, meaning version.h
- # needs to be updated, so this check is forced on all builds
-
-@@ -1456,7 +1469,13 @@ define filechk_version.h
- ((c) > 255 ? 255 : (c)))'; \
- echo \#define LINUX_VERSION_MAJOR $(VERSION); \
- echo \#define LINUX_VERSION_PATCHLEVEL $(PATCHLEVEL); \
-- echo \#define LINUX_VERSION_SUBLEVEL $(SUBLEVEL)
-+ echo \#define LINUX_VERSION_SUBLEVEL $(SUBLEVEL); \
-+ echo '#define RHEL_MAJOR $(RHEL_MAJOR)'; \
-+ echo '#define RHEL_MINOR $(RHEL_MINOR)'; \
-+ echo '#define RHEL_RELEASE_VERSION(a,b) (((a) << 8) + (b))'; \
-+ echo '#define RHEL_RELEASE_CODE \
-+ $(shell expr $(RHEL_MAJOR) \* 256 + $(RHEL_MINOR))'; \
-+ echo '#define RHEL_RELEASE "$(RHEL_RELEASE)"'
- endef
-
- $(version_h): private PATCHLEVEL := $(or $(PATCHLEVEL), 0)
-@@ -2108,6 +2127,23 @@ endif
-
- ifdef CONFIG_MODULES
-
-+scripts_build:
-+ $(MAKE) $(build)=scripts/basic
-+ $(MAKE) $(build)=scripts/mod
-+ $(MAKE) $(build)=scripts scripts/module.lds
-+ $(MAKE) $(build)=scripts scripts/unifdef
-+ $(MAKE) $(build)=scripts
-+
-+prepare_after_cross:
-+ # disable STACK_VALIDATION to avoid building objtool
-+ sed -i '/^CONFIG_STACK_VALIDATION/d' ./include/config/auto.conf || true
-+ # build minimum set of scripts and resolve_btfids to allow building
-+ # external modules
-+ $(MAKE) KBUILD_EXTMOD="" M="" scripts_build V=1
-+ $(MAKE) -C tools/bpf/resolve_btfids
-+
-+PHONY += prepare_after_cross scripts_build
-+
- modules.order: $(build-dir)
- @:
-
-diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig
-index 9187240a02db..46d1258700af 100644
---- a/arch/arm/Kconfig
-+++ b/arch/arm/Kconfig
-@@ -1216,9 +1216,9 @@ config HIGHMEM
- If unsure, say n.
-
- config HIGHPTE
-- bool "Allocate 2nd-level pagetables from highmem" if EXPERT
-+ bool "Allocate 2nd-level pagetables from highmem"
- depends on HIGHMEM && !PREEMPT_RT
-- default y
-+ default n
- help
- The VM uses one page of physical memory for each page table.
- For systems with a lot of processes, this can use a lot of
-diff --git a/arch/arm64/Kconfig b/arch/arm64/Kconfig
-index b3afe0688919..d23a728aac03 100644
---- a/arch/arm64/Kconfig
-+++ b/arch/arm64/Kconfig
-@@ -1489,7 +1489,7 @@ endchoice
-
- config ARM64_FORCE_52BIT
- bool "Force 52-bit virtual addresses for userspace"
-- depends on ARM64_VA_BITS_52 && EXPERT
-+ depends on ARM64_VA_BITS_52
- help
- For systems with 52-bit userspace VAs enabled, the kernel will attempt
- to maintain compatibility with older software by providing 48-bit VAs
-diff --git a/arch/arm64/kernel/setup.c b/arch/arm64/kernel/setup.c
-index 23c05dc7a8f2..d7b7b2f39e16 100644
---- a/arch/arm64/kernel/setup.c
-+++ b/arch/arm64/kernel/setup.c
-@@ -32,6 +32,8 @@
- #include <linux/sched/task.h>
- #include <linux/scs.h>
- #include <linux/mm.h>
-+#include <linux/security.h>
-+#include <linux/libfdt.h>
-
- #include <asm/acpi.h>
- #include <asm/fixmap.h>
-@@ -207,6 +209,24 @@ static void __init setup_machine_fdt(phys_addr_t dt_phys)
- dump_stack_set_arch_desc("%s (DT)", name);
- }
-
-+static void __init init_secureboot_mode(void)
-+{
-+ void *fdt = initial_boot_params;
-+ u64 chosen;
-+ const __be32 *prop;
-+ int len;
-+
-+ chosen = fdt_path_offset(fdt, "/chosen");
-+ if (chosen < 0)
-+ return;
-+
-+ prop = fdt_getprop(fdt, chosen, "secure-boot-mode", &len);
-+ if (!prop || len != sizeof(u32))
-+ return;
-+
-+ efi_set_secure_boot((enum efi_secureboot_mode)fdt32_to_cpu(*prop));
-+}
-+
- static void __init request_standard_resources(void)
- {
- struct memblock_region *region;
-@@ -327,6 +347,13 @@ void __init __no_sanitize_address setup_arch(char **cmdline_p)
- pr_warn(FW_BUG "Kernel image misaligned at boot, please fix your bootloader!");
- WARN_TAINT(mmu_enabled_at_boot, TAINT_FIRMWARE_WORKAROUND,
- FW_BUG "Booted with MMU enabled!");
-+ } else {
-+ init_secureboot_mode();
-+
-+#ifdef CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT
-+ if (efi_enabled(EFI_SECURE_BOOT))
-+ security_lock_kernel_down("EFI Secure Boot mode", LOCKDOWN_INTEGRITY_MAX);
-+#endif
- }
-
- arm64_memblock_init();
-diff --git a/arch/s390/include/asm/ipl.h b/arch/s390/include/asm/ipl.h
-index b0d00032479d..afb9544fb007 100644
---- a/arch/s390/include/asm/ipl.h
-+++ b/arch/s390/include/asm/ipl.h
-@@ -139,6 +139,7 @@ int ipl_report_add_component(struct ipl_report *report, struct kexec_buf *kbuf,
- unsigned char flags, unsigned short cert);
- int ipl_report_add_certificate(struct ipl_report *report, void *key,
- unsigned long addr, unsigned long len);
-+bool ipl_get_secureboot(void);
-
- /*
- * DIAG 308 support
-diff --git a/arch/s390/kernel/ipl.c b/arch/s390/kernel/ipl.c
-index 3c346b02ceb9..30e16a0d4490 100644
---- a/arch/s390/kernel/ipl.c
-+++ b/arch/s390/kernel/ipl.c
-@@ -2527,3 +2527,8 @@ int ipl_report_free(struct ipl_report *report)
- }
-
- #endif
-+
-+bool ipl_get_secureboot(void)
-+{
-+ return !!ipl_secure_flag;
-+}
-diff --git a/arch/s390/kernel/setup.c b/arch/s390/kernel/setup.c
-index b60284328fe3..e4d37b08ca29 100644
---- a/arch/s390/kernel/setup.c
-+++ b/arch/s390/kernel/setup.c
-@@ -47,6 +47,7 @@
- #include <linux/crash_dump.h>
- #include <linux/memory.h>
- #include <linux/start_kernel.h>
-+#include <linux/security.h>
- #include <linux/hugetlb.h>
- #include <linux/kmemleak.h>
-
-@@ -917,6 +918,9 @@ void __init setup_arch(char **cmdline_p)
-
- log_component_list();
-
-+ if (ipl_get_secureboot())
-+ security_lock_kernel_down("Secure IPL mode", LOCKDOWN_INTEGRITY_MAX);
-+
- /* Have one command line that is parsed and saved in /proc/cmdline */
- /* boot_command_line has been already set up in early.c */
- *cmdline_p = boot_command_line;
-diff --git a/arch/x86/kernel/cpu/common.c b/arch/x86/kernel/cpu/common.c
-index a3caddd411ec..d654bb2b9c7a 100644
---- a/arch/x86/kernel/cpu/common.c
-+++ b/arch/x86/kernel/cpu/common.c
-@@ -1797,6 +1797,7 @@ static void __init early_identify_cpu(struct cpuinfo_x86 *c)
- get_cpu_vendor(c);
- intel_unlock_cpuid_leafs(c);
- get_cpu_cap(c);
-+ get_model_name(c); /* RHEL: get model name for unsupported check */
- setup_force_cpu_cap(X86_FEATURE_CPUID);
- get_cpu_address_sizes(c);
- cpu_parse_early_param();
-diff --git a/arch/x86/kernel/setup.c b/arch/x86/kernel/setup.c
-index 46882ce79c3a..49173ab3fcf7 100644
---- a/arch/x86/kernel/setup.c
-+++ b/arch/x86/kernel/setup.c
-@@ -21,6 +21,7 @@
- #include <linux/pci.h>
- #include <linux/random.h>
- #include <linux/root_dev.h>
-+#include <linux/security.h>
- #include <linux/static_call.h>
- #include <linux/sysfb.h>
- #include <linux/swiotlb.h>
-@@ -57,6 +58,10 @@
- #include <asm/thermal.h>
- #include <asm/unwind.h>
- #include <asm/vsyscall.h>
-+#include <asm/intel-family.h>
-+#if defined(CONFIG_X86_LOCAL_APIC)
-+#include <asm/nmi.h>
-+#endif
-
- /*
- * max_low_pfn_mapped: highest directly mapped pfn < 4 GB
-@@ -825,6 +830,79 @@ static void __init early_reserve_memory(void)
- trim_snb_memory();
- }
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+
-+static void rh_check_supported(void)
-+{
-+ bool guest;
-+
-+ guest = (x86_hyper_type != X86_HYPER_NATIVE || boot_cpu_has(X86_FEATURE_HYPERVISOR));
-+
-+ /* RHEL supports single cpu on guests only */
-+ if (((topology_num_threads_per_package() * __max_threads_per_core) == 1) &&
-+ !guest && !is_kdump_kernel()) {
-+ pr_crit("Detected single cpu native boot.\n");
-+ pr_crit("Important: In this kernel, single threaded, single CPU 64-bit physical systems are unsupported.");
-+ }
-+
-+ /*
-+ * If the RHEL kernel does not support this hardware, the kernel will
-+ * attempt to boot, but no support is provided for this hardware
-+ */
-+ switch (boot_cpu_data.x86_vendor) {
-+ case X86_VENDOR_AMD:
-+ case X86_VENDOR_INTEL:
-+ break;
-+ default:
-+ pr_crit("Detected processor %s %s\n",
-+ boot_cpu_data.x86_vendor_id,
-+ boot_cpu_data.x86_model_id);
-+ break;
-+ }
-+
-+ /*
-+ * Due to the complexity of x86 lapic & ioapic enumeration, and PCI IRQ
-+ * routing, ACPI is required for x86. acpi=off is a valid debug kernel
-+ * parameter, so just print out a loud warning in case something
-+ * goes wrong (which is most of the time).
-+ */
-+ if (acpi_disabled && !guest)
-+ pr_crit("ACPI has been disabled or is not available on this hardware. This may result in a single cpu boot, incorrect PCI IRQ routing, or boot failure.\n");
-+
-+ /*
-+ * x86_64 microarchitecture levels:
-+ * https://en.wikipedia.org/wiki/X86-64#Microarchitecture_levels
-+ *
-+ * RHEL9 has a minimum of the x86_64-v2 microarchitecture
-+ * RHEL10 has a minimum of the x86_64-v3 microarchitecture
-+ */
-+
-+ if (!boot_cpu_has(X86_FEATURE_CX16) || /* CMPXCHG16B */
-+ !boot_cpu_has(X86_FEATURE_LAHF_LM) || /* LAHF-SAHF */
-+ !boot_cpu_has(X86_FEATURE_POPCNT) ||
-+ !boot_cpu_has(X86_FEATURE_XMM3) || /* SSE-3 */
-+ !boot_cpu_has(X86_FEATURE_XMM4_1) || /* SSE4_1 */
-+ !boot_cpu_has(X86_FEATURE_XMM4_2) || /* SSE4_2 */
-+ !boot_cpu_has(X86_FEATURE_SSSE3)) {
-+ mark_hardware_deprecated("x86_64-v1", "%s:%s",
-+ boot_cpu_data.x86_vendor_id, boot_cpu_data.x86_model_id);
-+ } else if (!boot_cpu_has(X86_FEATURE_AVX) ||
-+ !boot_cpu_has(X86_FEATURE_AVX2) ||
-+ !boot_cpu_has(X86_FEATURE_BMI1) ||
-+ !boot_cpu_has(X86_FEATURE_BMI2) ||
-+ !boot_cpu_has(X86_FEATURE_F16C) ||
-+ !boot_cpu_has(X86_FEATURE_FMA) ||
-+ /* LZCNT is not explicitly listed, but appears to be paired with BMI2 */
-+ !boot_cpu_has(X86_FEATURE_MOVBE) ||
-+ !boot_cpu_has(X86_FEATURE_XSAVE)) {
-+ mark_hardware_deprecated("x86_64-v2", "%s:%s",
-+ boot_cpu_data.x86_vendor_id, boot_cpu_data.x86_model_id);
-+ }
-+}
-+#else
-+#define rh_check_supported()
-+#endif
-+
- /*
- * Dump out kernel offset information on panic.
- */
-@@ -995,6 +1073,13 @@ void __init setup_arch(char **cmdline_p)
- if (efi_enabled(EFI_BOOT))
- efi_init();
-
-+ efi_set_secure_boot(boot_params.secure_boot);
-+
-+#ifdef CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT
-+ if (efi_enabled(EFI_SECURE_BOOT))
-+ security_lock_kernel_down("EFI Secure Boot mode", LOCKDOWN_INTEGRITY_MAX);
-+#endif
-+
- reserve_ibft_region();
- x86_init.resources.dmi_setup();
-
-@@ -1156,19 +1241,7 @@ void __init setup_arch(char **cmdline_p)
- /* Allocate bigger log buffer */
- setup_log_buf(1);
-
-- if (efi_enabled(EFI_BOOT)) {
-- switch (boot_params.secure_boot) {
-- case efi_secureboot_mode_disabled:
-- pr_info("Secure boot disabled\n");
-- break;
-- case efi_secureboot_mode_enabled:
-- pr_info("Secure boot enabled\n");
-- break;
-- default:
-- pr_info("Secure boot could not be determined\n");
-- break;
-- }
-- }
-+ efi_set_secure_boot(boot_params.secure_boot);
-
- reserve_initrd();
-
-@@ -1275,6 +1348,8 @@ void __init setup_arch(char **cmdline_p)
- efi_apply_memmap_quirks();
- #endif
-
-+ rh_check_supported();
-+
- unwind_init();
- }
-
-diff --git a/crypto/akcipher.c b/crypto/akcipher.c
-index 630bb19738be..8da7eedce31e 100644
---- a/crypto/akcipher.c
-+++ b/crypto/akcipher.c
-@@ -138,8 +138,7 @@ int crypto_register_akcipher(struct akcipher_alg *alg)
-
- if (!alg->encrypt)
- alg->encrypt = akcipher_default_op;
-- if (!alg->decrypt)
-- alg->decrypt = akcipher_default_op;
-+ alg->decrypt = akcipher_default_op;
- if (!alg->set_priv_key)
- alg->set_priv_key = akcipher_default_set_key;
-
-diff --git a/crypto/dh.c b/crypto/dh.c
-index 7ad4768716c8..01ccc24db074 100644
---- a/crypto/dh.c
-+++ b/crypto/dh.c
-@@ -227,10 +227,35 @@ static int dh_compute_value(struct kpp_request *req)
-
- /* SP800-56A rev 3 5.6.2.1.3 key check */
- } else {
-+ MPI val_pct;
-+
- if (dh_is_pubkey_valid(ctx, val)) {
- ret = -EAGAIN;
- goto err_free_val;
- }
-+
-+ /*
-+ * SP800-56Arev3, 5.6.2.1.4: ("Owner Assurance
-+ * of Pair-wise Consistency"): recompute the
-+ * public key and check if the results match.
-+ */
-+ val_pct = mpi_alloc(0);
-+ if (!val_pct) {
-+ ret = -ENOMEM;
-+ goto err_free_val;
-+ }
-+
-+ ret = _compute_val(ctx, base, val_pct);
-+ if (ret) {
-+ mpi_free(val_pct);
-+ goto err_free_val;
-+ }
-+
-+ if (mpi_cmp(val, val_pct) != 0) {
-+ fips_fail_notify();
-+ panic("dh: pair-wise consistency test failed\n");
-+ }
-+ mpi_free(val_pct);
- }
- }
-
-diff --git a/crypto/seqiv.c b/crypto/seqiv.c
-index 678bb4145d78..fcc059e7d3db 100644
---- a/crypto/seqiv.c
-+++ b/crypto/seqiv.c
-@@ -123,6 +123,19 @@ static int seqiv_aead_decrypt(struct aead_request *req)
- return crypto_aead_decrypt(subreq);
- }
-
-+static int aead_init_seqiv(struct crypto_aead *aead)
-+{
-+ int err;
-+
-+ err = aead_init_geniv(aead);
-+ if (err)
-+ return err;
-+
-+ crypto_aead_set_flags(aead, CRYPTO_TFM_FIPS_COMPLIANCE);
-+
-+ return 0;
-+}
-+
- static int seqiv_aead_create(struct crypto_template *tmpl, struct rtattr **tb)
- {
- struct aead_instance *inst;
-@@ -140,7 +153,7 @@ static int seqiv_aead_create(struct crypto_template *tmpl, struct rtattr **tb)
- inst->alg.encrypt = seqiv_aead_encrypt;
- inst->alg.decrypt = seqiv_aead_decrypt;
-
-- inst->alg.init = aead_init_geniv;
-+ inst->alg.init = aead_init_seqiv;
- inst->alg.exit = aead_exit_geniv;
-
- inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);
-diff --git a/crypto/sig.c b/crypto/sig.c
-index 7d2048da5c3a..6b4e2163fcc5 100644
---- a/crypto/sig.c
-+++ b/crypto/sig.c
-@@ -112,8 +112,7 @@ static int sig_prepare_alg(struct sig_alg *alg)
- {
- struct crypto_alg *base = &alg->base;
-
-- if (!alg->sign)
-- alg->sign = sig_default_sign;
-+ alg->sign = sig_default_sign;
- if (!alg->verify)
- alg->verify = sig_default_verify;
- if (!alg->set_priv_key)
-diff --git a/crypto/testmgr.c b/crypto/testmgr.c
-index 4958211fbfa9..ee6d34885696 100644
---- a/crypto/testmgr.c
-+++ b/crypto/testmgr.c
-@@ -3831,7 +3831,7 @@ static int test_akcipher_one(struct crypto_akcipher *tfm,
- * Don't invoke decrypt test which requires a private key
- * for vectors with only a public key.
- */
-- if (vecs->public_key_vec) {
-+ if (1 || vecs->public_key_vec) {
- err = 0;
- goto free_all;
- }
-@@ -3967,7 +3967,7 @@ static int test_sig_one(struct crypto_sig *tfm, const struct sig_testvec *vecs)
- * Don't invoke sign test (which requires a private key)
- * for vectors with only a public key.
- */
-- if (vecs->public_key_vec)
-+ if (1 || vecs->public_key_vec)
- return 0;
-
- sig_size = crypto_sig_maxsize(tfm);
-@@ -4790,14 +4790,12 @@ static const struct alg_test_desc alg_test_descs[] = {
- }, {
- .alg = "ecdh-nist-p256",
- .test = alg_test_kpp,
-- .fips_allowed = 1,
- .suite = {
- .kpp = __VECS(ecdh_p256_tv_template)
- }
- }, {
- .alg = "ecdh-nist-p384",
- .test = alg_test_kpp,
-- .fips_allowed = 1,
- .suite = {
- .kpp = __VECS(ecdh_p384_tv_template)
- }
-diff --git a/drivers/acpi/apei/hest.c b/drivers/acpi/apei/hest.c
-index 20d757687e3d..90a13f20f052 100644
---- a/drivers/acpi/apei/hest.c
-+++ b/drivers/acpi/apei/hest.c
-@@ -142,6 +142,14 @@ static int apei_hest_parse(apei_hest_func_t func, void *data)
- if (hest_disable || !hest_tab)
- return -EINVAL;
-
-+#ifdef CONFIG_ARM64
-+ /* Ignore broken firmware */
-+ if (!strncmp(hest_tab->header.oem_id, "HPE ", 6) &&
-+ !strncmp(hest_tab->header.oem_table_id, "ProLiant", 8) &&
-+ MIDR_IMPLEMENTOR(read_cpuid_id()) == ARM_CPU_IMP_APM)
-+ return -EINVAL;
-+#endif
-+
- hest_hdr = (struct acpi_hest_header *)(hest_tab + 1);
- for (i = 0; i < hest_tab->error_source_count; i++) {
- len = hest_esrc_len(hest_hdr);
-diff --git a/drivers/acpi/irq.c b/drivers/acpi/irq.c
-index d1595156c86a..9485212f1a6d 100644
---- a/drivers/acpi/irq.c
-+++ b/drivers/acpi/irq.c
-@@ -143,6 +143,7 @@ struct acpi_irq_parse_one_ctx {
- unsigned int index;
- unsigned long *res_flags;
- struct irq_fwspec *fwspec;
-+ bool skip_producer_check;
- };
-
- /**
-@@ -216,7 +217,8 @@ static acpi_status acpi_irq_parse_one_cb(struct acpi_resource *ares,
- return AE_CTRL_TERMINATE;
- case ACPI_RESOURCE_TYPE_EXTENDED_IRQ:
- eirq = &ares->data.extended_irq;
-- if (eirq->producer_consumer == ACPI_PRODUCER)
-+ if (!ctx->skip_producer_check &&
-+ eirq->producer_consumer == ACPI_PRODUCER)
- return AE_OK;
- if (ctx->index >= eirq->interrupt_count) {
- ctx->index -= eirq->interrupt_count;
-@@ -252,8 +254,19 @@ static acpi_status acpi_irq_parse_one_cb(struct acpi_resource *ares,
- static int acpi_irq_parse_one(acpi_handle handle, unsigned int index,
- struct irq_fwspec *fwspec, unsigned long *flags)
- {
-- struct acpi_irq_parse_one_ctx ctx = { -EINVAL, index, flags, fwspec };
-+ struct acpi_irq_parse_one_ctx ctx = { -EINVAL, index, flags, fwspec, false };
-
-+ /*
-+ * Firmware on arm64-based HPE m400 platform incorrectly marks
-+ * its UART interrupt as ACPI_PRODUCER rather than ACPI_CONSUMER.
-+ * Don't do the producer/consumer check for that device.
-+ */
-+ if (IS_ENABLED(CONFIG_ARM64)) {
-+ struct acpi_device *adev = acpi_get_acpi_dev(handle);
-+
-+ if (adev && !strcmp(acpi_device_hid(adev), "APMC0D08"))
-+ ctx.skip_producer_check = true;
-+ }
- acpi_walk_resources(handle, METHOD_NAME__CRS, acpi_irq_parse_one_cb, &ctx);
- return ctx.rc;
- }
-diff --git a/drivers/acpi/scan.c b/drivers/acpi/scan.c
-index 9a7ac2eb9ce0..6556c3d7b269 100644
---- a/drivers/acpi/scan.c
-+++ b/drivers/acpi/scan.c
-@@ -1794,6 +1794,15 @@ static bool acpi_device_enumeration_by_parent(struct acpi_device *device)
- if (!acpi_match_device_ids(device, ignore_serial_bus_ids))
- return false;
-
-+ /*
-+ * Firmware on some arm64 X-Gene platforms will make the UART
-+ * device appear as both a UART and a slave of that UART. Just
-+ * bail out here for X-Gene UARTs.
-+ */
-+ if (IS_ENABLED(CONFIG_ARM64) &&
-+ !strcmp(acpi_device_hid(device), "APMC0D08"))
-+ return false;
-+
- INIT_LIST_HEAD(&resource_list);
- acpi_dev_get_resources(device, &resource_list,
- acpi_check_serial_bus_slave,
-diff --git a/drivers/ata/libahci.c b/drivers/ata/libahci.c
-index 6d72eb017b49..0a6701eb8d37 100644
---- a/drivers/ata/libahci.c
-+++ b/drivers/ata/libahci.c
-@@ -727,6 +727,24 @@ int ahci_stop_engine(struct ata_port *ap)
- tmp &= ~PORT_CMD_START;
- writel(tmp, port_mmio + PORT_CMD);
-
-+#ifdef CONFIG_ARM64
-+ /* Rev Ax of Cavium CN99XX needs a hack for port stop */
-+ if (dev_is_pci(ap->host->dev) &&
-+ to_pci_dev(ap->host->dev)->vendor == 0x14e4 &&
-+ to_pci_dev(ap->host->dev)->device == 0x9027 &&
-+ midr_is_cpu_model_range(read_cpuid_id(),
-+ MIDR_CPU_MODEL(ARM_CPU_IMP_BRCM, BRCM_CPU_PART_VULCAN),
-+ MIDR_CPU_VAR_REV(0, 0),
-+ MIDR_CPU_VAR_REV(0, MIDR_REVISION_MASK))) {
-+ tmp = readl(hpriv->mmio + 0x8000);
-+ udelay(100);
-+ writel(tmp | (1 << 26), hpriv->mmio + 0x8000);
-+ udelay(100);
-+ writel(tmp & ~(1 << 26), hpriv->mmio + 0x8000);
-+ dev_warn(ap->host->dev, "CN99XX SATA reset workaround applied\n");
-+ }
-+#endif
-+
- /* wait for engine to stop. This could be as long as 500 msec */
- tmp = ata_wait_register(ap, port_mmio + PORT_CMD,
- PORT_CMD_LIST_ON, PORT_CMD_LIST_ON, 1, 500);
-diff --git a/drivers/char/ipmi/ipmi_dmi.c b/drivers/char/ipmi/ipmi_dmi.c
-index 505e32911c34..26f7ee0ccf40 100644
---- a/drivers/char/ipmi/ipmi_dmi.c
-+++ b/drivers/char/ipmi/ipmi_dmi.c
-@@ -215,6 +215,21 @@ static int __init scan_for_dmi_ipmi(void)
- {
- const struct dmi_device *dev = NULL;
-
-+#ifdef CONFIG_ARM64
-+ /* RHEL-only
-+ * If this is ARM-based HPE m400, return now, because that platform
-+ * reports the host-side ipmi address as intel port-io space, which
-+ * does not exist in the ARM architecture.
-+ */
-+ const char *dmistr = dmi_get_system_info(DMI_PRODUCT_NAME);
-+
-+ if (dmistr && (strcmp("ProLiant m400 Server", dmistr) == 0)) {
-+ pr_debug("%s does not support host ipmi\n", dmistr);
-+ return 0;
-+ }
-+ /* END RHEL-only */
-+#endif
-+
- while ((dev = dmi_find_device(DMI_DEV_TYPE_IPMI, NULL, dev)))
- dmi_decode_ipmi((const struct dmi_header *) dev->device_data);
-
-diff --git a/drivers/char/ipmi/ipmi_msghandler.c b/drivers/char/ipmi/ipmi_msghandler.c
-index ab4c85f3d6fe..92de1165f6ef 100644
---- a/drivers/char/ipmi/ipmi_msghandler.c
-+++ b/drivers/char/ipmi/ipmi_msghandler.c
-@@ -34,6 +34,7 @@
- #include <linux/uuid.h>
- #include <linux/nospec.h>
- #include <linux/vmalloc.h>
-+#include <linux/dmi.h>
- #include <linux/delay.h>
-
- #define IPMI_DRIVER_VERSION "39.2"
-@@ -5643,8 +5644,21 @@ static int __init ipmi_init_msghandler_mod(void)
- {
- int rv;
-
-- pr_info("version " IPMI_DRIVER_VERSION "\n");
-+#ifdef CONFIG_ARM64
-+ /* RHEL-only
-+ * If this is ARM-based HPE m400, return now, because that platform
-+ * reports the host-side ipmi address as intel port-io space, which
-+ * does not exist in the ARM architecture.
-+ */
-+ const char *dmistr = dmi_get_system_info(DMI_PRODUCT_NAME);
-
-+ if (dmistr && (strcmp("ProLiant m400 Server", dmistr) == 0)) {
-+ pr_debug("%s does not support host ipmi\n", dmistr);
-+ return -ENOSYS;
-+ }
-+ /* END RHEL-only */
-+#endif
-+ pr_info("version " IPMI_DRIVER_VERSION "\n");
- mutex_lock(&ipmi_interfaces_mutex);
- rv = ipmi_register_driver();
- mutex_unlock(&ipmi_interfaces_mutex);
-diff --git a/drivers/char/random.c b/drivers/char/random.c
-index b4da1fb976c1..1e112e2b405b 100644
---- a/drivers/char/random.c
-+++ b/drivers/char/random.c
-@@ -51,9 +51,11 @@
- #include <linux/completion.h>
- #include <linux/uuid.h>
- #include <linux/uaccess.h>
-+#include <linux/rcupdate.h>
- #include <linux/suspend.h>
- #include <linux/siphash.h>
- #include <linux/sched/isolation.h>
-+#include <linux/fips.h>
- #include <crypto/chacha.h>
- #include <crypto/blake2s.h>
- #include <vdso/datapage.h>
-@@ -320,6 +322,11 @@ static void crng_fast_key_erasure(u8 key[CHACHA_KEY_SIZE],
- memzero_explicit(first_block, sizeof(first_block));
- }
-
-+/*
-+ * Hook for external RNG.
-+ */
-+static const struct random_extrng __rcu *extrng;
-+
- /*
- * This function returns a ChaCha state that you may use for generating
- * random data. It also returns up to 32 bytes on its own of random data
-@@ -732,7 +739,8 @@ static void __cold _credit_init_bits(size_t bits)
- queue_work(system_dfl_wq, &set_ready);
- atomic_notifier_call_chain(&random_ready_notifier, 0, NULL);
- if (IS_ENABLED(CONFIG_VDSO_GETRANDOM))
-- WRITE_ONCE(vdso_k_rng_data->is_ready, true);
-+ if (!fips_enabled)
-+ WRITE_ONCE(vdso_k_rng_data->is_ready, true);
- wake_up_interruptible(&crng_init_wait);
- kill_fasync(&fasync, SIGIO, POLL_IN);
- pr_notice("crng init done\n");
-@@ -751,6 +759,9 @@ static void __cold _credit_init_bits(size_t bits)
- }
-
-
-+static const struct file_operations extrng_random_fops;
-+static const struct file_operations extrng_urandom_fops;
-+
- /**********************************************************************
- *
- * Entropy collection routines.
-@@ -967,6 +978,19 @@ void __init add_bootloader_randomness(const void *buf, size_t len)
- credit_init_bits(len * 8);
- }
-
-+void random_register_extrng(const struct random_extrng *rng)
-+{
-+ rcu_assign_pointer(extrng, rng);
-+}
-+EXPORT_SYMBOL_GPL(random_register_extrng);
-+
-+void random_unregister_extrng(void)
-+{
-+ RCU_INIT_POINTER(extrng, NULL);
-+ synchronize_rcu();
-+}
-+EXPORT_SYMBOL_GPL(random_unregister_extrng);
-+
- #if IS_ENABLED(CONFIG_VMGENID)
- static BLOCKING_NOTIFIER_HEAD(vmfork_chain);
-
-@@ -1381,6 +1405,7 @@ SYSCALL_DEFINE3(getrandom, char __user *, ubuf, size_t, len, unsigned int, flags
- {
- struct iov_iter iter;
- int ret;
-+ const struct random_extrng *rng;
-
- if (flags & ~(GRND_NONBLOCK | GRND_RANDOM | GRND_INSECURE))
- return -EINVAL;
-@@ -1392,6 +1417,21 @@ SYSCALL_DEFINE3(getrandom, char __user *, ubuf, size_t, len, unsigned int, flags
- if ((flags & (GRND_INSECURE | GRND_RANDOM)) == (GRND_INSECURE | GRND_RANDOM))
- return -EINVAL;
-
-+ rcu_read_lock();
-+ rng = rcu_dereference(extrng);
-+ if (rng && !try_module_get(rng->owner))
-+ rng = NULL;
-+ rcu_read_unlock();
-+
-+ if (rng) {
-+ ret = import_ubuf(ITER_DEST, ubuf, len, &iter);
-+ if (unlikely(ret))
-+ return ret;
-+ ret = rng->extrng_read_iter(&iter, !!(flags & GRND_RANDOM));
-+ module_put(rng->owner);
-+ return ret;
-+ }
-+
- if (!crng_ready() && !(flags & GRND_INSECURE)) {
- if (flags & GRND_NONBLOCK)
- return -EAGAIN;
-@@ -1412,6 +1452,12 @@ static __poll_t random_poll(struct file *file, poll_table *wait)
- return crng_ready() ? EPOLLIN | EPOLLRDNORM : EPOLLOUT | EPOLLWRNORM;
- }
-
-+static __poll_t extrng_poll(struct file *file, poll_table * wait)
-+{
-+ /* extrng pool is always full, always read, no writes */
-+ return EPOLLIN | EPOLLRDNORM;
-+}
-+
- static ssize_t write_pool_user(struct iov_iter *iter)
- {
- u8 block[BLAKE2S_BLOCK_SIZE];
-@@ -1552,7 +1598,58 @@ static int random_fasync(int fd, struct file *filp, int on)
- return fasync_helper(fd, filp, on, &fasync);
- }
-
-+static int random_open(struct inode *inode, struct file *filp)
-+{
-+ const struct random_extrng *rng;
-+
-+ rcu_read_lock();
-+ rng = rcu_dereference(extrng);
-+ if (rng && !try_module_get(rng->owner))
-+ rng = NULL;
-+ rcu_read_unlock();
-+
-+ if (!rng)
-+ return 0;
-+
-+ filp->f_op = &extrng_random_fops;
-+ filp->private_data = rng->owner;
-+
-+ return 0;
-+}
-+
-+static int urandom_open(struct inode *inode, struct file *filp)
-+{
-+ const struct random_extrng *rng;
-+
-+ rcu_read_lock();
-+ rng = rcu_dereference(extrng);
-+ if (rng && !try_module_get(rng->owner))
-+ rng = NULL;
-+ rcu_read_unlock();
-+
-+ if (!rng)
-+ return 0;
-+
-+ filp->f_op = &extrng_urandom_fops;
-+ filp->private_data = rng->owner;
-+
-+ return 0;
-+}
-+
-+static int extrng_release(struct inode *inode, struct file *filp)
-+{
-+ module_put(filp->private_data);
-+ return 0;
-+}
-+
-+static ssize_t
-+extrng_read_iter(struct kiocb *kiocb, struct iov_iter *iter)
-+{
-+ return rcu_dereference_raw(extrng)->extrng_read_iter(iter, false);
-+}
-+
- const struct file_operations random_fops = {
-+ .open = random_open,
- .read_iter = random_read_iter,
- .write_iter = random_write_iter,
- .poll = random_poll,
-@@ -1565,6 +1662,7 @@ const struct file_operations random_fops = {
- };
-
- const struct file_operations urandom_fops = {
-+ .open = urandom_open,
- .read_iter = urandom_read_iter,
- .write_iter = random_write_iter,
- .unlocked_ioctl = random_ioctl,
-@@ -1575,6 +1673,32 @@ const struct file_operations urandom_fops = {
- .splice_write = iter_file_splice_write,
- };
-
-+static const struct file_operations extrng_random_fops = {
-+ .open = random_open,
-+ .read_iter = extrng_read_iter,
-+ .write_iter = random_write_iter,
-+ .poll = extrng_poll,
-+ .unlocked_ioctl = random_ioctl,
-+ .compat_ioctl = compat_ptr_ioctl,
-+ .fasync = random_fasync,
-+ .llseek = noop_llseek,
-+ .release = extrng_release,
-+ .splice_read = copy_splice_read,
-+ .splice_write = iter_file_splice_write,
-+};
-+
-+static const struct file_operations extrng_urandom_fops = {
-+ .open = urandom_open,
-+ .read_iter = extrng_read_iter,
-+ .write_iter = random_write_iter,
-+ .unlocked_ioctl = random_ioctl,
-+ .compat_ioctl = compat_ptr_ioctl,
-+ .fasync = random_fasync,
-+ .llseek = noop_llseek,
-+ .release = extrng_release,
-+ .splice_read = copy_splice_read,
-+ .splice_write = iter_file_splice_write,
-+};
-
- /********************************************************************
- *
-diff --git a/drivers/firmware/efi/Makefile b/drivers/firmware/efi/Makefile
-index 8efbcf699e4f..96d5a1ca981d 100644
---- a/drivers/firmware/efi/Makefile
-+++ b/drivers/firmware/efi/Makefile
-@@ -25,6 +25,7 @@ subdir-$(CONFIG_EFI_STUB) += libstub
- obj-$(CONFIG_EFI_BOOTLOADER_CONTROL) += efibc.o
- obj-$(CONFIG_EFI_TEST) += test/
- obj-$(CONFIG_EFI_DEV_PATH_PARSER) += dev-path-parser.o
-+obj-$(CONFIG_EFI) += secureboot.o
- obj-$(CONFIG_APPLE_PROPERTIES) += apple-properties.o
- obj-$(CONFIG_EFI_RCI2_TABLE) += rci2-table.o
- obj-$(CONFIG_EFI_EMBEDDED_FIRMWARE) += embedded-firmware.o
-diff --git a/drivers/firmware/efi/efi.c b/drivers/firmware/efi/efi.c
-index 0327a39d31fa..5b5332b4de78 100644
---- a/drivers/firmware/efi/efi.c
-+++ b/drivers/firmware/efi/efi.c
-@@ -33,6 +33,7 @@
- #include <linux/memblock.h>
- #include <linux/security.h>
- #include <linux/notifier.h>
-+#include <linux/bsearch.h>
-
- #include <asm/early_ioremap.h>
-
-@@ -1017,40 +1018,101 @@ int efi_mem_type(unsigned long phys_addr)
- return md.type;
- }
-
-+struct efi_error_code {
-+ efi_status_t status;
-+ int errno;
-+ const char *description;
-+};
-+
-+static const struct efi_error_code efi_error_codes[] = {
-+ { EFI_SUCCESS, 0, "Success"},
-+#if 0
-+ { EFI_LOAD_ERROR, -EPICK_AN_ERRNO, "Load Error"},
-+#endif
-+ { EFI_INVALID_PARAMETER, -EINVAL, "Invalid Parameter"},
-+ { EFI_UNSUPPORTED, -ENOSYS, "Unsupported"},
-+ { EFI_BAD_BUFFER_SIZE, -ENOSPC, "Bad Buffer Size"},
-+ { EFI_BUFFER_TOO_SMALL, -ENOSPC, "Buffer Too Small"},
-+ { EFI_NOT_READY, -EAGAIN, "Not Ready"},
-+ { EFI_DEVICE_ERROR, -EIO, "Device Error"},
-+ { EFI_WRITE_PROTECTED, -EROFS, "Write Protected"},
-+ { EFI_OUT_OF_RESOURCES, -ENOMEM, "Out of Resources"},
-+#if 0
-+ { EFI_VOLUME_CORRUPTED, -EPICK_AN_ERRNO, "Volume Corrupt"},
-+ { EFI_VOLUME_FULL, -EPICK_AN_ERRNO, "Volume Full"},
-+ { EFI_NO_MEDIA, -EPICK_AN_ERRNO, "No Media"},
-+ { EFI_MEDIA_CHANGED, -EPICK_AN_ERRNO, "Media changed"},
-+#endif
-+ { EFI_NOT_FOUND, -ENOENT, "Not Found"},
-+#if 0
-+ { EFI_ACCESS_DENIED, -EPICK_AN_ERRNO, "Access Denied"},
-+ { EFI_NO_RESPONSE, -EPICK_AN_ERRNO, "No Response"},
-+ { EFI_NO_MAPPING, -EPICK_AN_ERRNO, "No mapping"},
-+ { EFI_TIMEOUT, -EPICK_AN_ERRNO, "Time out"},
-+ { EFI_NOT_STARTED, -EPICK_AN_ERRNO, "Not started"},
-+ { EFI_ALREADY_STARTED, -EPICK_AN_ERRNO, "Already started"},
-+#endif
-+ { EFI_ABORTED, -EINTR, "Aborted"},
-+#if 0
-+ { EFI_ICMP_ERROR, -EPICK_AN_ERRNO, "ICMP Error"},
-+ { EFI_TFTP_ERROR, -EPICK_AN_ERRNO, "TFTP Error"},
-+ { EFI_PROTOCOL_ERROR, -EPICK_AN_ERRNO, "Protocol Error"},
-+ { EFI_INCOMPATIBLE_VERSION, -EPICK_AN_ERRNO, "Incompatible Version"},
-+#endif
-+ { EFI_SECURITY_VIOLATION, -EACCES, "Security Policy Violation"},
-+#if 0
-+ { EFI_CRC_ERROR, -EPICK_AN_ERRNO, "CRC Error"},
-+ { EFI_END_OF_MEDIA, -EPICK_AN_ERRNO, "End of Media"},
-+ { EFI_END_OF_FILE, -EPICK_AN_ERRNO, "End of File"},
-+ { EFI_INVALID_LANGUAGE, -EPICK_AN_ERRNO, "Invalid Languages"},
-+ { EFI_COMPROMISED_DATA, -EPICK_AN_ERRNO, "Compromised Data"},
-+
-+ // warnings
-+ { EFI_WARN_UNKOWN_GLYPH, -EPICK_AN_ERRNO, "Warning Unknown Glyph"},
-+ { EFI_WARN_DELETE_FAILURE, -EPICK_AN_ERRNO, "Warning Delete Failure"},
-+ { EFI_WARN_WRITE_FAILURE, -EPICK_AN_ERRNO, "Warning Write Failure"},
-+ { EFI_WARN_BUFFER_TOO_SMALL, -EPICK_AN_ERRNO, "Warning Buffer Too Small"},
-+#endif
-+};
-+
-+static int
-+efi_status_cmp_bsearch(const void *key, const void *item)
-+{
-+ u64 status = (u64)(uintptr_t)key;
-+ struct efi_error_code *code = (struct efi_error_code *)item;
-+
-+ if (status < code->status)
-+ return -1;
-+ if (status > code->status)
-+ return 1;
-+ return 0;
-+}
-+
- int efi_status_to_err(efi_status_t status)
- {
-- int err;
--
-- switch (status) {
-- case EFI_SUCCESS:
-- err = 0;
-- break;
-- case EFI_INVALID_PARAMETER:
-- err = -EINVAL;
-- break;
-- case EFI_OUT_OF_RESOURCES:
-- err = -ENOSPC;
-- break;
-- case EFI_DEVICE_ERROR:
-- err = -EIO;
-- break;
-- case EFI_WRITE_PROTECTED:
-- err = -EROFS;
-- break;
-- case EFI_SECURITY_VIOLATION:
-- err = -EACCES;
-- break;
-- case EFI_NOT_FOUND:
-- err = -ENOENT;
-- break;
-- case EFI_ABORTED:
-- err = -EINTR;
-- break;
-- default:
-- err = -EINVAL;
-- }
-+ struct efi_error_code *found;
-+ size_t num = sizeof(efi_error_codes) / sizeof(struct efi_error_code);
-
-- return err;
-+ found = bsearch((void *)(uintptr_t)status, efi_error_codes,
-+ num, sizeof(struct efi_error_code),
-+ efi_status_cmp_bsearch);
-+ if (!found)
-+ return -EINVAL;
-+ return found->errno;
-+}
-+
-+const char *
-+efi_status_to_str(efi_status_t status)
-+{
-+ struct efi_error_code *found;
-+ size_t num = sizeof(efi_error_codes) / sizeof(struct efi_error_code);
-+
-+ found = bsearch((void *)(uintptr_t)status, efi_error_codes,
-+ num, sizeof(struct efi_error_code),
-+ efi_status_cmp_bsearch);
-+ if (!found)
-+ return "Unknown error code";
-+ return found->description;
- }
- EXPORT_SYMBOL_GPL(efi_status_to_err);
-
-diff --git a/drivers/firmware/efi/libstub/fdt.c b/drivers/firmware/efi/libstub/fdt.c
-index 23b3543d3041..0d08a549a10b 100644
---- a/drivers/firmware/efi/libstub/fdt.c
-+++ b/drivers/firmware/efi/libstub/fdt.c
-@@ -132,6 +132,11 @@ static efi_status_t update_fdt(void *orig_fdt, unsigned long orig_fdt_size,
- }
- }
-
-+ fdt_val32 = cpu_to_fdt32((u32)efi_get_secureboot());
-+ status = fdt_setprop_var(fdt, node, "secure-boot-mode", fdt_val32);
-+ if (status)
-+ goto fdt_set_fail;
-+
- /* Shrink the FDT back to its minimum size: */
- fdt_pack(fdt);
-
-diff --git a/drivers/firmware/efi/libstub/secureboot.c b/drivers/firmware/efi/libstub/secureboot.c
-index 516f4f0069bd..380354755108 100644
---- a/drivers/firmware/efi/libstub/secureboot.c
-+++ b/drivers/firmware/efi/libstub/secureboot.c
-@@ -29,10 +29,13 @@ enum efi_secureboot_mode efi_get_secureboot(void)
- {
- u32 attr;
- unsigned long size;
-- enum efi_secureboot_mode mode;
-+ static enum efi_secureboot_mode mode;
- efi_status_t status;
- u8 moksbstate;
-
-+ if (mode != efi_secureboot_mode_unset)
-+ return mode;
-+
- mode = efi_get_secureboot_mode(get_var);
- if (mode == efi_secureboot_mode_unknown) {
- efi_err("Could not determine UEFI Secure Boot status.\n");
-@@ -53,10 +56,13 @@ enum efi_secureboot_mode efi_get_secureboot(void)
- /* If it fails, we don't care why. Default to secure */
- if (status != EFI_SUCCESS)
- goto secure_boot_enabled;
-- if (!(attr & EFI_VARIABLE_NON_VOLATILE) && moksbstate == 1)
-- return efi_secureboot_mode_disabled;
-+ if (!(attr & EFI_VARIABLE_NON_VOLATILE) && moksbstate == 1) {
-+ mode = efi_secureboot_mode_disabled;
-+ return mode;
-+ }
-
- secure_boot_enabled:
- efi_info("UEFI Secure Boot is enabled.\n");
-- return efi_secureboot_mode_enabled;
-+ mode = efi_secureboot_mode_enabled;
-+ return mode;
- }
-diff --git a/drivers/firmware/efi/secureboot.c b/drivers/firmware/efi/secureboot.c
-new file mode 100644
-index 000000000000..de0a3714a5d4
---- /dev/null
-+++ b/drivers/firmware/efi/secureboot.c
-@@ -0,0 +1,38 @@
-+/* Core kernel secure boot support.
-+ *
-+ * Copyright (C) 2017 Red Hat, Inc. All Rights Reserved.
-+ * Written by David Howells (dhowells@redhat.com)
-+ *
-+ * This program is free software; you can redistribute it and/or
-+ * modify it under the terms of the GNU General Public Licence
-+ * as published by the Free Software Foundation; either version
-+ * 2 of the Licence, or (at your option) any later version.
-+ */
-+
-+#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
-+
-+#include <linux/efi.h>
-+#include <linux/kernel.h>
-+#include <linux/printk.h>
-+
-+/*
-+ * Decide what to do when UEFI secure boot mode is enabled.
-+ */
-+void __init efi_set_secure_boot(enum efi_secureboot_mode mode)
-+{
-+ if (efi_enabled(EFI_BOOT)) {
-+ switch (mode) {
-+ case efi_secureboot_mode_disabled:
-+ pr_info("Secure boot disabled\n");
-+ break;
-+ case efi_secureboot_mode_enabled:
-+ set_bit(EFI_SECURE_BOOT, &efi.flags);
-+ pr_info("Secure boot enabled\n");
-+ break;
-+ default:
-+ pr_warn("Secure boot could not be determined (mode %u)\n",
-+ mode);
-+ break;
-+ }
-+ }
-+}
-diff --git a/drivers/hwtracing/coresight/coresight-etm4x-core.c b/drivers/hwtracing/coresight/coresight-etm4x-core.c
-index 14bb31bd6a0b..0529359d7440 100644
---- a/drivers/hwtracing/coresight/coresight-etm4x-core.c
-+++ b/drivers/hwtracing/coresight/coresight-etm4x-core.c
-@@ -12,6 +12,7 @@
- #include <linux/init.h>
- #include <linux/types.h>
- #include <linux/device.h>
-+#include <linux/dmi.h>
- #include <linux/io.h>
- #include <linux/err.h>
- #include <linux/fs.h>
-@@ -2447,6 +2448,16 @@ static const struct amba_id etm4_ids[] = {
- {},
- };
-
-+static const struct dmi_system_id broken_coresight[] = {
-+ {
-+ .matches = {
-+ DMI_MATCH(DMI_SYS_VENDOR, "HPE"),
-+ DMI_MATCH(DMI_PRODUCT_NAME, "Apollo 70"),
-+ },
-+ },
-+ { } /* terminating entry */
-+};
-+
- MODULE_DEVICE_TABLE(amba, etm4_ids);
-
- static struct amba_driver etm4x_amba_driver = {
-@@ -2521,6 +2532,11 @@ static int __init etm4x_init(void)
- {
- int ret;
-
-+ if (dmi_check_system(broken_coresight)) {
-+ pr_info("ETM4 disabled due to firmware bug\n");
-+ return 0;
-+ }
-+
- ret = etm4_pm_setup();
-
- /* etm4_pm_setup() does its own cleanup - exit on error */
-@@ -2547,6 +2563,9 @@ static int __init etm4x_init(void)
-
- static void __exit etm4x_exit(void)
- {
-+ if (dmi_check_system(broken_coresight))
-+ return;
-+
- amba_driver_unregister(&etm4x_amba_driver);
- platform_driver_unregister(&etm4_platform_driver);
- etm4_pm_clear();
-diff --git a/drivers/iommu/iommu.c b/drivers/iommu/iommu.c
-index e8f13dcebbde..dd7014ca962c 100644
---- a/drivers/iommu/iommu.c
-+++ b/drivers/iommu/iommu.c
-@@ -8,6 +8,7 @@
-
- #include <linux/amba/bus.h>
- #include <linux/device.h>
-+#include <linux/dmi.h>
- #include <linux/kernel.h>
- #include <linux/bits.h>
- #include <linux/bug.h>
-@@ -3135,6 +3136,27 @@ int iommu_fwspec_add_ids(struct device *dev, const u32 *ids, int num_ids)
- }
- EXPORT_SYMBOL_GPL(iommu_fwspec_add_ids);
-
-+#ifdef CONFIG_ARM64
-+static int __init iommu_quirks(void)
-+{
-+ const char *vendor, *name;
-+
-+ vendor = dmi_get_system_info(DMI_SYS_VENDOR);
-+ name = dmi_get_system_info(DMI_PRODUCT_NAME);
-+
-+ if (vendor &&
-+ (strncmp(vendor, "GIGABYTE", 8) == 0 && name &&
-+ (strncmp(name, "R120", 4) == 0 ||
-+ strncmp(name, "R270", 4) == 0))) {
-+ pr_warn("Gigabyte %s detected, force iommu passthrough mode", name);
-+ iommu_def_domain_type = IOMMU_DOMAIN_IDENTITY;
-+ }
-+
-+ return 0;
-+}
-+arch_initcall(iommu_quirks);
-+#endif
-+
- /**
- * iommu_setup_default_domain - Set the default_domain for the group
- * @group: Group to change
-diff --git a/drivers/message/fusion/mptsas.c b/drivers/message/fusion/mptsas.c
-index c362f09a8c55..bcda62d89ecd 100644
---- a/drivers/message/fusion/mptsas.c
-+++ b/drivers/message/fusion/mptsas.c
-@@ -5377,6 +5377,10 @@ static void mptsas_remove(struct pci_dev *pdev)
- }
-
- static const struct pci_device_id mptsas_pci_table[] = {
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_SAS1068,
-+ PCI_VENDOR_ID_VMWARE, PCI_ANY_ID },
-+#else
- { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_SAS1064,
- PCI_ANY_ID, PCI_ANY_ID },
- { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_SAS1068,
-@@ -5389,6 +5393,7 @@ static const struct pci_device_id mptsas_pci_table[] = {
- PCI_ANY_ID, PCI_ANY_ID },
- { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_SAS1068_820XELP,
- PCI_ANY_ID, PCI_ANY_ID },
-+#endif
- {0} /* Terminating entry */
- };
- MODULE_DEVICE_TABLE(pci, mptsas_pci_table);
-diff --git a/drivers/message/fusion/mptspi.c b/drivers/message/fusion/mptspi.c
-index 56892b1f3de2..b0e55913bb2e 100644
---- a/drivers/message/fusion/mptspi.c
-+++ b/drivers/message/fusion/mptspi.c
-@@ -1240,12 +1240,17 @@ static struct spi_function_template mptspi_transport_functions = {
- */
-
- static const struct pci_device_id mptspi_pci_table[] = {
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_53C1030,
-+ PCI_VENDOR_ID_VMWARE, PCI_ANY_ID },
-+#else
- { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_53C1030,
- PCI_ANY_ID, PCI_ANY_ID },
- { PCI_VENDOR_ID_ATTO, MPI_MANUFACTPAGE_DEVID_53C1030,
- PCI_ANY_ID, PCI_ANY_ID },
- { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_53C1035,
- PCI_ANY_ID, PCI_ANY_ID },
-+#endif
- {0} /* Terminating entry */
- };
- MODULE_DEVICE_TABLE(pci, mptspi_pci_table);
-diff --git a/drivers/net/wireguard/main.c b/drivers/net/wireguard/main.c
-index a00671b58701..eeef2766b8b3 100644
---- a/drivers/net/wireguard/main.c
-+++ b/drivers/net/wireguard/main.c
-@@ -12,6 +12,7 @@
-
- #include <uapi/linux/wireguard.h>
-
-+#include <linux/fips.h>
- #include <linux/init.h>
- #include <linux/module.h>
- #include <net/genetlink.h>
-@@ -21,6 +22,11 @@ static int __init wg_mod_init(void)
- {
- int ret;
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ if (fips_enabled)
-+ return -EOPNOTSUPP;
-+#endif
-+
- ret = wg_allowedips_slab_init();
- if (ret < 0)
- goto err_allowedips;
-diff --git a/drivers/pci/pci-driver.c b/drivers/pci/pci-driver.c
-index f36778e62ac1..7b4dc4aff7c5 100644
---- a/drivers/pci/pci-driver.c
-+++ b/drivers/pci/pci-driver.c
-@@ -19,6 +19,7 @@
- #include <linux/kexec.h>
- #include <linux/of_device.h>
- #include <linux/acpi.h>
-+#include <linux/kernel.h>
- #include <linux/dma-map-ops.h>
- #include <linux/iommu.h>
- #include "pci.h"
-@@ -329,7 +330,15 @@ static int local_pci_probe(struct drv_dev_and_id *ddi)
- */
- pm_runtime_get_sync(dev);
- pci_dev->driver = pci_drv;
-+
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ rc = -EACCES;
-+ if (!pci_rh_check_status(pci_dev))
-+ rc = pci_drv->probe(pci_dev, ddi->id);
-+#else
- rc = pci_drv->probe(pci_dev, ddi->id);
-+#endif
-+
- if (!rc)
- return rc;
- if (rc < 0) {
-diff --git a/drivers/pci/quirks.c b/drivers/pci/quirks.c
-index b09f27f7846f..b54fe538511a 100644
---- a/drivers/pci/quirks.c
-+++ b/drivers/pci/quirks.c
-@@ -4496,6 +4496,30 @@ static void quirk_aspeed_pci_bridge_no_alias(struct pci_dev *pdev)
- }
- DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_ASPEED, 0x1150, quirk_aspeed_pci_bridge_no_alias);
-
-+/*
-+ * PCI BAR 5 is not setup correctly for the on-board AHCI controller
-+ * on Broadcom's Vulcan processor. Added a quirk to fix BAR 5 by
-+ * using BAR 4's resources which are populated correctly and NOT
-+ * actually used by the AHCI controller.
-+ */
-+static void quirk_fix_vulcan_ahci_bars(struct pci_dev *dev)
-+{
-+ struct resource *r = &dev->resource[4];
-+
-+ if (!(r->flags & IORESOURCE_MEM) || (r->start == 0))
-+ return;
-+
-+ /* Set BAR5 resource to BAR4 */
-+ dev->resource[5] = *r;
-+
-+ /* Update BAR5 in pci config space */
-+ pci_write_config_dword(dev, PCI_BASE_ADDRESS_5, r->start);
-+
-+ /* Clear BAR4's resource */
-+ memset(r, 0, sizeof(*r));
-+}
-+DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_BROADCOM, 0x9027, quirk_fix_vulcan_ahci_bars);
-+
- /*
- * Intersil/Techwell TW686[4589]-based video capture cards have an empty (zero)
- * class code. Fix it.
-diff --git a/drivers/scsi/hpsa.c b/drivers/scsi/hpsa.c
-index 8edad1830abe..e558acedfa44 100644
---- a/drivers/scsi/hpsa.c
-+++ b/drivers/scsi/hpsa.c
-@@ -82,7 +82,9 @@ MODULE_DESCRIPTION("Driver for HP Smart Array Controller version " \
- HPSA_DRIVER_VERSION);
- MODULE_VERSION(HPSA_DRIVER_VERSION);
- MODULE_LICENSE("GPL");
-+#ifndef CONFIG_RHEL_DIFFERENCES
- MODULE_ALIAS("cciss");
-+#endif
-
- static int hpsa_simple_mode;
- module_param(hpsa_simple_mode, int, S_IRUGO|S_IWUSR);
-@@ -144,10 +146,12 @@ static const struct pci_device_id hpsa_pci_device_id[] = {
- {PCI_VENDOR_ID_HP_3PAR, 0x0075, 0x1590, 0x007D},
- {PCI_VENDOR_ID_HP_3PAR, 0x0075, 0x1590, 0x0088},
- {PCI_VENDOR_ID_HP, 0x333f, 0x103c, 0x333f},
-+#ifndef CONFIG_RHEL_DIFFERENCES
- {PCI_VENDOR_ID_HP, PCI_ANY_ID, PCI_ANY_ID, PCI_ANY_ID,
- PCI_CLASS_STORAGE_RAID << 8, 0xffff << 8, 0},
- {PCI_VENDOR_ID_COMPAQ, PCI_ANY_ID, PCI_ANY_ID, PCI_ANY_ID,
- PCI_CLASS_STORAGE_RAID << 8, 0xffff << 8, 0},
-+#endif
- {0,}
- };
-
-diff --git a/drivers/scsi/qla2xxx/qla_os.c b/drivers/scsi/qla2xxx/qla_os.c
-index 72b1c28e4dae..2226c9dffa94 100644
---- a/drivers/scsi/qla2xxx/qla_os.c
-+++ b/drivers/scsi/qla2xxx/qla_os.c
-@@ -8128,6 +8128,7 @@ static const struct pci_error_handlers qla2xxx_err_handler = {
- };
-
- static const struct pci_device_id qla2xxx_pci_tbl[] = {
-+#ifndef CONFIG_RHEL_DIFFERENCES
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2100) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2200) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2300) },
-@@ -8140,13 +8141,18 @@ static const struct pci_device_id qla2xxx_pci_tbl[] = {
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8432) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP5422) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP5432) },
-+#endif
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2532) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2031) },
-+#ifndef CONFIG_RHEL_DIFFERENCES
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8001) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8021) },
-+#endif
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8031) },
-+#ifndef CONFIG_RHEL_DIFFERENCES
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISPF001) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8044) },
-+#endif
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2071) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2271) },
- { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2261) },
-diff --git a/drivers/scsi/sd.c b/drivers/scsi/sd.c
-index 599e75f33334..ec52c3a4fa14 100644
---- a/drivers/scsi/sd.c
-+++ b/drivers/scsi/sd.c
-@@ -145,6 +145,13 @@ static void sd_large_pool_destroy(void)
- }
- mutex_unlock(&sd_mutex_lock);
- }
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+static char sd_probe_type[6] = "async";
-+module_param_string(probe, sd_probe_type, sizeof(sd_probe_type),
-+ S_IRUGO|S_IWUSR);
-+MODULE_PARM_DESC(probe, "async or sync. Setting to 'sync' disables asynchronous "
-+ "device number assignments (sda, sdb, ...).");
-+#endif
-
- static void sd_disable_discard(struct scsi_disk *sdkp)
- {
-@@ -4460,6 +4467,11 @@ static int __init init_sd(void)
- goto err_out_class;
- }
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ if (!strcmp(sd_probe_type, "sync"))
-+ sd_template.gendrv.probe_type = PROBE_FORCE_SYNCHRONOUS;
-+#endif
-+
- err = scsi_register_driver(&sd_template);
- if (err)
- goto err_out_driver;
-diff --git a/drivers/usb/core/hub.c b/drivers/usb/core/hub.c
-index d92bf887739d..039fd5620282 100644
---- a/drivers/usb/core/hub.c
-+++ b/drivers/usb/core/hub.c
-@@ -5902,6 +5902,13 @@ static void hub_event(struct work_struct *work)
- (u16) hub->change_bits[0],
- (u16) hub->event_bits[0]);
-
-+ /* Don't disconnect USB-SATA on TrimSlice */
-+ if (strcmp(dev_name(hdev->bus->controller), "tegra-ehci.0") == 0) {
-+ if ((hdev->state == 7) && (hub->change_bits[0] == 0) &&
-+ (hub->event_bits[0] == 0x2))
-+ hub->event_bits[0] = 0;
-+ }
-+
- /* Lock the device, then check to see if we were
- * disconnected while waiting for the lock to succeed. */
- usb_lock_device(hdev);
-diff --git a/fs/afs/main.c b/fs/afs/main.c
-index 7a883c59976f..907ec60e500a 100644
---- a/fs/afs/main.c
-+++ b/fs/afs/main.c
-@@ -194,6 +194,9 @@ static int __init afs_init(void)
- goto error_proc;
- }
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ mark_partner_supported(KBUILD_MODNAME, THIS_MODULE);
-+#endif
- return ret;
-
- error_proc:
-diff --git a/fs/erofs/super.c b/fs/erofs/super.c
-index 9d8f862f309f..3e1ede3e4f7b 100644
---- a/fs/erofs/super.c
-+++ b/fs/erofs/super.c
-@@ -599,6 +599,9 @@ static int erofs_fc_fill_super(struct super_block *sb, struct fs_context *fc)
- {
- struct inode *inode;
- struct erofs_sb_info *sbi = EROFS_SB(sb);
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ static bool printed = false;
-+#endif
- int err;
-
- sb->s_magic = EROFS_SUPER_MAGIC;
-@@ -738,6 +741,12 @@ static int erofs_fc_fill_super(struct super_block *sb, struct fs_context *fc)
-
- sbi->dir_ra_bytes = EROFS_DIR_RA_BYTES;
- erofs_info(sb, "mounted with root inode @ nid %llu.", sbi->root_nid);
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ if (!printed) {
-+ mark_tech_preview("EROFS filesystem", NULL);
-+ printed = true;
-+ }
-+#endif
- return 0;
- }
-
-diff --git a/fs/ext4/super.c b/fs/ext4/super.c
-index 245f67d10ded..f1e49d37b270 100644
---- a/fs/ext4/super.c
-+++ b/fs/ext4/super.c
-@@ -5739,6 +5739,17 @@ static int __ext4_fill_super(struct fs_context *fc, struct super_block *sb)
- atomic_set(&sbi->s_warning_count, 0);
- atomic_set(&sbi->s_msg_count, 0);
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ if (ext4_has_feature_verity(sb)) {
-+ static bool printed = false;
-+
-+ if (!printed) {
-+ mark_tech_preview("fs-verity on ext4", NULL);
-+ printed = true;
-+ }
-+ }
-+#endif
-+
- /* Register sysfs after all initializations are complete. */
- err = ext4_register_sysfs(sb);
- if (err)
-diff --git a/include/linux/crypto.h b/include/linux/crypto.h
-index b7c97f1c47c9..0a484f45b24a 100644
---- a/include/linux/crypto.h
-+++ b/include/linux/crypto.h
-@@ -152,6 +152,8 @@
- #define CRYPTO_TFM_REQ_MAY_BACKLOG 0x00000400
- #define CRYPTO_TFM_REQ_ON_STACK 0x00000800
-
-+#define CRYPTO_TFM_FIPS_COMPLIANCE 0x80000000
-+
- /*
- * Miscellaneous stuff.
- */
-diff --git a/include/linux/efi.h b/include/linux/efi.h
-index ccbc35479684..8eb9a1276ba7 100644
---- a/include/linux/efi.h
-+++ b/include/linux/efi.h
-@@ -45,6 +45,8 @@ struct screen_info;
- #define EFI_ABORTED (21 | (1UL << (BITS_PER_LONG-1)))
- #define EFI_SECURITY_VIOLATION (26 | (1UL << (BITS_PER_LONG-1)))
-
-+#define EFI_IS_ERROR(x) ((x) & (1UL << (BITS_PER_LONG-1)))
-+
- typedef unsigned long efi_status_t;
- typedef u8 efi_bool_t;
- typedef u16 efi_char16_t; /* UNICODE character */
-@@ -847,6 +849,14 @@ extern int __init parse_efi_signature_list(
- #define EFI_MEM_ATTR 9 /* Did firmware publish an EFI_MEMORY_ATTRIBUTES table? */
- #define EFI_MEM_NO_SOFT_RESERVE 10 /* Is the kernel configured to ignore soft reservations? */
- #define EFI_PRESERVE_BS_REGIONS 11 /* Are EFI boot-services memory segments available? */
-+#define EFI_SECURE_BOOT 12 /* Are we in Secure Boot mode? */
-+
-+enum efi_secureboot_mode {
-+ efi_secureboot_mode_unset,
-+ efi_secureboot_mode_unknown,
-+ efi_secureboot_mode_disabled,
-+ efi_secureboot_mode_enabled,
-+};
-
- #ifdef CONFIG_EFI
- /*
-@@ -858,6 +868,8 @@ static inline bool efi_enabled(int feature)
- }
- extern void efi_reboot(enum reboot_mode reboot_mode, const char *__unused);
-
-+extern void __init efi_set_secure_boot(enum efi_secureboot_mode mode);
-+
- bool __pure __efi_soft_reserve_enabled(void);
-
- static inline bool __pure efi_soft_reserve_enabled(void)
-@@ -879,6 +891,8 @@ static inline bool efi_enabled(int feature)
- static inline void
- efi_reboot(enum reboot_mode reboot_mode, const char *__unused) {}
-
-+static inline void efi_set_secure_boot(enum efi_secureboot_mode mode) {}
-+
- static inline bool efi_soft_reserve_enabled(void)
- {
- return false;
-@@ -893,6 +907,7 @@ static inline void efi_find_mirror(void) {}
- #endif
-
- extern int efi_status_to_err(efi_status_t status);
-+extern const char *efi_status_to_str(efi_status_t status);
-
- /*
- * Variable Attributes
-@@ -1110,13 +1125,6 @@ extern unsigned long efi_call_virt_save_flags(void);
-
- void efi_runtime_assert_lock_held(void);
-
--enum efi_secureboot_mode {
-- efi_secureboot_mode_unset,
-- efi_secureboot_mode_unknown,
-- efi_secureboot_mode_disabled,
-- efi_secureboot_mode_enabled,
--};
--
- static inline
- enum efi_secureboot_mode efi_get_secureboot_mode(efi_get_variable_t *get_var)
- {
-diff --git a/include/linux/kernel.h b/include/linux/kernel.h
-index e5570a16cbb1..82945b474e2e 100644
---- a/include/linux/kernel.h
-+++ b/include/linux/kernel.h
-@@ -194,4 +194,32 @@ extern enum system_states system_state;
- # define REBUILD_DUE_TO_DYNAMIC_FTRACE
- #endif
-
-+/* Permissions on a sysfs file: you didn't miss the 0 prefix did you? */
-+#define VERIFY_OCTAL_PERMISSIONS(perms) \
-+ (BUILD_BUG_ON_ZERO((perms) < 0) + \
-+ BUILD_BUG_ON_ZERO((perms) > 0777) + \
-+ /* USER_READABLE >= GROUP_READABLE >= OTHER_READABLE */ \
-+ BUILD_BUG_ON_ZERO((((perms) >> 6) & 4) < (((perms) >> 3) & 4)) + \
-+ BUILD_BUG_ON_ZERO((((perms) >> 3) & 4) < ((perms) & 4)) + \
-+ /* USER_WRITABLE >= GROUP_WRITABLE */ \
-+ BUILD_BUG_ON_ZERO((((perms) >> 6) & 2) < (((perms) >> 3) & 2)) + \
-+ /* OTHER_WRITABLE? Generally considered a bad idea. */ \
-+ BUILD_BUG_ON_ZERO((perms) & 2) + \
-+ (perms))
-+
-+struct module;
-+
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+void mark_hardware_unmaintained(const char *driver_name, char *fmt, ...);
-+void mark_hardware_deprecated(const char *driver_name, char *fmt, ...);
-+void mark_tech_preview(const char *msg, struct module *mod);
-+void mark_partner_supported(const char *msg, struct module *mod);
-+void init_rh_check_status(char *fn_name);
-+#else
-+static inline void mark_hardware_unmaintained(const char *driver_name, char *fmt, ...) { }
-+static inline void mark_hardware_deprecated(const char *driver_name, char *fmt, ...) { }
-+static inline void mark_tech_preview(const char *msg, struct module *mod) { }
-+static inline void mark_partner_supported(const char *msg, struct module *mod) { }
-+#endif
-+
- #endif
-diff --git a/include/linux/lsm_hook_defs.h b/include/linux/lsm_hook_defs.h
-index 65c9609ec207..2cc243ec73f6 100644
---- a/include/linux/lsm_hook_defs.h
-+++ b/include/linux/lsm_hook_defs.h
-@@ -456,6 +456,7 @@ LSM_HOOK(int, 0, bpf_token_capable, const struct bpf_token *token, int cap)
-
- LSM_HOOK(int, 0, locked_down, enum lockdown_reason what)
-
-+
- #ifdef CONFIG_PERF_EVENTS
- LSM_HOOK(int, 0, perf_event_open, int type)
- LSM_HOOK(int, 0, perf_event_alloc, struct perf_event *event)
-diff --git a/include/linux/module.h b/include/linux/module.h
-index 7566815fabbe..f18af7fdb45b 100644
---- a/include/linux/module.h
-+++ b/include/linux/module.h
-@@ -413,6 +413,7 @@ struct module {
- struct module_attribute *modinfo_attrs;
- const char *version;
- const char *srcversion;
-+ const char *rhelversion;
- const char *imported_namespaces;
- struct kobject *holders_dir;
-
-@@ -1020,6 +1021,10 @@ static inline unsigned long find_kallsyms_symbol_value(struct module *mod,
-
- #endif /* CONFIG_MODULES && CONFIG_KALLSYMS */
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+void module_rh_check_status(const char * module_name);
-+#endif
-+
- /* Define __free(module_put) macro for struct module *. */
- DEFINE_FREE(module_put, struct module *, if (_T) module_put(_T))
-
-diff --git a/include/linux/panic.h b/include/linux/panic.h
-index f1dd417e54b2..95344281ed2c 100644
---- a/include/linux/panic.h
-+++ b/include/linux/panic.h
-@@ -88,7 +88,22 @@ static inline void set_arch_panic_timeout(int timeout, int arch_default_timeout)
- #define TAINT_RANDSTRUCT 17
- #define TAINT_TEST 18
- #define TAINT_FWCTL 19
--#define TAINT_FLAGS_COUNT 20
-+/* Start of Red Hat-specific taint flags */
-+#define TAINT_20 20
-+#define TAINT_21 21
-+#define TAINT_22 22
-+#define TAINT_23 23
-+#define TAINT_24 24
-+#define TAINT_25 25
-+#define TAINT_PARTNER_SUPPORTED 26
-+#define TAINT_SUPPORT_REMOVED 27
-+/* Bits 28 - 31 are reserved for Red Hat use only */
-+#define TAINT_RESERVED28 28
-+#define TAINT_RESERVED29 29
-+#define TAINT_RESERVED30 30
-+#define TAINT_UNPRIVILEGED_BPF 31
-+/* End of Red Hat-specific taint flags */
-+#define TAINT_FLAGS_COUNT 32
- #define TAINT_FLAGS_MAX ((1UL << TAINT_FLAGS_COUNT) - 1)
-
- struct taint_flag {
-diff --git a/include/linux/pci.h b/include/linux/pci.h
-index 64b308b6e61c..0967f9be0b54 100644
---- a/include/linux/pci.h
-+++ b/include/linux/pci.h
-@@ -1715,6 +1715,7 @@ int pci_add_dynid(struct pci_driver *drv,
- unsigned long driver_data);
- const struct pci_device_id *pci_match_id(const struct pci_device_id *ids,
- struct pci_dev *dev);
-+
- int pci_scan_bridge(struct pci_bus *bus, struct pci_dev *dev, int max,
- int pass);
-
-@@ -2879,6 +2880,10 @@ static inline bool pci_is_thunderbolt_attached(struct pci_dev *pdev)
- return false;
- }
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+bool pci_rh_check_status(struct pci_dev *pci_dev);
-+#endif
-+
- #if defined(CONFIG_PCIEPORTBUS) || defined(CONFIG_EEH) || defined(CONFIG_S390)
- void pci_uevent_ers(struct pci_dev *pdev, enum pci_ers_result err_type);
- #endif
-diff --git a/include/linux/random.h b/include/linux/random.h
-index 8a8064dc3970..3238fab8f749 100644
---- a/include/linux/random.h
-+++ b/include/linux/random.h
-@@ -9,6 +9,13 @@
-
- #include <uapi/linux/random.h>
-
-+struct iov_iter;
-+
-+struct random_extrng {
-+ ssize_t (*extrng_read_iter)(struct iov_iter *iter, bool reseed);
-+ struct module *owner;
-+};
-+
- struct notifier_block;
-
- void add_device_randomness(const void *buf, size_t len);
-@@ -135,6 +142,9 @@ int random_prepare_cpu(unsigned int cpu);
- int random_online_cpu(unsigned int cpu);
- #endif
-
-+void random_register_extrng(const struct random_extrng *rng);
-+void random_unregister_extrng(void);
-+
- #ifndef MODULE
- extern const struct file_operations random_fops, urandom_fops;
- #endif
-diff --git a/include/linux/rh_flags.h b/include/linux/rh_flags.h
-new file mode 100644
-index 000000000000..4bb0f5585df0
---- /dev/null
-+++ b/include/linux/rh_flags.h
-@@ -0,0 +1,34 @@
-+/* SPDX-License-Identifier: GPL-2.0 */
-+/*
-+ * rh_flags.h -- Red Hat flags tracking
-+ *
-+ * Copyright (c) 2018 Red Hat, Inc. -- Jiri Benc <jbenc@redhat.com>
-+ *
-+ * The intent of the flag tracking is to provide better and more focused
-+ * support. Only those flags that are of a special interest for customer
-+ * support should be tracked.
-+ *
-+ * THE FLAGS DO NOT EXPRESS ANY SUPPORT POLICIES.
-+ */
-+
-+#ifndef _LINUX_RH_FLAGS_H
-+#define _LINUX_RH_FLAGS_H
-+
-+#if defined CONFIG_RHEL_DIFFERENCES
-+bool __rh_add_flag(const char *flag_name);
-+void rh_print_flags(void);
-+
-+#define rh_add_flag(flag_name) \
-+({ \
-+ static bool __mark_once __read_mostly; \
-+ bool __ret_mark_once = !__mark_once; \
-+ \
-+ if (!__mark_once) \
-+ __mark_once = __rh_add_flag(flag_name); \
-+ unlikely(__ret_mark_once); \
-+})
-+#else
-+static inline void rh_print_flags(void) { }
-+static inline void rh_add_flag(const char *flag_name) { }
-+#endif
-+#endif
-diff --git a/include/linux/rh_kabi.h b/include/linux/rh_kabi.h
-new file mode 100644
-index 000000000000..5139cb2cabdc
---- /dev/null
-+++ b/include/linux/rh_kabi.h
-@@ -0,0 +1,541 @@
-+/*
-+ * rh_kabi.h - Red Hat kABI abstraction header
-+ *
-+ * Copyright (c) 2014 Don Zickus
-+ * Copyright (c) 2015-2020 Jiri Benc
-+ * Copyright (c) 2015 Sabrina Dubroca, Hannes Frederic Sowa
-+ * Copyright (c) 2016-2018 Prarit Bhargava
-+ * Copyright (c) 2017 Paolo Abeni, Larry Woodman
-+ *
-+ * This file is released under the GPLv2.
-+ * See the file COPYING for more details.
-+ *
-+ * These kabi macros hide the changes from the kabi checker and from the
-+ * process that computes the exported symbols' checksums.
-+ * They have 2 variants: one (defined under __GENKSYMS__) used when
-+ * generating the checksums, and the other used when building the kernel's
-+ * binaries.
-+ *
-+ * The use of these macros does not guarantee that the usage and modification
-+ * of code is correct. As with all Red Hat only changes, an engineer must
-+ * explain why the use of the macro is valid in the patch containing the
-+ * changes.
-+ *
-+ */
-+
-+#ifndef _LINUX_RH_KABI_H
-+#define _LINUX_RH_KABI_H
-+
-+#include <linux/kconfig.h>
-+#include <linux/compiler.h>
-+#include <linux/stringify.h>
-+
-+/*
-+ * NOTE
-+ * Unless indicated otherwise, don't use ';' after these macros as it
-+ * messes up the kABI checker by changing what the resulting token string
-+ * looks like. Instead let the macros add the ';' so it can be properly
-+ * hidden from the kABI checker (mainly for RH_KABI_EXTEND, but applied to
-+ * most macros for uniformity).
-+ *
-+ *
-+ * RH_KABI_CONST
-+ * Adds a new const modifier to a function parameter preserving the old
-+ * checksum.
-+ *
-+ * RH_KABI_ADD_MODIFIER
-+ * Adds a new modifier to a function parameter or a typedef, preserving
-+ * the old checksum. Useful e.g. for adding rcu annotations or changing
-+ * int to unsigned. Beware that this may change the semantics; if you're
-+ * sure this is safe, always explain why binary compatibility with 3rd
-+ * party modules is retained.
-+ *
-+ * RH_KABI_DEPRECATE
-+ * Marks the element as deprecated and make it unusable by modules while
-+ * keeping a hole in its place to preserve binary compatibility.
-+ *
-+ * RH_KABI_DEPRECATE_FN
-+ * Marks the function pointer as deprecated and make it unusable by modules
-+ * while keeping a hole in its place to preserve binary compatibility.
-+ *
-+ * RH_KABI_EXTEND
-+ * Adds a new field to a struct. This must always be added to the end of
-+ * the struct. Before using this macro, make sure this is actually safe
-+ * to do - there is a number of conditions under which it is *not* safe.
-+ * In particular (but not limited to), this macro cannot be used:
-+ * - if the struct in question is embedded in another struct, or
-+ * - if the struct is allocated by drivers either statically or
-+ * dynamically, or
-+ * - if the struct is allocated together with driver data (an example of
-+ * such behavior is struct net_device or struct request).
-+ *
-+ * RH_KABI_EXTEND_WITH_SIZE
-+ * Adds a new element (usually a struct) to a struct and reserves extra
-+ * space for the new element. The provided 'size' is the total space to
-+ * be added in longs (i.e. it's 8 * 'size' bytes), including the size of
-+ * the added element. It is automatically checked that the new element
-+ * does not overflow the reserved space, now nor in the future. However,
-+ * no attempt is done to check the content of the added element (struct)
-+ * for kABI conformance - kABI checking inside the added element is
-+ * effectively switched off.
-+ * For any struct being added by RH_KABI_EXTEND_WITH_SIZE, it is
-+ * recommended its content to be documented as not covered by kABI
-+ * guarantee.
-+ *
-+ * RH_KABI_FILL_HOLE
-+ * Fills a hole in a struct.
-+ *
-+ * Warning: only use if a hole exists for _all_ arches. Use pahole to verify.
-+ *
-+ * RH_KABI_RENAME
-+ * Renames an element without changing its type. This macro can be used in
-+ * bitfields, for example.
-+ *
-+ * NOTE: this macro does not add the final ';'
-+ *
-+ * RH_KABI_REPLACE
-+ * Replaces the _orig field by the _new field. The size of the occupied
-+ * space is preserved, it's fine if the _new field is smaller than the
-+ * _orig field. If a _new field is larger or has a different alignment,
-+ * compilation will abort.
-+ *
-+ * RH_KABI_REPLACE_SPLIT
-+ * Works the same as RH_KABI_REPLACE but replaces a single _orig field by
-+ * multiple new fields. The checks for size and alignment done by
-+ * RH_KABI_REPLACE are still applied.
-+ *
-+ * RH_KABI_HIDE_INCLUDE
-+ * Hides the given include file from kABI checksum computations. This is
-+ * used when a newly added #include makes a previously opaque struct
-+ * visible.
-+ *
-+ * Example usage:
-+ * #include RH_KABI_HIDE_INCLUDE(<linux/poll.h>)
-+ *
-+ * RH_KABI_FAKE_INCLUDE
-+ * Pretends inclusion of the given file for kABI checksum computations.
-+ * This is used when upstream removed a particular #include but that made
-+ * some structures opaque that were previously visible and is causing kABI
-+ * checker failures.
-+ *
-+ * Example usage:
-+ * #include RH_KABI_FAKE_INCLUDE(<linux/rhashtable.h>)
-+ *
-+ * RH_KABI_RESERVE
-+ * Adds a reserved field to a struct. This is done prior to kABI freeze
-+ * for structs that cannot be expanded later using RH_KABI_EXTEND (for
-+ * example because they are embedded in another struct or because they are
-+ * allocated by drivers or because they use unusual memory layout). The
-+ * size of the reserved field is 'unsigned long' and is assumed to be
-+ * 8 bytes.
-+ *
-+ * The argument is a number unique for the given struct; usually, multiple
-+ * RH_KABI_RESERVE macros are added to a struct with numbers starting from
-+ * one.
-+ *
-+ * Example usage:
-+ * struct foo {
-+ * int a;
-+ * RH_KABI_RESERVE(1)
-+ * RH_KABI_RESERVE(2)
-+ * RH_KABI_RESERVE(3)
-+ * RH_KABI_RESERVE(4)
-+ * };
-+ *
-+ * RH_KABI_USE
-+ * Uses a previously reserved field or multiple fields. The arguments are
-+ * one or more numbers assigned to RH_KABI_RESERVE, followed by a field to
-+ * be put in their place. The compiler ensures that the new field is not
-+ * larger than the reserved area.
-+ *
-+ * Example usage:
-+ * struct foo {
-+ * int a;
-+ * RH_KABI_USE(1, int b)
-+ * RH_KABI_USE(2, 3, int c[3])
-+ * RH_KABI_RESERVE(4)
-+ * };
-+ *
-+ * RH_KABI_USE_SPLIT
-+ * Works the same as RH_KABI_USE but replaces a single reserved field by
-+ * multiple new fields.
-+ *
-+ * RH_KABI_AUX_EMBED
-+ * RH_KABI_AUX_PTR
-+ * Adds an extenstion of a struct in the form of "auxiliary structure".
-+ * This is done prior to kABI freeze for structs that cannot be expanded
-+ * later using RH_KABI_EXTEND. See also RH_KABI_RESERVED, these two
-+ * approaches can (and often are) combined.
-+ *
-+ * To use this for 'struct foo' (the "base structure"), define a new
-+ * structure called 'struct foo_rh'; this new struct is called "auxiliary
-+ * structure". Then add RH_KABI_AUX_EMBED or RH_KABI_AUX_PTR to the end
-+ * of the base structure. The argument is the name of the base structure,
-+ * without the 'struct' keyword.
-+ *
-+ * RH_KABI_AUX_PTR stores a pointer to the aux structure in the base
-+ * struct. The lifecycle of the aux struct needs to be properly taken
-+ * care of.
-+ *
-+ * RH_KABI_AUX_EMBED embeds the aux struct into the base struct. This
-+ * cannot be used when the base struct is itself embedded into another
-+ * struct, allocated in an array, etc.
-+ *
-+ * Both approaches (ptr and embed) work correctly even when the aux struct
-+ * is allocated by modules. To ensure this, the code responsible for
-+ * allocation/assignment of the aux struct has to properly set the size of
-+ * the aux struct; see the RH_KABI_AUX_SET_SIZE and RH_KABI_AUX_INIT_SIZE
-+ * macros.
-+ *
-+ * New fields can be later added to the auxiliary structure, always to its
-+ * end. Note the auxiliary structure cannot be shrunk in size later (i.e.,
-+ * fields cannot be removed, only deprecated). Any code accessing fields
-+ * from the aux struct must guard the access using the RH_KABI_AUX macro.
-+ * The access itself is then done via a '_rh' field in the base struct.
-+ *
-+ * The auxiliary structure is not guaranteed for access by modules unless
-+ * explicitly commented as such in the declaration of the aux struct
-+ * itself or some of its elements.
-+ *
-+ * Example:
-+ *
-+ * struct foo_rh {
-+ * int newly_added;
-+ * };
-+ *
-+ * struct foo {
-+ * bool big_hammer;
-+ * RH_KABI_AUX_PTR(foo)
-+ * };
-+ *
-+ * void use(struct foo *f)
-+ * {
-+ * if (RH_KABI_AUX(f, foo, newly_added))
-+ * f->_rh->newly_added = 123;
-+ * else
-+ * // the field 'newly_added' is not present in the passed
-+ * // struct, fall back to old behavior
-+ * f->big_hammer = true;
-+ * }
-+ *
-+ * static struct foo_rh my_foo_rh {
-+ * .newly_added = 0;
-+ * }
-+ *
-+ * static struct foo my_foo = {
-+ * .big_hammer = false,
-+ * ._rh = &my_foo_rh,
-+ * RH_KABI_AUX_INIT_SIZE(foo)
-+ * };
-+ *
-+ * RH_KABI_USE_AUX_PTR
-+ * Creates an auxiliary structure post kABI freeze. This works by using
-+ * two reserved fields (thus there has to be two reserved fields still
-+ * available) and converting them to RH_KABI_AUX_PTR.
-+ *
-+ * Example:
-+ *
-+ * struct foo_rh {
-+ * };
-+ *
-+ * struct foo {
-+ * int a;
-+ * RH_KABI_RESERVE(1)
-+ * RH_KABI_USE_AUX_PTR(2, 3, foo)
-+ * };
-+ *
-+ * RH_KABI_AUX_SET_SIZE
-+ * RH_KABI_AUX_INIT_SIZE
-+ * Calculates and stores the size of the auxiliary structure.
-+ *
-+ * RH_KABI_AUX_SET_SIZE is for dynamically allocated base structs,
-+ * RH_KABI_AUX_INIT_SIZE is for statically allocated case structs.
-+ *
-+ * These macros must be called from the allocation (RH_KABI_AUX_SET_SIZE)
-+ * or declaration (RH_KABI_AUX_INIT_SIZE) site, regardless of whether
-+ * that happens in the kernel or in a module. Without calling one of
-+ * these macros, the aux struct will appear to have no fields to the
-+ * kernel.
-+ *
-+ * Note: since RH_KABI_AUX_SET_SIZE is intended to be invoked outside of
-+ * a struct definition, it does not add the semicolon and must be
-+ * terminated by semicolon by the caller.
-+ *
-+ * RH_KABI_AUX
-+ * Verifies that the given field exists in the given auxiliary structure.
-+ * This MUST be called prior to accessing that field; failing to do that
-+ * may lead to invalid memory access.
-+ *
-+ * The first argument is a pointer to the base struct, the second argument
-+ * is the name of the base struct (without the 'struct' keyword), the
-+ * third argument is the field name.
-+ *
-+ * This macro works for structs extended by either of RH_KABI_AUX_EMBED,
-+ * RH_KABI_AUX_PTR and RH_KABI_USE_AUX_PTR.
-+ *
-+ * RH_KABI_FORCE_CHANGE
-+ * Force change of the symbol checksum. The argument of the macro is a
-+ * version for cases we need to do this more than once.
-+ *
-+ * This macro does the opposite: it changes the symbol checksum without
-+ * actually changing anything about the exported symbol. It is useful for
-+ * symbols that are not whitelisted, we're changing them in an
-+ * incompatible way and want to prevent 3rd party modules to silently
-+ * corrupt memory. Instead, by changing the symbol checksum, such modules
-+ * won't be loaded by the kernel. This macro should only be used as a
-+ * last resort when all other KABI workarounds have failed.
-+ *
-+ * RH_KABI_EXCLUDE
-+ * !!! WARNING: DANGEROUS, DO NOT USE unless you are aware of all the !!!
-+ * !!! implications. This should be used ONLY EXCEPTIONALLY and only !!!
-+ * !!! under specific circumstances. Very likely, this macro does not !!!
-+ * !!! do what you expect it to do. Note that any usage of this macro !!!
-+ * !!! MUST be paired with a RH_KABI_FORCE_CHANGE annotation of !!!
-+ * !!! a suitable symbol (or an equivalent safeguard) and the commit !!!
-+ * !!! log MUST explain why the chosen solution is appropriate. !!!
-+ *
-+ * Exclude the element from checksum generation. Any such element is
-+ * considered not to be part of the kABI whitelist and may be changed at
-+ * will. Note however that it's the responsibility of the developer
-+ * changing the element to ensure 3rd party drivers using this element
-+ * won't panic, for example by not allowing them to be loaded. That can
-+ * be achieved by changing another, non-whitelisted symbol they use,
-+ * either by nature of the change or by using RH_KABI_FORCE_CHANGE.
-+ *
-+ * Also note that any change to the element must preserve its size. Change
-+ * of the size is not allowed and would constitute a silent kABI breakage.
-+ * Beware that the RH_KABI_EXCLUDE macro does not do any size checks.
-+ *
-+ * RH_KABI_EXCLUDE_WITH_SIZE
-+ * Like RH_KABI_EXCLUDE, this macro excludes the element from
-+ * checksum generation. The same warnings as for RH_KABI_EXCLUDE
-+ * apply: use RH_KABI_FORCE_CHANGE.
-+ *
-+ * This macro is intended to be used for elements embedded inside
-+ * kABI-protected structures (struct, array). In contrast with
-+ * RH_KABI_EXCLUDE, this macro reserves extra space, so that the
-+ * embedded element can grow without changing the offsets of the
-+ * fields that follow. The provided 'size' is the total space to be
-+ * added in longs (i.e. it's 8 * 'size' bytes), including the size
-+ * of the added element. It is automatically checked that the new
-+ * element does not overflow the reserved space, now nor in the
-+ * future. The size is also included in the checksum via the
-+ * reserved space, to ensure that we don't accidentally change it,
-+ * which would change the offsets of the fields that follow.
-+ *
-+ * RH_KABI_BROKEN_INSERT
-+ * RH_KABI_BROKEN_REMOVE
-+ * Insert a field to the middle of a struct / delete a field from a struct.
-+ * Note that this breaks kABI! It can be done only when it's certain that
-+ * no 3rd party driver can validly reach into the struct. A typical
-+ * example is a struct that is: both (a) referenced only through a long
-+ * chain of pointers from another struct that is part of a whitelisted
-+ * symbol and (b) kernel internal only, it should have never been visible
-+ * to genksyms in the first place.
-+ *
-+ * Another example are structs that are explicitly exempt from kABI
-+ * guarantee but we did not have enough foresight to use RH_KABI_EXCLUDE.
-+ * In this case, the warning for RH_KABI_EXCLUDE applies.
-+ *
-+ * A detailed explanation of correctness of every RH_KABI_BROKEN_* macro
-+ * use is especially important.
-+ *
-+ * RH_KABI_BROKEN_INSERT_BLOCK
-+ * RH_KABI_BROKEN_REMOVE_BLOCK
-+ * A version of RH_KABI_BROKEN_INSERT / REMOVE that allows multiple fields
-+ * to be inserted or removed together. All fields need to be terminated
-+ * by ';' inside(!) the macro parameter. The macro itself must not be
-+ * terminated by ';'.
-+ *
-+ * RH_KABI_BROKEN_REPLACE
-+ * Replace a field by a different one without doing any checking. This
-+ * allows replacing a field by another with a different size. Similarly
-+ * to other RH_KABI_BROKEN macros, use of this indicates a kABI breakage.
-+ *
-+ * RH_KABI_BROKEN_INSERT_ENUM
-+ * RH_KABI_BROKEN_REMOVE_ENUM
-+ * Insert a field to the middle of an enumaration type / delete a field from
-+ * an enumaration type. Note that this can break kABI especially if the
-+ * number of enum fields is used in an array within a structure. It can be
-+ * done only when it is certain that no 3rd party driver will use the
-+ * enumeration type or a structure that embeds an array with size determined
-+ * by an enumeration type.
-+ *
-+ * RH_KABI_EXTEND_ENUM
-+ * Adds a new field to an enumeration type. This must always be added to
-+ * the end of the enum. Before using this macro, make sure this is actually
-+ * safe to do.
-+ */
-+
-+#undef linux
-+#define linux linux
-+
-+#ifdef __GENKSYMS__
-+
-+# define RH_KABI_CONST
-+# define RH_KABI_ADD_MODIFIER(_new)
-+# define RH_KABI_EXTEND(_new)
-+# define RH_KABI_FILL_HOLE(_new)
-+# define RH_KABI_FORCE_CHANGE(ver) __attribute__((rh_kabi_change ## ver))
-+# define RH_KABI_RENAME(_orig, _new) _orig
-+# define RH_KABI_HIDE_INCLUDE(_file) <linux/rh_kabi.h>
-+# define RH_KABI_FAKE_INCLUDE(_file) _file
-+# define RH_KABI_BROKEN_INSERT(_new)
-+# define RH_KABI_BROKEN_REMOVE(_orig) _orig;
-+# define RH_KABI_BROKEN_INSERT_BLOCK(_new)
-+# define RH_KABI_BROKEN_REMOVE_BLOCK(_orig) _orig
-+# define RH_KABI_BROKEN_REPLACE(_orig, _new) _orig;
-+# define RH_KABI_BROKEN_INSERT_ENUM(_new)
-+# define RH_KABI_BROKEN_REMOVE_ENUM(_orig) _orig,
-+# define RH_KABI_EXTEND_ENUM(_new)
-+
-+# define _RH_KABI_DEPRECATE(_type, _orig) _type _orig
-+# define _RH_KABI_DEPRECATE_FN(_type, _orig, _args...) _type (*_orig)(_args)
-+# define _RH_KABI_REPLACE(_orig, _new) _orig
-+# define _RH_KABI_EXCLUDE(_elem)
-+
-+# define __RH_KABI_CHECK_SIZE(_item, _size)
-+
-+#else
-+
-+# define RH_KABI_ALIGN_WARNING ". Disable CONFIG_RH_KABI_SIZE_ALIGN_CHECKS if debugging."
-+
-+# define RH_KABI_CONST const
-+# define RH_KABI_ADD_MODIFIER(_new) _new
-+# define RH_KABI_EXTEND(_new) _new;
-+# define RH_KABI_FILL_HOLE(_new) _new;
-+# define RH_KABI_FORCE_CHANGE(ver)
-+# define RH_KABI_RENAME(_orig, _new) _new
-+# define RH_KABI_HIDE_INCLUDE(_file) _file
-+# define RH_KABI_FAKE_INCLUDE(_file) <linux/rh_kabi.h>
-+# define RH_KABI_BROKEN_INSERT(_new) _new;
-+# define RH_KABI_BROKEN_REMOVE(_orig)
-+# define RH_KABI_BROKEN_INSERT_BLOCK(_new) _new
-+# define RH_KABI_BROKEN_REMOVE_BLOCK(_orig)
-+# define RH_KABI_BROKEN_REPLACE(_orig, _new) _new;
-+# define RH_KABI_BROKEN_INSERT_ENUM(_new) _new,
-+# define RH_KABI_BROKEN_REMOVE_ENUM(_orig)
-+# define RH_KABI_EXTEND_ENUM(_new) _new,
-+
-+#if IS_BUILTIN(CONFIG_RH_KABI_SIZE_ALIGN_CHECKS)
-+# define __RH_KABI_CHECK_SIZE_ALIGN(_orig, _new) \
-+ union { \
-+ _Static_assert(sizeof(struct{_new;}) <= sizeof(struct{_orig;}), \
-+ __FILE__ ":" __stringify(__LINE__) ": " __stringify(_new) " is larger than " __stringify(_orig) RH_KABI_ALIGN_WARNING); \
-+ _Static_assert(__alignof__(struct{_new;}) <= __alignof__(struct{_orig;}), \
-+ __FILE__ ":" __stringify(__LINE__) ": " __stringify(_orig) " is not aligned the same as " __stringify(_new) RH_KABI_ALIGN_WARNING); \
-+ }
-+# define __RH_KABI_CHECK_SIZE(_item, _size) \
-+ _Static_assert(sizeof(struct{_item;}) <= _size, \
-+ __FILE__ ":" __stringify(__LINE__) ": " __stringify(_item) " is larger than the reserved size (" __stringify(_size) " bytes)" RH_KABI_ALIGN_WARNING);
-+#else
-+# define __RH_KABI_CHECK_SIZE_ALIGN(_orig, _new)
-+# define __RH_KABI_CHECK_SIZE(_item, _size)
-+#endif
-+
-+#define RH_KABI_UNIQUE_ID __PASTE(rh_kabi_hidden_, __LINE__)
-+
-+# define _RH_KABI_DEPRECATE(_type, _orig) _type rh_reserved_##_orig
-+# define _RH_KABI_DEPRECATE_FN(_type, _orig, _args...) \
-+ _type (* rh_reserved_##_orig)(_args)
-+# define _RH_KABI_REPLACE(_orig, _new) \
-+ union { \
-+ _new; \
-+ struct { \
-+ _orig; \
-+ } RH_KABI_UNIQUE_ID; \
-+ __RH_KABI_CHECK_SIZE_ALIGN(_orig, _new); \
-+ }
-+
-+# define _RH_KABI_EXCLUDE(_elem) _elem
-+
-+#endif /* __GENKSYMS__ */
-+
-+# define RH_KABI_DEPRECATE(_type, _orig) _RH_KABI_DEPRECATE(_type, _orig);
-+# define RH_KABI_DEPRECATE_FN(_type, _orig, _args...) \
-+ _RH_KABI_DEPRECATE_FN(_type, _orig, _args);
-+# define RH_KABI_REPLACE(_orig, _new) _RH_KABI_REPLACE(_orig, _new);
-+
-+#define _RH_KABI_REPLACE1(_new) _new;
-+#define _RH_KABI_REPLACE2(_new, ...) _new; _RH_KABI_REPLACE1(__VA_ARGS__)
-+#define _RH_KABI_REPLACE3(_new, ...) _new; _RH_KABI_REPLACE2(__VA_ARGS__)
-+#define _RH_KABI_REPLACE4(_new, ...) _new; _RH_KABI_REPLACE3(__VA_ARGS__)
-+#define _RH_KABI_REPLACE5(_new, ...) _new; _RH_KABI_REPLACE4(__VA_ARGS__)
-+#define _RH_KABI_REPLACE6(_new, ...) _new; _RH_KABI_REPLACE5(__VA_ARGS__)
-+#define _RH_KABI_REPLACE7(_new, ...) _new; _RH_KABI_REPLACE6(__VA_ARGS__)
-+#define _RH_KABI_REPLACE8(_new, ...) _new; _RH_KABI_REPLACE7(__VA_ARGS__)
-+#define _RH_KABI_REPLACE9(_new, ...) _new; _RH_KABI_REPLACE8(__VA_ARGS__)
-+#define _RH_KABI_REPLACE10(_new, ...) _new; _RH_KABI_REPLACE9(__VA_ARGS__)
-+#define _RH_KABI_REPLACE11(_new, ...) _new; _RH_KABI_REPLACE10(__VA_ARGS__)
-+#define _RH_KABI_REPLACE12(_new, ...) _new; _RH_KABI_REPLACE11(__VA_ARGS__)
-+
-+#define RH_KABI_REPLACE_SPLIT(_orig, ...) _RH_KABI_REPLACE(_orig, \
-+ struct { __PASTE(_RH_KABI_REPLACE, COUNT_ARGS(__VA_ARGS__))(__VA_ARGS__) });
-+
-+# define RH_KABI_RESERVE(n) _RH_KABI_RESERVE(n);
-+
-+#define _RH_KABI_USE1(n, _new) _RH_KABI_RESERVE(n), _new
-+#define _RH_KABI_USE2(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE1(__VA_ARGS__)
-+#define _RH_KABI_USE3(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE2(__VA_ARGS__)
-+#define _RH_KABI_USE4(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE3(__VA_ARGS__)
-+#define _RH_KABI_USE5(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE4(__VA_ARGS__)
-+#define _RH_KABI_USE6(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE5(__VA_ARGS__)
-+#define _RH_KABI_USE7(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE6(__VA_ARGS__)
-+#define _RH_KABI_USE8(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE7(__VA_ARGS__)
-+#define _RH_KABI_USE9(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE8(__VA_ARGS__)
-+#define _RH_KABI_USE10(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE9(__VA_ARGS__)
-+#define _RH_KABI_USE11(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE10(__VA_ARGS__)
-+#define _RH_KABI_USE12(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE11(__VA_ARGS__)
-+
-+#define _RH_KABI_USE(...) _RH_KABI_REPLACE(__VA_ARGS__)
-+#define RH_KABI_USE(n, ...) _RH_KABI_USE(__PASTE(_RH_KABI_USE, COUNT_ARGS(__VA_ARGS__))(n, __VA_ARGS__));
-+
-+# define RH_KABI_USE_SPLIT(n, ...) RH_KABI_REPLACE_SPLIT(_RH_KABI_RESERVE(n), __VA_ARGS__)
-+
-+# define _RH_KABI_RESERVE(n) unsigned long rh_reserved##n
-+
-+#define RH_KABI_EXCLUDE(_elem) _RH_KABI_EXCLUDE(_elem);
-+
-+#define RH_KABI_EXCLUDE_WITH_SIZE(_new, _size) \
-+ union { \
-+ RH_KABI_EXCLUDE(_new) \
-+ unsigned long RH_KABI_UNIQUE_ID[_size]; \
-+ __RH_KABI_CHECK_SIZE(_new, 8 * (_size)) \
-+ };
-+
-+#define RH_KABI_EXTEND_WITH_SIZE(_new, _size) \
-+ RH_KABI_EXTEND(union { \
-+ _new; \
-+ unsigned long RH_KABI_UNIQUE_ID[_size]; \
-+ __RH_KABI_CHECK_SIZE(_new, 8 * (_size)) \
-+ })
-+
-+#define _RH_KABI_AUX_PTR(_struct) \
-+ size_t _struct##_size_rh; \
-+ _RH_KABI_EXCLUDE(struct _struct##_rh *_rh)
-+#define RH_KABI_AUX_PTR(_struct) \
-+ _RH_KABI_AUX_PTR(_struct);
-+
-+#define _RH_KABI_AUX_EMBED(_struct) \
-+ size_t _struct##_size_rh; \
-+ _RH_KABI_EXCLUDE(struct _struct##_rh _rh)
-+#define RH_KABI_AUX_EMBED(_struct) \
-+ _RH_KABI_AUX_EMBED(_struct);
-+
-+#define RH_KABI_USE_AUX_PTR(n1, n2, _struct) \
-+ RH_KABI_USE(n1, n2, \
-+ struct { RH_KABI_AUX_PTR(_struct) })
-+
-+#define RH_KABI_AUX_SET_SIZE(_name, _struct) ({ \
-+ (_name)->_struct##_size_rh = sizeof(struct _struct##_rh); \
-+})
-+
-+#define RH_KABI_AUX_INIT_SIZE(_struct) \
-+ ._struct##_size_rh = sizeof(struct _struct##_rh),
-+
-+#define RH_KABI_AUX(_ptr, _struct, _field) ({ \
-+ size_t __off = offsetof(struct _struct##_rh, _field); \
-+ (_ptr)->_struct##_size_rh > __off ? true : false; \
-+})
-+
-+#endif /* _LINUX_RH_KABI_H */
-diff --git a/include/linux/rh_waived.h b/include/linux/rh_waived.h
-new file mode 100644
-index 000000000000..d62a9e896b5e
---- /dev/null
-+++ b/include/linux/rh_waived.h
-@@ -0,0 +1,19 @@
-+/* SPDX-License-Identifier: GPL-2.0 */
-+/*
-+ * include/linux/rh_waived.h
-+ *
-+ * rh_waived cmdline parameter interface.
-+ *
-+ * Copyright (C) 2024, Red Hat, Inc. Ricardo Robaina <rrobaina@redhat.com>
-+ */
-+#ifndef _RH_WAIVED_H
-+#define _RH_WAIVED_H
-+
-+enum rh_waived_items {
-+ /* RH_WAIVED_ITEMS must always be the last item in the enum */
-+ RH_WAIVED_ITEMS,
-+};
-+
-+bool is_rh_waived(enum rh_waived_items feat);
-+
-+#endif /* _RH_WAIVED_H */
-diff --git a/include/linux/security.h b/include/linux/security.h
-index 153e9043058f..2ee3a8990968 100644
---- a/include/linux/security.h
-+++ b/include/linux/security.h
-@@ -2439,4 +2439,13 @@ static inline void security_initramfs_populated(void)
- }
- #endif /* CONFIG_SECURITY */
-
-+#ifdef CONFIG_SECURITY_LOCKDOWN_LSM
-+extern int security_lock_kernel_down(const char *where, enum lockdown_reason level);
-+#else
-+static inline int security_lock_kernel_down(const char *where, enum lockdown_reason level)
-+{
-+ return 0;
-+}
-+#endif /* CONFIG_SECURITY_LOCKDOWN_LSM */
-+
- #endif /* ! __LINUX_SECURITY_H */
-diff --git a/init/main.c b/init/main.c
-index e363232b428b..27d9d82b7658 100644
---- a/init/main.c
-+++ b/init/main.c
-@@ -1236,8 +1236,10 @@ static bool __init_or_module initcall_blacklisted(initcall_t fn)
- char fn_name[KSYM_SYMBOL_LEN];
- unsigned long addr;
-
-+#ifndef CONFIG_RHEL_DIFFERENCES
- if (list_empty(&blacklisted_initcalls))
- return false;
-+#endif
-
- addr = (unsigned long) dereference_function_descriptor(fn);
- sprint_symbol_no_offset(fn_name, addr);
-@@ -1248,6 +1250,9 @@ static bool __init_or_module initcall_blacklisted(initcall_t fn)
- */
- strreplace(fn_name, ' ', '\0');
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ init_rh_check_status(fn_name);
-+#endif
- list_for_each_entry(entry, &blacklisted_initcalls, next) {
- if (!strcmp(fn_name, entry->buf)) {
- pr_debug("initcall %s blacklisted\n", fn_name);
-diff --git a/kernel/Makefile b/kernel/Makefile
-index 1e1a31673577..60af4f6c2316 100644
---- a/kernel/Makefile
-+++ b/kernel/Makefile
-@@ -12,6 +12,8 @@ obj-y = fork.o exec_domain.o exec_state.o panic.o \
- notifier.o ksysfs.o cred.o reboot.o \
- async.o range.o smpboot.o ucount.o regset.o ksyms_common.o
-
-+obj-$(CONFIG_RHEL_DIFFERENCES) += rh_messages.o rh_flags.o rh_waived.o
-+obj-$(CONFIG_USERMODE_DRIVER) += usermode_driver.o
- obj-$(CONFIG_MULTIUSER) += groups.o
- obj-$(CONFIG_VHOST_TASK) += vhost_task.o
-
-diff --git a/kernel/bpf/core.c b/kernel/bpf/core.c
-index 6e19a030da6f..840338c51e6c 100644
---- a/kernel/bpf/core.c
-+++ b/kernel/bpf/core.c
-@@ -547,7 +547,12 @@ void bpf_prog_kallsyms_del_all(struct bpf_prog *fp)
- /* All BPF JIT sysctl knobs here. */
- int bpf_jit_enable __read_mostly = IS_BUILTIN(CONFIG_BPF_JIT_DEFAULT_ON);
- int bpf_jit_kallsyms __read_mostly = IS_BUILTIN(CONFIG_BPF_JIT_DEFAULT_ON);
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+/* RHEL-only: set it to 1 by default */
-+int bpf_jit_harden __read_mostly = 1;
-+#else
- int bpf_jit_harden __read_mostly;
-+#endif /* CONFIG_RHEL_DIFFERENCES */
- long bpf_jit_limit __read_mostly;
- long bpf_jit_limit_max __read_mostly;
-
-diff --git a/kernel/bpf/syscall.c b/kernel/bpf/syscall.c
-index 6db306d23b47..a758feebfe03 100644
---- a/kernel/bpf/syscall.c
-+++ b/kernel/bpf/syscall.c
-@@ -28,6 +28,7 @@
- #include <linux/ctype.h>
- #include <linux/nospec.h>
- #include <linux/audit.h>
-+#include <linux/init.h>
- #include <uapi/linux/btf.h>
- #include <linux/pgtable.h>
- #include <linux/bpf_lsm.h>
-@@ -66,6 +67,23 @@ static DEFINE_SPINLOCK(map_idr_lock);
- static DEFINE_IDR(link_idr);
- static DEFINE_SPINLOCK(link_idr_lock);
-
-+static int __init unprivileged_bpf_setup(char *str)
-+{
-+ unsigned long disabled;
-+ if (!kstrtoul(str, 0, &disabled))
-+ sysctl_unprivileged_bpf_disabled = !!disabled;
-+
-+ if (!sysctl_unprivileged_bpf_disabled) {
-+ pr_warn("Unprivileged BPF has been enabled "
-+ "(unprivileged_bpf_disabled=0 has been supplied "
-+ "in boot parameters), tainting the kernel");
-+ add_taint(TAINT_UNPRIVILEGED_BPF, LOCKDEP_STILL_OK);
-+ }
-+
-+ return 1;
-+}
-+__setup("unprivileged_bpf_disabled=", unprivileged_bpf_setup);
-+
- int sysctl_unprivileged_bpf_disabled __read_mostly =
- IS_BUILTIN(CONFIG_BPF_UNPRIV_DEFAULT_OFF) ? 2 : 0;
-
-@@ -6754,6 +6772,11 @@ static int bpf_unpriv_handler(const struct ctl_table *table, int write,
- if (write && !ret) {
- if (locked_state && unpriv_enable != 1)
- return -EPERM;
-+ if (!unpriv_enable) {
-+ pr_warn("Unprivileged BPF has been enabled, "
-+ "tainting the kernel");
-+ add_taint(TAINT_UNPRIVILEGED_BPF, LOCKDEP_STILL_OK);
-+ }
- *(int *)table->data = unpriv_enable;
- }
-
-diff --git a/kernel/module/main.c b/kernel/module/main.c
-index 46dd8d25a605..e82b2b13f588 100644
---- a/kernel/module/main.c
-+++ b/kernel/module/main.c
-@@ -66,6 +66,8 @@
- #define CREATE_TRACE_POINTS
- #include <trace/events/module.h>
-
-+#include <linux/rh_flags.h>
-+
- /*
- * Mutex protects:
- * 1) List of modules (also safely readable within RCU read section),
-@@ -604,6 +606,7 @@ static const struct module_attribute modinfo_##field = { \
-
- MODINFO_ATTR(version);
- MODINFO_ATTR(srcversion);
-+MODINFO_ATTR(rhelversion);
-
- static void setup_modinfo_import_ns(struct module *mod, const char *s)
- {
-@@ -1086,6 +1089,7 @@ const struct module_attribute *const modinfo_attrs[] = {
- &module_uevent,
- &modinfo_version,
- &modinfo_srcversion,
-+ &modinfo_rhelversion,
- &modinfo_import_ns,
- &modinfo_initstate,
- &modinfo_coresize,
-@@ -3396,6 +3400,11 @@ static int early_mod_check(struct load_info *info, int flags)
- return -EPERM;
- }
-
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ if (get_modinfo(info, "intree"))
-+ module_rh_check_status(info->name);
-+#endif
-+
- err = rewrite_section_headers(info, flags);
- if (err)
- return err;
-@@ -3974,6 +3983,10 @@ void print_modules(void)
- pr_cont(" [last unloaded: %s%s]", last_unloaded_module.name,
- last_unloaded_module.taints);
- pr_cont("\n");
-+
-+#ifdef CONFIG_RHEL_DIFFERENCES
-+ rh_print_flags();
-+#endif
- }
-
- #ifdef CONFIG_MODULE_DEBUGFS
-diff --git a/kernel/module/signing.c b/kernel/module/signing.c
-index 590ba29c85ab..02153d857531 100644
---- a/kernel/module/signing.c
-+++ b/kernel/module/signing.c
-@@ -61,10 +61,17 @@ int mod_verify_sig(const void *mod, struct load_info *info)
- modlen -= sig_len + sizeof(ms);
- info->len = modlen;
-
-- return verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
-+ ret = verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
- VERIFY_USE_SECONDARY_KEYRING,
- VERIFYING_MODULE_SIGNATURE,
- NULL, NULL);
-+ if (ret == -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) {
-+ ret = verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
-+ VERIFY_USE_PLATFORM_KEYRING,
-+ VERIFYING_MODULE_SIGNATURE,
-+ NULL, NULL);
-+ }
-+ return ret;
- }
-
- int module_sig_check(struct load_info *info, int flags)
-diff --git a/kernel/panic.c b/kernel/panic.c
-index 213725b612aa..a823d01f1f05 100644
---- a/kernel/panic.c
-+++ b/kernel/panic.c
-@@ -826,6 +826,18 @@ const struct taint_flag taint_flags[TAINT_FLAGS_COUNT] = {
- TAINT_FLAG(RANDSTRUCT, 'T', ' '),
- TAINT_FLAG(TEST, 'N', ' '),
- TAINT_FLAG(FWCTL, 'J', ' '),
-+ TAINT_FLAG(20, '?', '-'),
-+ TAINT_FLAG(21, '?', '-'),
-+ TAINT_FLAG(22, '?', '-'),
-+ TAINT_FLAG(23, '?', '-'),
-+ TAINT_FLAG(24, '?', '-'),
-+ TAINT_FLAG(25, '?', '-'),
-+ TAINT_FLAG(PARTNER_SUPPORTED, 'p', ' '),
-+ TAINT_FLAG(SUPPORT_REMOVED, 'h', ' '),
-+ TAINT_FLAG(RESERVED28, '?', '-'),
-+ TAINT_FLAG(RESERVED29, '?', '-'),
-+ TAINT_FLAG(RESERVED30, '?', '-'),
-+ TAINT_FLAG(UNPRIVILEGED_BPF, 'u', ' '),
- };
-
- #undef TAINT_FLAG
-diff --git a/kernel/rh_flags.c b/kernel/rh_flags.c
-new file mode 100644
-index 000000000000..10d26958f840
---- /dev/null
-+++ b/kernel/rh_flags.c
-@@ -0,0 +1,115 @@
-+#include <linux/kernel.h>
-+#include <linux/list.h>
-+#include <linux/proc_fs.h>
-+#include <linux/seq_file.h>
-+#include <linux/slab.h>
-+#include <linux/spinlock.h>
-+#include <linux/rh_flags.h>
-+
-+#define RH_FLAG_NAME_LEN 32
-+#define MAX_RH_FLAGS 128
-+#define MAX_RH_FLAG_NAME_LEN (MAX_RH_FLAGS * RH_FLAG_NAME_LEN)
-+
-+struct rh_flag {
-+ struct list_head list;
-+ char name[RH_FLAG_NAME_LEN];
-+};
-+
-+static LIST_HEAD(rh_flag_list);
-+static DEFINE_SPINLOCK(rh_flag_lock);
-+
-+bool __rh_add_flag(const char *flag_name)
-+{
-+ struct rh_flag *feat, *iter;
-+
-+ BUG_ON(in_interrupt());
-+ feat = kzalloc(sizeof(*feat), GFP_ATOMIC);
-+ if (WARN(!feat, "Adding Red Hat flag %s.\n", flag_name))
-+ return false;
-+ strscpy(feat->name, flag_name, RH_FLAG_NAME_LEN);
-+
-+ spin_lock(&rh_flag_lock);
-+ list_for_each_entry_rcu(iter, &rh_flag_list, list) {
-+ if (!strcmp(iter->name, flag_name)) {
-+ kfree(feat);
-+ feat = NULL;
-+ break;
-+ }
-+ }
-+ if (feat)
-+ list_add_rcu(&feat->list, &rh_flag_list);
-+ spin_unlock(&rh_flag_lock);
-+
-+ if (feat)
-+ pr_info("Adding Red Hat flag %s.\n", flag_name);
-+ return true;
-+}
-+EXPORT_SYMBOL(__rh_add_flag);
-+
-+void rh_print_flags(void)
-+{
-+ struct rh_flag *feat;
-+
-+ /*
-+ * This function cannot do any locking, we're oopsing. Traversing
-+ * rh_flag_list is okay, though, even without the rcu_read_lock
-+ * taken: we never delete from that list and thus don't need the
-+ * delayed free. All we need are the smp barriers invoked by the rcu
-+ * list manipulation routines.
-+ */
-+ if (list_empty(&rh_flag_list))
-+ return;
-+ printk(KERN_DEFAULT "Red Hat flags:");
-+ list_for_each_entry_lockless(feat, &rh_flag_list, list) {
-+ pr_cont(" %s", feat->name);
-+ }
-+ pr_cont("\n");
-+}
-+EXPORT_SYMBOL(rh_print_flags);
-+
-+#ifdef CONFIG_SYSCTL
-+static int rh_flags_show(const struct ctl_table *ctl, int write,
-+ void __user *buffer, size_t *lenp,
-+ loff_t *ppos)
-+{
-+ struct ctl_table tbl = { .maxlen = MAX_RH_FLAG_NAME_LEN, };
-+ struct rh_flag *feat;
-+ size_t offs = 0;
-+ int ret;
-+
-+ tbl.data = kmalloc(tbl.maxlen, GFP_KERNEL);
-+ if (!tbl.data)
-+ return -ENOMEM;
-+ ((char *)tbl.data)[0] = '\0';
-+
-+ rcu_read_lock();
-+ list_for_each_entry_rcu(feat, &rh_flag_list, list) {
-+ offs += scnprintf(tbl.data + offs, tbl.maxlen - offs, "%s%s",
-+ offs == 0 ? "" : " ", feat->name);
-+ }
-+ rcu_read_unlock();
-+
-+ ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
-+ kfree(tbl.data);
-+ return ret;
-+}
-+
-+static struct ctl_table rh_flags_table[] = {
-+ {
-+ .procname = "rh_flags",
-+ .data = &rh_flag_list,
-+ .maxlen = MAX_RH_FLAG_NAME_LEN,
-+ .mode = 0444,
-+ .proc_handler = rh_flags_show,
-+ },
-+};
-+#endif
-+
-+static __init int rh_flags_init(void)
-+{
-+#ifdef CONFIG_SYSCTL
-+ register_sysctl_init("kernel", rh_flags_table);
-+#endif
-+ return 0;
-+}
-+subsys_initcall(rh_flags_init);
-diff --git a/kernel/rh_messages.c b/kernel/rh_messages.c
-new file mode 100644
-index 000000000000..bb69e8965748
---- /dev/null
-+++ b/kernel/rh_messages.c
-@@ -0,0 +1,414 @@
-+/*
-+ * The following functions are used by Red Hat to indicate to users that
-+ * hardware and drivers are unsupported, or have limited support in RHEL major
-+ * and minor releases. These functions output loud warning messages to the end
-+ * user and should be USED WITH CAUTION.
-+ *
-+ * Any use of these functions _MUST_ be documented in the RHEL Release Notes,
-+ * and have approval of management.
-+ *
-+ * Generally, the process of disabling a driver or device in RHEL requires the
-+ * driver or device to be marked as 'deprecated' in all existing releases, and
-+ * then either 'unmaintained' or 'disabled' in a future release.
-+ *
-+ * In general, deprecated and unmaintained drivers continue to receive security
-+ * related fixes until they are disabled.
-+ */
-+
-+#include <linux/kernel.h>
-+#include <linux/module.h>
-+#include <linux/pci.h>
-+#include "rh_messages.h"
-+
-+/**
-+ * mark_hardware_unmaintained() - Mark hardware as unmaintained.
-+ * @driver_name: driver name
-+ * @fmt: format for device description
-+ * @...: args for device description
-+ *
-+ * Called to notify users that the device will no longer be tested on a routine
-+ * basis and driver code associated with this device is no longer being updated.
-+ * Red Hat may, at their own discretion, fix security-related and critical
-+ * issues. Support for this device will be disabled in a future major release
-+ * and users deploying this device should plan to replace the device in
-+ * production systems.
-+ *
-+ * This function should be used when the driver's usage can be tied to a
-+ * specific hardware device. For example, a network device driver loading on a
-+ * specific device that is no longer maintained by the manufacturer.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+void __maybe_unused mark_hardware_unmaintained(const char *driver_name, char *fmt, ...)
-+{
-+ char device_description[DEV_DESC_LEN];
-+ va_list args;
-+
-+ va_start(args, fmt);
-+ vsnprintf(device_description, DEV_DESC_LEN, fmt, args);
-+ pr_crit(RH_UNMAINT_HW,
-+ driver_name, device_description);
-+ va_end(args);
-+}
-+EXPORT_SYMBOL(mark_hardware_unmaintained);
-+
-+/**
-+ * mark_hardware_deprecated() - Mark hardware as deprecated.
-+ * @driver_name: driver name
-+ * @fmt: format for device description
-+ * @...: args for device description
-+ *
-+ * Called to notify users that support for the device is planned to be
-+ * unmaintained in a future major release, and will eventually be disabled in a
-+ * future major release. This device should not be used in new production
-+ * environments and users should replace the device in production systems.
-+ *
-+ * This function should be used when the driver's usage can be tied to a
-+ * specific hardware device. For example, a network device driver loading on a
-+ * specific device that is no longer maintained by the manufacturer.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+void __maybe_unused mark_hardware_deprecated(const char *driver_name, char *fmt, ...)
-+{
-+ char device_description[DEV_DESC_LEN];
-+ va_list args;
-+
-+ va_start(args, fmt);
-+ vsnprintf(device_description, DEV_DESC_LEN, fmt, args);
-+ pr_crit(RH_DEPRECATED_HW,
-+ driver_name, device_description);
-+ va_end(args);
-+}
-+
-+/**
-+ * mark_hardware_disabled() - Mark a driver as removed.
-+ * @driver_name: driver name
-+ * @fmt: format for device description
-+ * @...: args for device description
-+ *
-+ * Called to notify users that a device's support has been completely disabled
-+ * and no future support updates will occur. This device cannot be used in new
-+ * production environments, and users must replace the device in production
-+ * systems.
-+ *
-+ * This function should be used when the driver's usage can be tied to a
-+ * specific hardware device. For example, a network device driver loading on a
-+ * specific device that is no longer maintained by the manufacturer.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+static void __maybe_unused mark_hardware_disabled(const char *driver_name, char *fmt, ...)
-+{
-+ char device_description[DEV_DESC_LEN];
-+ va_list args;
-+
-+ va_start(args, fmt);
-+ vsnprintf(device_description, DEV_DESC_LEN, fmt, args);
-+ pr_crit(RH_DISABLED_HW,
-+ driver_name, device_description);
-+ va_end(args);
-+}
-+
-+#ifdef CONFIG_PCI
-+/**
-+ * pci_hw_deprecated() - Mark a PCI device deprecated.
-+ * @dev: the PCI device structure to match against
-+ *
-+ * Called to check if this @dev is in the list of deprecated devices.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+static void __maybe_unused pci_hw_deprecated(struct pci_dev *dev)
-+{
-+ const struct pci_device_id *ret = pci_match_id(rh_deprecated_pci_devices, dev);
-+
-+ if (!ret)
-+ return;
-+
-+ mark_hardware_deprecated(dev_driver_string(&dev->dev), "%04X:%04X @ %s",
-+ dev->device, dev->vendor, pci_name(dev));
-+}
-+
-+/**
-+ * pci_hw_unmaintained() - Mark a PCI device unmaintained.
-+ * @dev: the PCI device structure to match against
-+ *
-+ * Called to check if this @dev is in the list of unmaintained devices.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+static void pci_hw_unmaintained(struct pci_dev *dev)
-+{
-+ const struct pci_device_id *ret = pci_match_id(rh_unmaintained_pci_devices, dev);
-+
-+ if (!ret)
-+ return;
-+
-+ mark_hardware_unmaintained(dev_driver_string(&dev->dev), "%04X:%04X @ %s",
-+ dev->device, dev->vendor, pci_name(dev));
-+}
-+
-+/**
-+ * pci_hw_disabled() - Mark a PCI device disabled.
-+ * @dev: the PCI device structure to match against
-+ *
-+ * Called to check if this @dev is in the list of disabled devices.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+static bool __maybe_unused pci_hw_disabled(struct pci_dev *dev)
-+{
-+ const struct pci_device_id *ret = pci_match_id(rh_disabled_pci_devices, dev);
-+
-+ if (!ret)
-+ return false;
-+
-+ mark_hardware_disabled(dev_driver_string(&dev->dev), "%04X:%04X @ %s",
-+ dev->device, dev->vendor, pci_name(dev));
-+ return true;
-+}
-+#endif
-+
-+/**
-+ * driver_unmaintained() - check to see if a driver is unmaintained
-+ * @module_name: module name
-+ *
-+ * Called to notify users that a driver will no longer be tested on a routine
-+ * basis and the driver code is no longer being updated. Red Hat may fix
-+ * security-related and critical issues. Support for this driver will be
-+ * disabled in a future major release, and users should replace any affected
-+ * devices in production systems.
-+ *
-+ * This function should be used when a driver's usage cannot be tied to a
-+ * specific hardware device. For example, a network bonding driver or a higher
-+ * level storage layer driver that is no longer maintained upstream.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+static void __maybe_unused driver_unmaintained(const char* module_name)
-+{
-+ int i = 0;
-+
-+ while (rh_unmaintained_drivers[i]) {
-+ if (strcmp(rh_unmaintained_drivers[i], module_name) == 0) {
-+ pr_crit(RH_UNMAINT_DR, module_name);
-+ return;
-+ }
-+ i++;
-+ }
-+}
-+
-+/**
-+ * driver_deprecated() - check to see if a driver is deprecated
-+ * @driver_name: module name
-+ *
-+ * Called to notify users that support for this driver is planned to be
-+ * unmaintained in a future major release, and will eventually be disabled in a
-+ * future major release. This driver should not be used in new production
-+ * environments and users should replace any affected devices in production
-+ * systems.
-+ *
-+ * This function should be used when a driver's usage cannot be tied to a
-+ * specific hardware device. For example, a network bonding driver or a higher
-+ * level storage layer driver that is no longer maintained upstream.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+static void __maybe_unused driver_deprecated(const char* module_name)
-+{
-+ int i = 0;
-+
-+ while (rh_deprecated_drivers[i]) {
-+ if (strcmp(rh_deprecated_drivers[i], module_name) == 0) {
-+ pr_crit(RH_DEPRECATED_DR, module_name);
-+ return;
-+ }
-+ i++;
-+ }
-+}
-+
-+/* There is no driver_disabled() function. Disabled drivers are configured off ;). */
-+
-+/**
-+ * init_fn_unmaintained - check to see if a built-in driver is unmaintained.
-+ * @fn_name: module's module_init function name
-+ *
-+ * Called to notify users that a built-in driver will no longer be tested on a routine
-+ * basis and the built-in driver code is no longer being updated. Red Hat may fix
-+ * security-related and critical issues. Support for this built-in driver will be
-+ * disabled in a future major release, and users should replace any affected
-+ * devices in production systems.
-+ *
-+ * This function should be used when a built-in driver's usage cannot be tied to a
-+ * specific hardware device. For example, a network bonding driver or a higher
-+ * level storage layer driver that is no longer maintained upstream.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+
-+static void __maybe_unused init_fn_unmaintained(char* fn_name)
-+{
-+ int i = 0;
-+
-+ while (rh_unmaintained_init_fns[i]) {
-+ if (strcmp(rh_unmaintained_init_fns[i], fn_name) == 0) {
-+ pr_crit(RH_UNMAINT_DR, fn_name);
-+ return;
-+ }
-+ i++;
-+ }
-+}
-+
-+/**
-+ * init_fn_deprecated() - check to see if a built-in driver is deprecated
-+ * @fn_name: module's module_init function name
-+ *
-+ * Called to notify users that support for this built-in driver is planned to be
-+ * unmaintained in a future major release, and will eventually be disabled in a
-+ * future major release. This driver should not be used in new production
-+ * environments and users should replace any affected devices in production
-+ * systems.
-+ *
-+ * This function should be used when a built-in driver's usage cannot be tied to a
-+ * specific hardware device. For example, a network bonding driver or a higher
-+ * level storage layer driver that is no longer maintained upstream.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+static void __maybe_unused init_fn_deprecated(char* fn_name)
-+{
-+ int i = 0;
-+
-+ while (rh_deprecated_init_fns[i]) {
-+ if (strcmp(rh_deprecated_init_fns[i], fn_name) == 0) {
-+ pr_crit(RH_DEPRECATED_DR, fn_name);
-+ return;
-+ }
-+ i++;
-+ }
-+}
-+
-+/**
-+ * mark_tech_preview() - Mark driver or kernel subsystem as 'Tech Preview'
-+ * @msg: Driver or kernel subsystem name
-+ *
-+ * Called to minimize the support status of a new driver. This does TAINT the
-+ * kernel. Calling this function indicates that the driver or subsystem has
-+ * had limited testing and is not marked for full support within this RHEL
-+ * minor release. The next RHEL minor release may contain full support for
-+ * this driver. Red Hat does not guarantee that bugs reported against this
-+ * driver or subsystem will be resolved.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+void __maybe_unused mark_tech_preview(const char *msg, struct module *mod)
-+{
-+ const char *str = NULL;
-+
-+ if (msg)
-+ str = msg;
-+#ifdef CONFIG_MODULES
-+ else if (mod)
-+ str = mod->name;
-+#endif
-+
-+ pr_warn(RH_TECH_PREVIEW, (str ? str : "kernel"));
-+ add_taint(TAINT_AUX, LOCKDEP_STILL_OK);
-+#ifdef CONFIG_MODULES
-+ if (mod)
-+ mod->taints |= (1U << TAINT_AUX);
-+#endif
-+}
-+EXPORT_SYMBOL(mark_tech_preview);
-+
-+/**
-+ * mark_partner_supported() - Mark driver or kernel subsystem as 'Partner Supported'
-+ * @msg: Driver or kernel subsystem name
-+ *
-+ * Called to minimize the support status of a new driver. This does TAINT the
-+ * kernel. Calling this function indicates that the driver or subsystem
-+ * is not supported directly by Red Hat but by a partner engineer.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+void __maybe_unused mark_partner_supported(const char *msg, struct module *mod)
-+{
-+ const char *str = NULL;
-+
-+ if (msg)
-+ str = msg;
-+#ifdef CONFIG_MODULES
-+ else if (mod)
-+ str = mod->name;
-+#endif
-+
-+ pr_warn(RH_PARTNER_SUPPORTED, (str ? str : "kernel"));
-+ add_taint(TAINT_PARTNER_SUPPORTED, LOCKDEP_STILL_OK);
-+#ifdef CONFIG_MODULES
-+ if (mod)
-+ mod->taints |= (1U << TAINT_PARTNER_SUPPORTED);
-+#endif
-+}
-+EXPORT_SYMBOL(mark_partner_supported);
-+
-+/*
-+ *
-+ * Functions called by 'main' kernel code.
-+ *
-+ */
-+
-+#ifdef CONFIG_PCI
-+/**
-+ * pci_rh_check_status - checks the status of a PCI device.
-+ * @pci_dev: PCI device to be examined
-+ *
-+ * This function is called by the PCI driver subsystem to check the status of a
-+ * PCI device.
-+ *
-+ * This function returns true if the PCI device is disabled, and false otherwise.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+bool __maybe_unused pci_rh_check_status(struct pci_dev *pci_dev)
-+{
-+ if (pci_dev->driver->driver.owner != NULL) {
-+ if (!test_bit(TAINT_OOT_MODULE, &pci_dev->driver->driver.owner->taints)) {
-+ pci_hw_unmaintained(pci_dev);
-+ pci_hw_deprecated(pci_dev);
-+ return pci_hw_disabled(pci_dev);
-+ }
-+ }
-+ return false;
-+}
-+#endif
-+
-+/** module_rh_check_status - checks the status of a module.
-+ * @module_name: Name of module to be examined
-+ *
-+ * This function is called by the module loading code to check the status of a
-+ * module.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+void __maybe_unused module_rh_check_status(const char * module_name)
-+{
-+ driver_unmaintained(module_name);
-+ driver_deprecated(module_name);
-+}
-+
-+/**
-+ * init_rh_check_status - checks the status of a built-in module.
-+ * @fn_name: init function of module to be examined
-+ *
-+ * This function is called by the init code to check the status of a built-in module.
-+ * When a module is built-in, the module_init() function is converted into an initcall.
-+ * The initcall is the called during boot with the other system initcalls.
-+ *
-+ * Reserved for Internal Red Hat use only.
-+ */
-+void __maybe_unused init_rh_check_status(char *fn_name)
-+{
-+ init_fn_deprecated(fn_name);
-+ init_fn_unmaintained(fn_name);
-+}
-diff --git a/kernel/rh_messages.h b/kernel/rh_messages.h
-new file mode 100644
-index 000000000000..6c757a2fe4e0
---- /dev/null
-+++ b/kernel/rh_messages.h
-@@ -0,0 +1,334 @@
-+/*
-+ * WARNING: This file is auto-generated by an internal Red Hat script and,
-+ * in general, should not be modified by hand.
-+ * See: https://gitlab.com/redhat/rhel/src/kernel/hardware-removal-support
-+ */
-+
-+/*
-+ * The following tables are used by Red Hat to define what hardware and drivers
-+ * are unsupported, or have limited support in RHEL major and minor releases.
-+ *
-+ * Generally, the process of disabling a driver or device in RHEL requires the
-+ * driver or device to be marked as 'deprecated' in all existing releases, and
-+ * then either 'unmaintained' or 'disabled' in a future release.
-+ *
-+ * In general, deprecated and unmaintained drivers continue to receive security
-+ * related fixes until they are disabled.
-+ */
-+
-+#ifndef __RH_MESSAGES_H
-+#define __RH_MESSAGES_H
-+
-+#include <linux/version.h>
-+#include <linux/pci.h>
-+
-+#define DEV_DESC_LEN 256
-+
-+#define RH_UNMAINT_HW "Warning: Unmaintained Hardware is detected: %s:%s\n"
-+
-+#define RH_UNMAINT_DR "Warning: Unmaintained driver is detected: %s\n"
-+
-+#define RH_DEPRECATED_HW "Warning: Deprecated Hardware is detected: %s:%s " \
-+ "will not be maintained in a future major release " \
-+ "and may be disabled\n"
-+
-+#define RH_DEPRECATED_DR "Warning: Deprecated Driver is detected: %s will " \
-+ "not be maintained in a future major release and " \
-+ "may be disabled\n"
-+
-+#define RH_DISABLED_HW "Warning: Disabled Hardware is detected: %s:%s is " \
-+ "no longer enabled in this release.\n"
-+
-+#define RH_TECH_PREVIEW "TECH PREVIEW: %s may not be fully supported.\n" \
-+ "Please review provided documentation for " \
-+ "limitations.\n"
-+
-+#define RH_PARTNER_SUPPORTED "Warning: %s is a Partner supported GPL " \
-+ "module and not supported directly by Red Hat.\n"
-+
-+static const char *rh_deprecated_drivers[] = {
-+ 0 /* Terminating entry */
-+};
-+
-+static const char *rh_deprecated_init_fns[] = {
-+ 0 /* Terminating entry */
-+};
-+
-+static const char *rh_unmaintained_drivers[] = {
-+ "aacraid",
-+ "af_key",
-+ "ahci_seattle",
-+ "ahci_xgene",
-+ "arp_tables",
-+ "bnx2",
-+ "bnx2fc",
-+ "bnx2i",
-+ "bnx2x",
-+ "cnic",
-+ "dl2k",
-+ "e1000",
-+ "ebtables",
-+ "hdlc_fr",
-+ "hisi_sas_main",
-+ "hpsa",
-+ "ip6_tables",
-+ "ip_set",
-+ "ip_tables",
-+ "mptbase",
-+ "mptsas",
-+ "mptscsih",
-+ "mptspi",
-+ "myri10ge",
-+ "netxen_nic",
-+ "nft_compat",
-+ "nicpf",
-+ "nicvf",
-+ "nvmet_fc",
-+ "nvmet_tcp",
-+ "team",
-+ 0 /* Terminating entry */
-+};
-+
-+static const char *rh_unmaintained_init_fns[] = {
-+ "bnx2_pci_driver_init",
-+ "e1000_init_module",
-+ "rio_driver_init",
-+ "hpsa_init",
-+ "fusion_init",
-+ "mptsas_init",
-+ "fusion_init",
-+ "mptspi_init",
-+ "myri10ge_init_module",
-+ "netxen_init_module",
-+ "hdlc_fr_init",
-+ "nvmet_fc_init_module",
-+ "nvmet_tcp_init",
-+ "team_module_init",
-+ "ebtables_init",
-+ "arp_tables_init",
-+ "ip_tables_init",
-+ "ip6_tables_init",
-+ "ip_set_init",
-+ "nft_compat_module_init",
-+ "nicvf_init_module",
-+ "nic_init_module",
-+ "ipsec_pfkey_init",
-+ "aac_init",
-+ "cnic_init",
-+ "bnx2x_init",
-+ "bnx2fc_mod_init",
-+ "bnx2i_mod_init",
-+ "ahci_seattle_probe",
-+ "xgene_ahci_probe",
-+ "hisi_sas_init",
-+ 0 /* Terminating entry */
-+};
-+
-+static const struct pci_device_id rh_deprecated_pci_devices[] = {
-+ {0} /* Terminating entry */
-+};
-+
-+static const struct pci_device_id rh_disabled_pci_devices[] = {
-+ { 0x1011, 0x0046, 0x103c, 0x10c2 },
-+ { 0x1011, 0x0046, 0x9005, 0x0364 },
-+ { 0x1011, 0x0046, 0x9005, 0x0365 },
-+ { 0x1011, 0x0046, 0x9005, 0x1364 },
-+ { 0x1028, 0x0001, 0x1028, 0x0001 },
-+ { 0x1028, 0x0002, 0x1028, 0x0002 },
-+ { 0x1028, 0x0002, 0x1028, 0x00d1 },
-+ { 0x1028, 0x0002, 0x1028, 0x00d9 },
-+ { 0x1028, 0x0003, 0x1028, 0x0003 },
-+ { 0x1028, 0x0004, 0x1028, 0x00d0 },
-+ { 0x1028, 0x000a, 0x1028, 0x0106 },
-+ { 0x1028, 0x000a, 0x1028, 0x011b },
-+ { 0x1028, 0x000a, 0x1028, 0x0121 },
-+ { 0x9005, 0x0200, 0x9005, 0x0200 },
-+ { 0x9005, 0x0283, 0x9005, 0x0283 },
-+ { 0x9005, 0x0284, 0x9005, 0x0284 },
-+ { 0x9005, 0x0285, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x9005, 0x0285, 0x1014, 0x02F2 },
-+ { 0x9005, 0x0285, 0x1014, 0x0312 },
-+ { 0x9005, 0x0285, 0x1028, PCI_ANY_ID },
-+ { 0x9005, 0x0285, 0x1028, 0x0287 },
-+ { 0x9005, 0x0285, 0x1028, 0x0291 },
-+ { 0x9005, 0x0285, 0x103C, 0x3227 },
-+ { 0x9005, 0x0285, 0x17aa, PCI_ANY_ID },
-+ { 0x9005, 0x0285, 0x17aa, 0x0286 },
-+ { 0x9005, 0x0285, 0x17aa, 0x0287 },
-+ { 0x9005, 0x0285, 0x9005, 0x0285 },
-+ { 0x9005, 0x0285, 0x9005, 0x0286 },
-+ { 0x9005, 0x0285, 0x9005, 0x0287 },
-+ { 0x9005, 0x0285, 0x9005, 0x0288 },
-+ { 0x9005, 0x0285, 0x9005, 0x0289 },
-+ { 0x9005, 0x0285, 0x9005, 0x028a },
-+ { 0x9005, 0x0285, 0x9005, 0x028b },
-+ { 0x9005, 0x0285, 0x9005, 0x028e },
-+ { 0x9005, 0x0285, 0x9005, 0x028f },
-+ { 0x9005, 0x0285, 0x9005, 0x0290 },
-+ { 0x9005, 0x0285, 0x9005, 0x0291 },
-+ { 0x9005, 0x0285, 0x9005, 0x0292 },
-+ { 0x9005, 0x0285, 0x9005, 0x0293 },
-+ { 0x9005, 0x0285, 0x9005, 0x0294 },
-+ { 0x9005, 0x0285, 0x9005, 0x0296 },
-+ { 0x9005, 0x0285, 0x9005, 0x0297 },
-+ { 0x9005, 0x0285, 0x9005, 0x0298 },
-+ { 0x9005, 0x0285, 0x9005, 0x0299 },
-+ { 0x9005, 0x0285, 0x9005, 0x029a },
-+ { 0x9005, 0x0285, 0x9005, 0x02a4 },
-+ { 0x9005, 0x0285, 0x9005, 0x02a5 },
-+ { 0x9005, 0x0286, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x9005, 0x0286, 0x1014, 0x9540 },
-+ { 0x9005, 0x0286, 0x1014, 0x9580 },
-+ { 0x9005, 0x0286, 0x9005, 0x028c },
-+ { 0x9005, 0x0286, 0x9005, 0x028d },
-+ { 0x9005, 0x0286, 0x9005, 0x029b },
-+ { 0x9005, 0x0286, 0x9005, 0x029c },
-+ { 0x9005, 0x0286, 0x9005, 0x029d },
-+ { 0x9005, 0x0286, 0x9005, 0x029e },
-+ { 0x9005, 0x0286, 0x9005, 0x029f },
-+ { 0x9005, 0x0286, 0x9005, 0x02a0 },
-+ { 0x9005, 0x0286, 0x9005, 0x02a1 },
-+ { 0x9005, 0x0286, 0x9005, 0x02a2 },
-+ { 0x9005, 0x0286, 0x9005, 0x02a3 },
-+ { 0x9005, 0x0286, 0x9005, 0x02a6 },
-+ { 0x9005, 0x0286, 0x9005, 0x0800 },
-+ { 0x9005, 0x0287, 0x9005, 0x0800 },
-+ { 0x9005, 0x0288, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x0222, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x0712, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x212, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x702, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x703, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x0700, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x0211, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x0710, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x0221, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0xe220, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0x1ae5, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xe100, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xe131, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xe180, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xe260, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf095, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf098, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0a1, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0a5, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0d1, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0d5, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0e1, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0e5, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0f5, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0f6, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf0f7, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf180, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf700, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf800, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf900, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf980, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfa00, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfb00, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfc00, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfc10, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfc20, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfc50, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfd00, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfd11, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfd12, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfe00, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfe05, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfe11, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfe12, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x0704, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x19a2, 0x0714, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xe208, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xe268, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0060, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0078, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x007C, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0411, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0413, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1028, 0x0015, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1002, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x6340, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x634A, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x6354, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x6368, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x6372, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x6732, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x673C, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x6746, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x6750, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x675A, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x6764, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x676E, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1003, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1004, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1005, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1006, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1007, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1008, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1009, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x100a, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x100b, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x100c, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x100d, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x100e, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x100f, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1010, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x15B3, 0x1027, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0064, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0065, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0070, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0072, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0074, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0076, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0077, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x007E, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x2422, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x2432, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x5422, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x5432, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x8001, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x8021, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x8044, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x8432, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0xF000, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x8022, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x8032, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x8042, PCI_ANY_ID, PCI_ANY_ID },
-+ {0} /* Terminating entry */
-+};
-+
-+static const struct pci_device_id rh_unmaintained_pci_devices[] = {
-+ { 0x10df, 0xe220, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0x0724, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xe200, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf011, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf015, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xf100, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x10df, 0xfc40, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x005b, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0071, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0073, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0079, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x006E, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0080, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0081, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0082, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0083, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0084, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0085, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0086, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1000, 0x0087, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x177d, 0xa01e, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x177d, 0xa034, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x177d, 0x0011, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x2031, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x2532, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1077, 0x8031, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1924, 0x0803, PCI_ANY_ID, PCI_ANY_ID },
-+ { 0x1924, 0x0813, PCI_ANY_ID, PCI_ANY_ID },
-+ {0} /* Terminating entry */
-+};
-+
-+#endif /* __RH_MESSAGES_H */
-diff --git a/kernel/rh_waived.c b/kernel/rh_waived.c
-new file mode 100644
-index 000000000000..20966f7c7277
---- /dev/null
-+++ b/kernel/rh_waived.c
-@@ -0,0 +1,147 @@
-+/* SPDX-License-Identifier: GPL-2.0 */
-+/*
-+ * kernel/rh_waived.c
-+ *
-+ * rh_waived cmdline parameter support.
-+ *
-+ * Copyright (C) 2024, Red Hat, Inc. Ricardo Robaina <rrobaina@redhat.com>
-+ */
-+#include <linux/types.h>
-+#include <linux/init.h>
-+#include <linux/printk.h>
-+#include <linux/string.h>
-+#include <linux/panic.h>
-+#include <linux/module.h>
-+#include <linux/kernel.h>
-+#include <linux/rh_flags.h>
-+#include <linux/rh_waived.h>
-+
-+/*
-+ * * RH_INSERT_WAIVED_ITEM
-+ * This macro is intended to be used to insert items into the
-+ * rh_waived_list array. It expects to get an item from
-+ * enum rh_waived_items as its first argument, and a string
-+ * holding the feature name as its second argument.
-+ *
-+ * The feature name is also utilized as the token for the
-+ * boot parameter parser.
-+ *
-+ * Example usage:
-+ * struct rh_waived_item foo[RH_WAIVED_FEAT_ITEMS] = {
-+ * RH_INSERT_WAIVED_ITEM(FOO_FEAT, "foo_feat_short_str", "alias", RH_WAIVED_FEAT),
-+ * };
-+ */
-+#define RH_INSERT_WAIVED_ITEM(enum_item, item, item_alt, class) \
-+ [(enum_item)] = { .name = (item), .alias = (item_alt), \
-+ .type = (class), .waived = 0, }
-+
-+/* Indicates if the rh_flag 'rh_waived' should be added. */
-+bool __initdata add_rh_flag = false;
-+
-+typedef enum {
-+ RH_WAIVED_FEAT,
-+ RH_WAIVED_CVE,
-+ RH_WAIVED_ANY
-+} rh_waived_t;
-+
-+struct rh_waived_item {
-+ char *name, *alias;
-+ rh_waived_t type;
-+ unsigned int waived;
-+
-+};
-+
-+/* Always use the marco RH_INSERT_WAIVED to insert items to this array. */
-+struct rh_waived_item rh_waived_list[RH_WAIVED_ITEMS] = {
-+};
-+
-+/*
-+ * is_rh_waived() - Checks if a given item has been marked as waived.
-+ *
-+ * @item: waived item.
-+ */
-+__inline__ bool is_rh_waived(enum rh_waived_items item)
-+{
-+ return !!rh_waived_list[item].waived;
-+}
-+EXPORT_SYMBOL(is_rh_waived);
-+
-+static void __init rh_waived_parser(char *s, rh_waived_t type)
-+{
-+ int i;
-+ char *token;
-+
-+ pr_info(KERN_CONT "rh_waived: ");
-+
-+ if (!s) {
-+ for (i = 0; i < RH_WAIVED_ITEMS; i++) {
-+ if (type != RH_WAIVED_ANY && rh_waived_list[i].type != type)
-+ continue;
-+
-+ rh_waived_list[i].waived = 1;
-+ pr_info(KERN_CONT "%s%s", rh_waived_list[i].name,
-+ i < RH_WAIVED_ITEMS - 1 ? " " : "\n");
-+ }
-+
-+ add_rh_flag = true;
-+ return;
-+ }
-+
-+ while ((token = strsep(&s, ",")) != NULL) {
-+ for (i = 0; i < RH_WAIVED_ITEMS; i++) {
-+ char *alias = rh_waived_list[i].alias;
-+
-+ if (type != RH_WAIVED_ANY && rh_waived_list[i].type != type)
-+ continue;
-+
-+ if (!strcmp(token, rh_waived_list[i].name) ||
-+ (alias && !strcmp(token, alias))) {
-+ rh_waived_list[i].waived = 1;
-+ pr_info(KERN_CONT "%s ", rh_waived_list[i].name);
-+ }
-+ }
-+ }
-+
-+ pr_info(KERN_CONT "\n");
-+ add_rh_flag = true;
-+}
-+
-+static int __init rh_waived_setup(char *s)
-+{
-+ /*
-+ * originally, if no string was passed to the cmdline option
-+ * all listed features would be waived, so we keep that same
-+ * compromise with the new contract.
-+ */
-+ if (!s || !strcmp(s, "features")) {
-+ rh_waived_parser(NULL, RH_WAIVED_FEAT);
-+ return 0;
-+ }
-+
-+ /* waive all possible mitigations in the list */
-+ if (!strcmp(s, "cves")) {
-+ rh_waived_parser(NULL, RH_WAIVED_CVE);
-+ return 0;
-+ }
-+
-+ /* otherwise, just deal with the enumerated waive list */
-+ rh_waived_parser(s, RH_WAIVED_ANY);
-+
-+ return 0;
-+}
-+early_param("rh_waived", rh_waived_setup);
-+
-+/*
-+ * rh_flags is initialized at subsys_initcall, calling rh_add_flag()
-+ * from rh_waived_setup() would result in a can't boot situation.
-+ * Deffering the inclusion 'rh_waived' rh_flag to late_initcall to
-+ * avoid this issue.
-+ */
-+static int __init __add_rh_flag(void)
-+{
-+ if (add_rh_flag)
-+ rh_add_flag("rh_waived");
-+
-+ return 0;
-+}
-+late_initcall(__add_rh_flag);
-diff --git a/scripts/Makefile.lib b/scripts/Makefile.lib
-index 0a4fdd8bd975..dcb12dad419f 100644
---- a/scripts/Makefile.lib
-+++ b/scripts/Makefile.lib
-@@ -207,7 +207,10 @@ objtool-args-$(CONFIG_STACK_VALIDATION) += --stackval
- objtool-args-$(CONFIG_HAVE_STATIC_CALL_INLINE) += --static-call
- objtool-args-$(CONFIG_HAVE_UACCESS_VALIDATION) += --uaccess
- objtool-args-$(or $(CONFIG_GCOV_KERNEL),$(CONFIG_KCOV)) += --no-unreachable
-+# RHEL-only: don't enforce OBJTOOL_WERROR for out of tree modules
-+ifeq ($(KBUILD_EXTMOD),)
- objtool-args-$(CONFIG_OBJTOOL_WERROR) += --werror
-+endif
-
- objtool-args = $(objtool-args-y) \
- $(if $(delay-objtool), --link) \
-diff --git a/scripts/mod/modpost.c b/scripts/mod/modpost.c
-index a7b72a81d248..9b62ee078734 100644
---- a/scripts/mod/modpost.c
-+++ b/scripts/mod/modpost.c
-@@ -27,6 +27,7 @@
- #include <xalloc.h>
- #include "modpost.h"
- #include "../../include/linux/license.h"
-+#include "../../include/generated/uapi/linux/version.h"
-
- #define MODULE_NS_PREFIX "module:"
-
-@@ -2066,6 +2067,12 @@ static void write_buf(struct buffer *b, const char *fname)
- }
- }
-
-+static void add_rhelversion(struct buffer *b, struct module *mod)
-+{
-+ buf_printf(b, "MODULE_INFO(rhelversion, \"%d.%d\");\n", RHEL_MAJOR,
-+ RHEL_MINOR);
-+}
-+
- static void write_if_changed(struct buffer *b, const char *fname)
- {
- char *tmp;
-@@ -2150,6 +2157,7 @@ static void write_mod_c_file(struct module *mod)
- }
-
- add_srcversion(&buf, mod);
-+ add_rhelversion(&buf, mod);
-
- ret = snprintf(fname, sizeof(fname), "%s.mod.c", mod->name);
- if (ret >= sizeof(fname)) {
-diff --git a/scripts/tags.sh b/scripts/tags.sh
-index 243373683f98..2affd5e58ee8 100755
---- a/scripts/tags.sh
-+++ b/scripts/tags.sh
-@@ -16,6 +16,8 @@ fi
- ignore="$(echo "$RCS_FIND_IGNORE" | sed 's|\\||g' )"
- # tags and cscope files should also ignore MODVERSION *.mod.c files
- ignore="$ignore ( -name *.mod.c ) -prune -o"
-+# RHEL tags and cscope should also ignore redhat/rpm
-+ignore="$ignore ( -path redhat/rpm ) -prune -o"
-
- # ignore arbitrary directories
- if [ -n "${IGNORE_DIRS}" ]; then
-diff --git a/security/integrity/platform_certs/load_uefi.c b/security/integrity/platform_certs/load_uefi.c
-index c0d6948446c3..bed56532e206 100644
---- a/security/integrity/platform_certs/load_uefi.c
-+++ b/security/integrity/platform_certs/load_uefi.c
-@@ -74,7 +74,8 @@ static __init void *get_cert_list(efi_char16_t *name, efi_guid_t *guid,
- return NULL;
-
- if (*status != EFI_BUFFER_TOO_SMALL) {
-- pr_err("Couldn't get size: 0x%lx\n", *status);
-+ pr_err("Couldn't get size: %s (0x%lx)\n",
-+ efi_status_to_str(*status), *status);
- return NULL;
- }
-
-@@ -85,7 +86,8 @@ static __init void *get_cert_list(efi_char16_t *name, efi_guid_t *guid,
- *status = efi.get_variable(name, guid, NULL, &lsize, db);
- if (*status != EFI_SUCCESS) {
- kfree(db);
-- pr_err("Error reading db var: 0x%lx\n", *status);
-+ pr_err("Error reading db var: %s (0x%lx)\n",
-+ efi_status_to_str(*status), *status);
- return NULL;
- }
-
-diff --git a/security/lockdown/Kconfig b/security/lockdown/Kconfig
-index e84ddf484010..d0501353a4b9 100644
---- a/security/lockdown/Kconfig
-+++ b/security/lockdown/Kconfig
-@@ -16,6 +16,19 @@ config SECURITY_LOCKDOWN_LSM_EARLY
- subsystem is fully initialised. If enabled, lockdown will
- unconditionally be called before any other LSMs.
-
-+config LOCK_DOWN_IN_EFI_SECURE_BOOT
-+ bool "Lock down the kernel in EFI Secure Boot mode"
-+ default n
-+ depends on EFI && SECURITY_LOCKDOWN_LSM_EARLY
-+ help
-+ UEFI Secure Boot provides a mechanism for ensuring that the firmware
-+ will only load signed bootloaders and kernels. Secure boot mode may
-+ be determined from EFI variables provided by the system firmware if
-+ not indicated by the boot parameters.
-+
-+ Enabling this option results in kernel lockdown being triggered if
-+ EFI Secure Boot is set.
-+
- choice
- prompt "Kernel default lockdown mode"
- default LOCK_DOWN_KERNEL_FORCE_NONE
-diff --git a/security/lockdown/lockdown.c b/security/lockdown/lockdown.c
-index 8d46886d2cca..14a9cdff942b 100644
---- a/security/lockdown/lockdown.c
-+++ b/security/lockdown/lockdown.c
-@@ -72,6 +72,17 @@ static int lockdown_is_locked_down(enum lockdown_reason what)
- return 0;
- }
-
-+/**
-+ * security_lock_kernel_down() - Put the kernel into lock-down mode.
-+ *
-+ * @where: Where the lock-down is originating from (e.g. command line option)
-+ * @level: The lock-down level (can only increase)
-+ */
-+int security_lock_kernel_down(const char *where, enum lockdown_reason level)
-+{
-+ return lock_kernel_down(where, level);
-+}
-+
- static struct security_hook_list lockdown_hooks[] __ro_after_init = {
- LSM_HOOK_INIT(locked_down, lockdown_is_locked_down),
- };
-diff --git a/tools/testing/selftests/bpf/DENYLIST.rhel b/tools/testing/selftests/bpf/DENYLIST.rhel
-new file mode 100644
-index 000000000000..9424a83c6f48
---- /dev/null
-+++ b/tools/testing/selftests/bpf/DENYLIST.rhel
-@@ -0,0 +1,76 @@
-+# Tests that need CONFIG_FUNCTION_ERROR_INJECTION
-+# Typical observed errors are:
-+# <...some function...> is not sleepable
-+# <...some function...> is not modifiable
-+cgrp_local_storage/yes_rcu_lock
-+cgrp_local_storage/no_rcu_lock
-+cgrp_local_storage/cgrp1_yes_rcu_lock
-+cgrp_local_storage/cgrp1_no_rcu_lock
-+compute_live_registers/addr_space_cast
-+dynptr/test_read_write
-+dynptr/test_dynptr_data
-+dynptr/test_dynptr_copy
-+dynptr/test_dynptr_copy_xdp
-+dynptr/test_dynptr_memset_zero
-+dynptr/test_dynptr_memset_notzero
-+dynptr/test_dynptr_memset_zero_offset
-+dynptr/test_dynptr_memset_zero_adjusted
-+dynptr/test_dynptr_memset_overflow
-+dynptr/test_dynptr_memset_overflow_offset
-+dynptr/test_dynptr_memset_readonly
-+dynptr/test_dynptr_memset_xdp_chunks
-+dynptr/test_dynptr_skb_meta_data
-+dynptr/test_dynptr_skb_meta_flags
-+dynptr/test_ringbuf
-+dynptr/test_skb_readonly
-+dynptr/test_dynptr_skb_data
-+dynptr/test_adjust
-+dynptr/test_adjust_err
-+dynptr/test_zero_size_dynptr
-+dynptr/test_dynptr_is_null
-+dynptr/test_dynptr_is_rdonly
-+dynptr/test_dynptr_clone
-+dynptr/test_dynptr_skb_no_buff
-+dynptr/test_dynptr_skb_strcmp
-+dynptr/test_dynptr_skb_tp_btf
-+dynptr/test_probe_read_user_dynptr
-+dynptr/test_probe_read_kernel_dynptr
-+dynptr/test_probe_read_user_str_dynptr
-+dynptr/test_probe_read_kernel_str_dynptr
-+dynptr/test_copy_from_user_dynptr
-+dynptr/test_copy_from_user_str_dynptr
-+dynptr/test_copy_from_user_task_dynptr
-+dynptr/test_copy_from_user_task_str_dynptr
-+irq/irq_sleepable_helper
-+irq/irq_sleepable_kfunc
-+iters/iter_css_task_for_each_sleep
-+iters/iter_ret_rcu_test_protected
-+iters/iter_ret_rcu_test_type
-+iters/iter_ret_rcu_test_protected_nostruct
-+iters/iter_ret_rcu_test_type_nostruct
-+iters/task
-+iters/css
-+iters/iter_tasks_without_lock
-+iters/iter_css_without_lock
-+iters/iter_tasks_lock_and_unlock
-+iters/iter_css_lock_and_unlock
-+map_excl/map_excl_allowed
-+map_in_map/sleepable_acc_map_in_array
-+map_in_map/sleepable_acc_map_in_htab
-+mem_rdonly_untrusted/helper_param_not_ok
-+module_attach
-+preempt_lock/preempt_sleepable_helper
-+preempt_lock/preempt_sleepable_kfunc
-+rcu_read_lock/success
-+rcu_read_lock/rcuptr_acquire
-+read_vsyscall
-+refcounted_kptr/rbtree_sleepable_rcu
-+refcounted_kptr/rbtree_sleepable_rcu_no_explicit_rcu_lock
-+refcounted_kptr_fail/rbtree_fail_sleepable_lock_across_rcu
-+test_lsm/lsm_basic
-+verifier_global_subprogs/arg_tag_ctx_fmod_ret
-+
-+kprobe_multi_test/attach_override # needs CONFIG_BPF_KPROBE_OVERRIDE
-+libbpf_probe_prog_types/BPF_PROG_TYPE_LIRC_MODE2 # needs CONFIG_BPF_LIRC_MODE2
-+test_bpffs # needs CONFIG_BPF_PRELOAD
-+tunnel # needs CONFIG_NET_FOU
-diff --git a/tools/testing/selftests/bpf/Makefile b/tools/testing/selftests/bpf/Makefile
-index b642ee489ea6..7e3204186a8b 100644
---- a/tools/testing/selftests/bpf/Makefile
-+++ b/tools/testing/selftests/bpf/Makefile
-@@ -532,7 +532,7 @@ LSKELS := fexit_sleep.c trace_printk.c trace_vprintk.c map_ptr_kern.c \
- LSKELS_SIGNED := fentry_test.c fexit_test.c atomics.c
-
- # Generate both light skeleton and libbpf skeleton for these
--LSKELS_EXTRA := test_ksyms_module.c test_ksyms_weak.c kfunc_call_test.c \
-+LSKELS_EXTRA := test_ksyms_module.c kfunc_call_test.c \
- kfunc_call_test_subprog.c
- SKEL_BLACKLIST += $$(LSKELS) $$(LSKELS_SIGNED)
-
-diff --git a/tools/testing/selftests/bpf/prog_tests/ksyms_btf.c b/tools/testing/selftests/bpf/prog_tests/ksyms_btf.c
-index 1d7a2f1e0731..b22f3a9cb8b8 100644
---- a/tools/testing/selftests/bpf/prog_tests/ksyms_btf.c
-+++ b/tools/testing/selftests/bpf/prog_tests/ksyms_btf.c
-@@ -7,7 +7,6 @@
- #include "test_ksyms_btf.skel.h"
- #include "test_ksyms_btf_null_check.skel.h"
- #include "test_ksyms_weak.skel.h"
--#include "test_ksyms_weak.lskel.h"
- #include "test_ksyms_btf_write_check.skel.h"
-
- static int duration;
-@@ -111,33 +110,6 @@ static void test_weak_syms(void)
- test_ksyms_weak__destroy(skel);
- }
-
--static void test_weak_syms_lskel(void)
--{
-- struct test_ksyms_weak_lskel *skel;
-- struct test_ksyms_weak_lskel__data *data;
-- int err;
--
-- skel = test_ksyms_weak_lskel__open_and_load();
-- if (!ASSERT_OK_PTR(skel, "test_ksyms_weak_lskel__open_and_load"))
-- return;
--
-- err = test_ksyms_weak_lskel__attach(skel);
-- if (!ASSERT_OK(err, "test_ksyms_weak_lskel__attach"))
-- goto cleanup;
--
-- /* trigger tracepoint */
-- usleep(1);
--
-- data = skel->data;
-- ASSERT_EQ(data->out__existing_typed, 0, "existing typed ksym");
-- ASSERT_NEQ(data->out__existing_typeless, -1, "existing typeless ksym");
-- ASSERT_EQ(data->out__non_existent_typeless, 0, "nonexistent typeless ksym");
-- ASSERT_EQ(data->out__non_existent_typed, 0, "nonexistent typed ksym");
--
--cleanup:
-- test_ksyms_weak_lskel__destroy(skel);
--}
--
- static void test_write_check(bool test_handler1)
- {
- struct test_ksyms_btf_write_check *skel;
-@@ -180,9 +152,6 @@ void test_ksyms_btf(void)
- if (test__start_subtest("weak_ksyms"))
- test_weak_syms();
-
-- if (test__start_subtest("weak_ksyms_lskel"))
-- test_weak_syms_lskel();
--
- if (test__start_subtest("write_check1"))
- test_write_check(true);
-
diff --git a/patch-7.3-redhat.patch b/patch-7.3-redhat.patch
new file mode 100644
index 0000000..7a6d273
--- /dev/null
+++ b/patch-7.3-redhat.patch
@@ -0,0 +1,4103 @@
+ Documentation/admin-guide/kernel-parameters.txt | 23 +
+ Documentation/admin-guide/rh-waived-items.rst | 29 ++
+ Kconfig | 2 +
+ Kconfig.redhat | 31 ++
+ Makefile | 38 +-
+ arch/arm/Kconfig | 4 +-
+ arch/arm64/Kconfig | 2 +-
+ arch/arm64/kernel/setup.c | 27 +
+ arch/s390/include/asm/ipl.h | 1 +
+ arch/s390/kernel/ipl.c | 5 +
+ arch/s390/kernel/setup.c | 4 +
+ arch/x86/kernel/cpu/common.c | 1 +
+ arch/x86/kernel/setup.c | 101 +++-
+ crypto/akcipher.c | 3 +-
+ crypto/dh.c | 25 +
+ crypto/seqiv.c | 15 +-
+ crypto/sig.c | 3 +-
+ crypto/testmgr.c | 6 +-
+ drivers/acpi/apei/hest.c | 8 +
+ drivers/acpi/irq.c | 17 +-
+ drivers/acpi/scan.c | 9 +
+ drivers/ata/libahci.c | 18 +
+ drivers/char/ipmi/ipmi_dmi.c | 15 +
+ drivers/char/ipmi/ipmi_msghandler.c | 16 +-
+ drivers/char/random.c | 126 ++++-
+ drivers/firmware/efi/Makefile | 1 +
+ drivers/firmware/efi/efi.c | 124 +++--
+ drivers/firmware/efi/libstub/fdt.c | 5 +
+ drivers/firmware/efi/libstub/secureboot.c | 14 +-
+ drivers/firmware/efi/secureboot.c | 38 ++
+ drivers/hwtracing/coresight/coresight-etm4x-core.c | 19 +
+ drivers/iommu/iommu.c | 22 +
+ drivers/message/fusion/mptsas.c | 5 +
+ drivers/message/fusion/mptspi.c | 5 +
+ drivers/net/wireguard/main.c | 6 +
+ drivers/pci/pci-driver.c | 9 +
+ drivers/pci/quirks.c | 24 +
+ drivers/scsi/hpsa.c | 4 +
+ drivers/scsi/qla2xxx/qla_os.c | 6 +
+ drivers/scsi/sd.c | 12 +
+ drivers/usb/core/hub.c | 7 +
+ fs/afs/main.c | 3 +
+ fs/erofs/super.c | 9 +
+ fs/ext4/super.c | 11 +
+ include/linux/crypto.h | 2 +
+ include/linux/efi.h | 22 +-
+ include/linux/kernel.h | 28 ++
+ include/linux/lsm_hook_defs.h | 1 +
+ include/linux/module.h | 5 +
+ include/linux/panic.h | 17 +-
+ include/linux/pci.h | 5 +
+ include/linux/random.h | 10 +
+ include/linux/rh_flags.h | 34 ++
+ include/linux/rh_kabi.h | 541 +++++++++++++++++++++
+ include/linux/rh_waived.h | 19 +
+ include/linux/security.h | 9 +
+ init/main.c | 5 +
+ kernel/Makefile | 2 +
+ kernel/bpf/core.c | 5 +
+ kernel/bpf/syscall.c | 23 +
+ kernel/module/main.c | 13 +
+ kernel/module/signing.c | 9 +-
+ kernel/panic.c | 12 +
+ kernel/rh_flags.c | 115 +++++
+ kernel/rh_messages.c | 414 ++++++++++++++++
+ kernel/rh_messages.h | 334 +++++++++++++
+ kernel/rh_waived.c | 147 ++++++
+ scripts/Makefile.lib | 3 +
+ scripts/mod/modpost.c | 8 +
+ scripts/tags.sh | 2 +
+ security/integrity/platform_certs/load_uefi.c | 6 +-
+ security/lockdown/Kconfig | 13 +
+ security/lockdown/lockdown.c | 11 +
+ tools/testing/selftests/bpf/DENYLIST.rhel | 76 +++
+ tools/testing/selftests/bpf/Makefile | 2 +-
+ tools/testing/selftests/bpf/prog_tests/ksyms_btf.c | 31 --
+ 76 files changed, 2669 insertions(+), 108 deletions(-)
+
+diff --git a/Documentation/admin-guide/kernel-parameters.txt b/Documentation/admin-guide/kernel-parameters.txt
+index e8ff36982d97..0abff56b135d 100644
+--- a/Documentation/admin-guide/kernel-parameters.txt
++++ b/Documentation/admin-guide/kernel-parameters.txt
+@@ -6641,6 +6641,20 @@ Kernel parameters
+ 2 The "airplane mode" button toggles between everything
+ blocked and everything unblocked.
+
++ rh_waived=
++ Enable waived items in RHEL.
++
++ Some specific features, or security mitigations, can be
++ waived (toggled on/off) on demand in RHEL. However,
++ waiving any of these items should be used judiciously,
++ as it generally means the system might end up being
++ considered insecure or even out-of-scope for support.
++
++ Format: <item-1>,<item-2>...<item-n>
++
++ Use 'rh_waived' to enable all waived features listed at
++ Documentation/admin-guide/rh-waived-features.rst
++
+ ring3mwait=disable
+ [KNL] Disable ring 3 MONITOR/MWAIT feature on supported
+ CPUs.
+@@ -8061,6 +8075,15 @@ Kernel parameters
+ unknown_nmi_panic
+ [X86] Cause panic on unknown NMI.
+
++ unprivileged_bpf_disabled=
++ Format: { "0" | "1" | "2" }
++ Sets the initial value of
++ kernel.unprivileged_bpf_disabled sysctl knob.
++ 0 - unprivileged bpf() syscall access is enabled.
++ 1 - unprivileged bpf() syscall access is disabled permanently.
++ 2 - unprivileged bpf() syscall access is disabled.
++ Default value is 2.
++
+ unwind_debug [X86-64,EARLY]
+ Enable unwinder debug output. This can be
+ useful for debugging certain unwinder error
+diff --git a/Documentation/admin-guide/rh-waived-items.rst b/Documentation/admin-guide/rh-waived-items.rst
+new file mode 100644
+index 000000000000..7471c891419c
+--- /dev/null
++++ b/Documentation/admin-guide/rh-waived-items.rst
+@@ -0,0 +1,29 @@
++.. _rh_waived_items:
++
++====================
++Red Hat Waived Items
++====================
++
++Waived Items is a mechanism offered by Red Hat which allows customers to "waive"
++and utilize features that are not enabled by default as these are considered as
++unmaintained, insecure, rudimentary, or deprecated, but are shipped with the
++RHEL kernel for customer's convinience only.
++Waived Items can range from features that can be enabled on demand to specific
++security mitigations that can be disabled on demand.
++
++To explicitly "waive" any of these items, RHEL offers the ``rh_waived``
++kernel boot parameter. To allow set of waived items, append
++``rh_waived=<item name>,...,<item name>`` to the kernel
++cmdline.
++Appending ``rh_waived=features`` will waive all features listed below,
++and appending ``rh_waived=cves`` will waive all security mitigations
++listed below.
++
++The waived items listed in the next session follow the pattern below:
++
++- item name
++ item description
++
++List of Red Hat Waived Items
++============================
++
+diff --git a/Kconfig b/Kconfig
+index 307e581144de..11e93e479ce4 100644
+--- a/Kconfig
++++ b/Kconfig
+@@ -32,3 +32,5 @@ source "lib/Kconfig.debug"
+ source "Documentation/Kconfig"
+
+ source "io_uring/Kconfig"
++
++source "Kconfig.redhat"
+diff --git a/Kconfig.redhat b/Kconfig.redhat
+new file mode 100644
+index 000000000000..85771d74c34f
+--- /dev/null
++++ b/Kconfig.redhat
+@@ -0,0 +1,31 @@
++# SPDX-License-Identifier: GPL-2.0-only
++#
++# Red Hat specific options
++#
++
++menu "Red Hat options"
++
++config RHEL_DIFFERENCES
++ bool "Enable RHEL-only code"
++ help
++ This option controls whether rhel-only changes are enabled during
++ the build. Unless you want to enable rhel-only changes, say N here.
++
++config RH_KABI_SIZE_ALIGN_CHECKS
++ bool "Enables more stringent kabi checks in the macros"
++ depends on RHEL_DIFFERENCES
++ default y
++ help
++ This option enables more stringent kabi checks. Those must
++ be disabled in case of a debug build, because debug builds
++ allow to change struct sizes.
++
++config RH_AUTOMOTIVE
++ bool "Enable automotive only code"
++ depends on RHEL_DIFFERENCES
++ default n
++ help
++ This option controls whether code is included in the automotive
++ kernel build. If you are building an automotive kernel, say Y.
++
++endmenu
+diff --git a/Makefile b/Makefile
+index ddcc6dca1ece..7c52f4c368ef 100644
+--- a/Makefile
++++ b/Makefile
+@@ -358,6 +358,17 @@ ifneq ($(filter install,$(MAKECMDGOALS)),)
+ endif
+ endif
+
++# CKI/cross compilation hack
++# Do we need to rebuild scripts after cross compilation?
++# If kernel was cross-compiled, these scripts have arch of build host.
++REBUILD_SCRIPTS_FOR_CROSS:=0
++
++# Regenerating config with incomplete source tree will produce different
++# config options. Disable it.
++ifeq ($(REBUILD_SCRIPTS_FOR_CROSS),1)
++may-sync-config:=
++endif
++
+ ifdef mixed-build
+ # ===========================================================================
+ # We're called with mixed targets (*config and build targets).
+@@ -1432,6 +1443,8 @@ uapi-asm-generic:
+ # Generate some files
+ # ---------------------------------------------------------------------------
+
++include $(srctree)/Makefile.rhelver
++
+ # KERNELRELEASE can change from a few different places, meaning version.h
+ # needs to be updated, so this check is forced on all builds
+
+@@ -1456,7 +1469,13 @@ define filechk_version.h
+ ((c) > 255 ? 255 : (c)))'; \
+ echo \#define LINUX_VERSION_MAJOR $(VERSION); \
+ echo \#define LINUX_VERSION_PATCHLEVEL $(PATCHLEVEL); \
+- echo \#define LINUX_VERSION_SUBLEVEL $(SUBLEVEL)
++ echo \#define LINUX_VERSION_SUBLEVEL $(SUBLEVEL); \
++ echo '#define RHEL_MAJOR $(RHEL_MAJOR)'; \
++ echo '#define RHEL_MINOR $(RHEL_MINOR)'; \
++ echo '#define RHEL_RELEASE_VERSION(a,b) (((a) << 8) + (b))'; \
++ echo '#define RHEL_RELEASE_CODE \
++ $(shell expr $(RHEL_MAJOR) \* 256 + $(RHEL_MINOR))'; \
++ echo '#define RHEL_RELEASE "$(RHEL_RELEASE)"'
+ endef
+
+ $(version_h): private PATCHLEVEL := $(or $(PATCHLEVEL), 0)
+@@ -2108,6 +2127,23 @@ endif
+
+ ifdef CONFIG_MODULES
+
++scripts_build:
++ $(MAKE) $(build)=scripts/basic
++ $(MAKE) $(build)=scripts/mod
++ $(MAKE) $(build)=scripts scripts/module.lds
++ $(MAKE) $(build)=scripts scripts/unifdef
++ $(MAKE) $(build)=scripts
++
++prepare_after_cross:
++ # disable STACK_VALIDATION to avoid building objtool
++ sed -i '/^CONFIG_STACK_VALIDATION/d' ./include/config/auto.conf || true
++ # build minimum set of scripts and resolve_btfids to allow building
++ # external modules
++ $(MAKE) KBUILD_EXTMOD="" M="" scripts_build V=1
++ $(MAKE) -C tools/bpf/resolve_btfids
++
++PHONY += prepare_after_cross scripts_build
++
+ modules.order: $(build-dir)
+ @:
+
+diff --git a/arch/arm/Kconfig b/arch/arm/Kconfig
+index 9187240a02db..46d1258700af 100644
+--- a/arch/arm/Kconfig
++++ b/arch/arm/Kconfig
+@@ -1216,9 +1216,9 @@ config HIGHMEM
+ If unsure, say n.
+
+ config HIGHPTE
+- bool "Allocate 2nd-level pagetables from highmem" if EXPERT
++ bool "Allocate 2nd-level pagetables from highmem"
+ depends on HIGHMEM && !PREEMPT_RT
+- default y
++ default n
+ help
+ The VM uses one page of physical memory for each page table.
+ For systems with a lot of processes, this can use a lot of
+diff --git a/arch/arm64/Kconfig b/arch/arm64/Kconfig
+index b3afe0688919..d23a728aac03 100644
+--- a/arch/arm64/Kconfig
++++ b/arch/arm64/Kconfig
+@@ -1489,7 +1489,7 @@ endchoice
+
+ config ARM64_FORCE_52BIT
+ bool "Force 52-bit virtual addresses for userspace"
+- depends on ARM64_VA_BITS_52 && EXPERT
++ depends on ARM64_VA_BITS_52
+ help
+ For systems with 52-bit userspace VAs enabled, the kernel will attempt
+ to maintain compatibility with older software by providing 48-bit VAs
+diff --git a/arch/arm64/kernel/setup.c b/arch/arm64/kernel/setup.c
+index 23c05dc7a8f2..d7b7b2f39e16 100644
+--- a/arch/arm64/kernel/setup.c
++++ b/arch/arm64/kernel/setup.c
+@@ -32,6 +32,8 @@
+ #include <linux/sched/task.h>
+ #include <linux/scs.h>
+ #include <linux/mm.h>
++#include <linux/security.h>
++#include <linux/libfdt.h>
+
+ #include <asm/acpi.h>
+ #include <asm/fixmap.h>
+@@ -207,6 +209,24 @@ static void __init setup_machine_fdt(phys_addr_t dt_phys)
+ dump_stack_set_arch_desc("%s (DT)", name);
+ }
+
++static void __init init_secureboot_mode(void)
++{
++ void *fdt = initial_boot_params;
++ u64 chosen;
++ const __be32 *prop;
++ int len;
++
++ chosen = fdt_path_offset(fdt, "/chosen");
++ if (chosen < 0)
++ return;
++
++ prop = fdt_getprop(fdt, chosen, "secure-boot-mode", &len);
++ if (!prop || len != sizeof(u32))
++ return;
++
++ efi_set_secure_boot((enum efi_secureboot_mode)fdt32_to_cpu(*prop));
++}
++
+ static void __init request_standard_resources(void)
+ {
+ struct memblock_region *region;
+@@ -327,6 +347,13 @@ void __init __no_sanitize_address setup_arch(char **cmdline_p)
+ pr_warn(FW_BUG "Kernel image misaligned at boot, please fix your bootloader!");
+ WARN_TAINT(mmu_enabled_at_boot, TAINT_FIRMWARE_WORKAROUND,
+ FW_BUG "Booted with MMU enabled!");
++ } else {
++ init_secureboot_mode();
++
++#ifdef CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT
++ if (efi_enabled(EFI_SECURE_BOOT))
++ security_lock_kernel_down("EFI Secure Boot mode", LOCKDOWN_INTEGRITY_MAX);
++#endif
+ }
+
+ arm64_memblock_init();
+diff --git a/arch/s390/include/asm/ipl.h b/arch/s390/include/asm/ipl.h
+index b0d00032479d..afb9544fb007 100644
+--- a/arch/s390/include/asm/ipl.h
++++ b/arch/s390/include/asm/ipl.h
+@@ -139,6 +139,7 @@ int ipl_report_add_component(struct ipl_report *report, struct kexec_buf *kbuf,
+ unsigned char flags, unsigned short cert);
+ int ipl_report_add_certificate(struct ipl_report *report, void *key,
+ unsigned long addr, unsigned long len);
++bool ipl_get_secureboot(void);
+
+ /*
+ * DIAG 308 support
+diff --git a/arch/s390/kernel/ipl.c b/arch/s390/kernel/ipl.c
+index 3c346b02ceb9..30e16a0d4490 100644
+--- a/arch/s390/kernel/ipl.c
++++ b/arch/s390/kernel/ipl.c
+@@ -2527,3 +2527,8 @@ int ipl_report_free(struct ipl_report *report)
+ }
+
+ #endif
++
++bool ipl_get_secureboot(void)
++{
++ return !!ipl_secure_flag;
++}
+diff --git a/arch/s390/kernel/setup.c b/arch/s390/kernel/setup.c
+index b60284328fe3..e4d37b08ca29 100644
+--- a/arch/s390/kernel/setup.c
++++ b/arch/s390/kernel/setup.c
+@@ -47,6 +47,7 @@
+ #include <linux/crash_dump.h>
+ #include <linux/memory.h>
+ #include <linux/start_kernel.h>
++#include <linux/security.h>
+ #include <linux/hugetlb.h>
+ #include <linux/kmemleak.h>
+
+@@ -917,6 +918,9 @@ void __init setup_arch(char **cmdline_p)
+
+ log_component_list();
+
++ if (ipl_get_secureboot())
++ security_lock_kernel_down("Secure IPL mode", LOCKDOWN_INTEGRITY_MAX);
++
+ /* Have one command line that is parsed and saved in /proc/cmdline */
+ /* boot_command_line has been already set up in early.c */
+ *cmdline_p = boot_command_line;
+diff --git a/arch/x86/kernel/cpu/common.c b/arch/x86/kernel/cpu/common.c
+index a3caddd411ec..d654bb2b9c7a 100644
+--- a/arch/x86/kernel/cpu/common.c
++++ b/arch/x86/kernel/cpu/common.c
+@@ -1797,6 +1797,7 @@ static void __init early_identify_cpu(struct cpuinfo_x86 *c)
+ get_cpu_vendor(c);
+ intel_unlock_cpuid_leafs(c);
+ get_cpu_cap(c);
++ get_model_name(c); /* RHEL: get model name for unsupported check */
+ setup_force_cpu_cap(X86_FEATURE_CPUID);
+ get_cpu_address_sizes(c);
+ cpu_parse_early_param();
+diff --git a/arch/x86/kernel/setup.c b/arch/x86/kernel/setup.c
+index 46882ce79c3a..49173ab3fcf7 100644
+--- a/arch/x86/kernel/setup.c
++++ b/arch/x86/kernel/setup.c
+@@ -21,6 +21,7 @@
+ #include <linux/pci.h>
+ #include <linux/random.h>
+ #include <linux/root_dev.h>
++#include <linux/security.h>
+ #include <linux/static_call.h>
+ #include <linux/sysfb.h>
+ #include <linux/swiotlb.h>
+@@ -57,6 +58,10 @@
+ #include <asm/thermal.h>
+ #include <asm/unwind.h>
+ #include <asm/vsyscall.h>
++#include <asm/intel-family.h>
++#if defined(CONFIG_X86_LOCAL_APIC)
++#include <asm/nmi.h>
++#endif
+
+ /*
+ * max_low_pfn_mapped: highest directly mapped pfn < 4 GB
+@@ -825,6 +830,79 @@ static void __init early_reserve_memory(void)
+ trim_snb_memory();
+ }
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++
++static void rh_check_supported(void)
++{
++ bool guest;
++
++ guest = (x86_hyper_type != X86_HYPER_NATIVE || boot_cpu_has(X86_FEATURE_HYPERVISOR));
++
++ /* RHEL supports single cpu on guests only */
++ if (((topology_num_threads_per_package() * __max_threads_per_core) == 1) &&
++ !guest && !is_kdump_kernel()) {
++ pr_crit("Detected single cpu native boot.\n");
++ pr_crit("Important: In this kernel, single threaded, single CPU 64-bit physical systems are unsupported.");
++ }
++
++ /*
++ * If the RHEL kernel does not support this hardware, the kernel will
++ * attempt to boot, but no support is provided for this hardware
++ */
++ switch (boot_cpu_data.x86_vendor) {
++ case X86_VENDOR_AMD:
++ case X86_VENDOR_INTEL:
++ break;
++ default:
++ pr_crit("Detected processor %s %s\n",
++ boot_cpu_data.x86_vendor_id,
++ boot_cpu_data.x86_model_id);
++ break;
++ }
++
++ /*
++ * Due to the complexity of x86 lapic & ioapic enumeration, and PCI IRQ
++ * routing, ACPI is required for x86. acpi=off is a valid debug kernel
++ * parameter, so just print out a loud warning in case something
++ * goes wrong (which is most of the time).
++ */
++ if (acpi_disabled && !guest)
++ pr_crit("ACPI has been disabled or is not available on this hardware. This may result in a single cpu boot, incorrect PCI IRQ routing, or boot failure.\n");
++
++ /*
++ * x86_64 microarchitecture levels:
++ * https://en.wikipedia.org/wiki/X86-64#Microarchitecture_levels
++ *
++ * RHEL9 has a minimum of the x86_64-v2 microarchitecture
++ * RHEL10 has a minimum of the x86_64-v3 microarchitecture
++ */
++
++ if (!boot_cpu_has(X86_FEATURE_CX16) || /* CMPXCHG16B */
++ !boot_cpu_has(X86_FEATURE_LAHF_LM) || /* LAHF-SAHF */
++ !boot_cpu_has(X86_FEATURE_POPCNT) ||
++ !boot_cpu_has(X86_FEATURE_XMM3) || /* SSE-3 */
++ !boot_cpu_has(X86_FEATURE_XMM4_1) || /* SSE4_1 */
++ !boot_cpu_has(X86_FEATURE_XMM4_2) || /* SSE4_2 */
++ !boot_cpu_has(X86_FEATURE_SSSE3)) {
++ mark_hardware_deprecated("x86_64-v1", "%s:%s",
++ boot_cpu_data.x86_vendor_id, boot_cpu_data.x86_model_id);
++ } else if (!boot_cpu_has(X86_FEATURE_AVX) ||
++ !boot_cpu_has(X86_FEATURE_AVX2) ||
++ !boot_cpu_has(X86_FEATURE_BMI1) ||
++ !boot_cpu_has(X86_FEATURE_BMI2) ||
++ !boot_cpu_has(X86_FEATURE_F16C) ||
++ !boot_cpu_has(X86_FEATURE_FMA) ||
++ /* LZCNT is not explicitly listed, but appears to be paired with BMI2 */
++ !boot_cpu_has(X86_FEATURE_MOVBE) ||
++ !boot_cpu_has(X86_FEATURE_XSAVE)) {
++ mark_hardware_deprecated("x86_64-v2", "%s:%s",
++ boot_cpu_data.x86_vendor_id, boot_cpu_data.x86_model_id);
++ }
++}
++#else
++#define rh_check_supported()
++#endif
++
+ /*
+ * Dump out kernel offset information on panic.
+ */
+@@ -995,6 +1073,13 @@ void __init setup_arch(char **cmdline_p)
+ if (efi_enabled(EFI_BOOT))
+ efi_init();
+
++ efi_set_secure_boot(boot_params.secure_boot);
++
++#ifdef CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT
++ if (efi_enabled(EFI_SECURE_BOOT))
++ security_lock_kernel_down("EFI Secure Boot mode", LOCKDOWN_INTEGRITY_MAX);
++#endif
++
+ reserve_ibft_region();
+ x86_init.resources.dmi_setup();
+
+@@ -1156,19 +1241,7 @@ void __init setup_arch(char **cmdline_p)
+ /* Allocate bigger log buffer */
+ setup_log_buf(1);
+
+- if (efi_enabled(EFI_BOOT)) {
+- switch (boot_params.secure_boot) {
+- case efi_secureboot_mode_disabled:
+- pr_info("Secure boot disabled\n");
+- break;
+- case efi_secureboot_mode_enabled:
+- pr_info("Secure boot enabled\n");
+- break;
+- default:
+- pr_info("Secure boot could not be determined\n");
+- break;
+- }
+- }
++ efi_set_secure_boot(boot_params.secure_boot);
+
+ reserve_initrd();
+
+@@ -1275,6 +1348,8 @@ void __init setup_arch(char **cmdline_p)
+ efi_apply_memmap_quirks();
+ #endif
+
++ rh_check_supported();
++
+ unwind_init();
+ }
+
+diff --git a/crypto/akcipher.c b/crypto/akcipher.c
+index 630bb19738be..8da7eedce31e 100644
+--- a/crypto/akcipher.c
++++ b/crypto/akcipher.c
+@@ -138,8 +138,7 @@ int crypto_register_akcipher(struct akcipher_alg *alg)
+
+ if (!alg->encrypt)
+ alg->encrypt = akcipher_default_op;
+- if (!alg->decrypt)
+- alg->decrypt = akcipher_default_op;
++ alg->decrypt = akcipher_default_op;
+ if (!alg->set_priv_key)
+ alg->set_priv_key = akcipher_default_set_key;
+
+diff --git a/crypto/dh.c b/crypto/dh.c
+index 7ad4768716c8..01ccc24db074 100644
+--- a/crypto/dh.c
++++ b/crypto/dh.c
+@@ -227,10 +227,35 @@ static int dh_compute_value(struct kpp_request *req)
+
+ /* SP800-56A rev 3 5.6.2.1.3 key check */
+ } else {
++ MPI val_pct;
++
+ if (dh_is_pubkey_valid(ctx, val)) {
+ ret = -EAGAIN;
+ goto err_free_val;
+ }
++
++ /*
++ * SP800-56Arev3, 5.6.2.1.4: ("Owner Assurance
++ * of Pair-wise Consistency"): recompute the
++ * public key and check if the results match.
++ */
++ val_pct = mpi_alloc(0);
++ if (!val_pct) {
++ ret = -ENOMEM;
++ goto err_free_val;
++ }
++
++ ret = _compute_val(ctx, base, val_pct);
++ if (ret) {
++ mpi_free(val_pct);
++ goto err_free_val;
++ }
++
++ if (mpi_cmp(val, val_pct) != 0) {
++ fips_fail_notify();
++ panic("dh: pair-wise consistency test failed\n");
++ }
++ mpi_free(val_pct);
+ }
+ }
+
+diff --git a/crypto/seqiv.c b/crypto/seqiv.c
+index 678bb4145d78..fcc059e7d3db 100644
+--- a/crypto/seqiv.c
++++ b/crypto/seqiv.c
+@@ -123,6 +123,19 @@ static int seqiv_aead_decrypt(struct aead_request *req)
+ return crypto_aead_decrypt(subreq);
+ }
+
++static int aead_init_seqiv(struct crypto_aead *aead)
++{
++ int err;
++
++ err = aead_init_geniv(aead);
++ if (err)
++ return err;
++
++ crypto_aead_set_flags(aead, CRYPTO_TFM_FIPS_COMPLIANCE);
++
++ return 0;
++}
++
+ static int seqiv_aead_create(struct crypto_template *tmpl, struct rtattr **tb)
+ {
+ struct aead_instance *inst;
+@@ -140,7 +153,7 @@ static int seqiv_aead_create(struct crypto_template *tmpl, struct rtattr **tb)
+ inst->alg.encrypt = seqiv_aead_encrypt;
+ inst->alg.decrypt = seqiv_aead_decrypt;
+
+- inst->alg.init = aead_init_geniv;
++ inst->alg.init = aead_init_seqiv;
+ inst->alg.exit = aead_exit_geniv;
+
+ inst->alg.base.cra_ctxsize = sizeof(struct aead_geniv_ctx);
+diff --git a/crypto/sig.c b/crypto/sig.c
+index 7d2048da5c3a..6b4e2163fcc5 100644
+--- a/crypto/sig.c
++++ b/crypto/sig.c
+@@ -112,8 +112,7 @@ static int sig_prepare_alg(struct sig_alg *alg)
+ {
+ struct crypto_alg *base = &alg->base;
+
+- if (!alg->sign)
+- alg->sign = sig_default_sign;
++ alg->sign = sig_default_sign;
+ if (!alg->verify)
+ alg->verify = sig_default_verify;
+ if (!alg->set_priv_key)
+diff --git a/crypto/testmgr.c b/crypto/testmgr.c
+index 4958211fbfa9..ee6d34885696 100644
+--- a/crypto/testmgr.c
++++ b/crypto/testmgr.c
+@@ -3831,7 +3831,7 @@ static int test_akcipher_one(struct crypto_akcipher *tfm,
+ * Don't invoke decrypt test which requires a private key
+ * for vectors with only a public key.
+ */
+- if (vecs->public_key_vec) {
++ if (1 || vecs->public_key_vec) {
+ err = 0;
+ goto free_all;
+ }
+@@ -3967,7 +3967,7 @@ static int test_sig_one(struct crypto_sig *tfm, const struct sig_testvec *vecs)
+ * Don't invoke sign test (which requires a private key)
+ * for vectors with only a public key.
+ */
+- if (vecs->public_key_vec)
++ if (1 || vecs->public_key_vec)
+ return 0;
+
+ sig_size = crypto_sig_maxsize(tfm);
+@@ -4790,14 +4790,12 @@ static const struct alg_test_desc alg_test_descs[] = {
+ }, {
+ .alg = "ecdh-nist-p256",
+ .test = alg_test_kpp,
+- .fips_allowed = 1,
+ .suite = {
+ .kpp = __VECS(ecdh_p256_tv_template)
+ }
+ }, {
+ .alg = "ecdh-nist-p384",
+ .test = alg_test_kpp,
+- .fips_allowed = 1,
+ .suite = {
+ .kpp = __VECS(ecdh_p384_tv_template)
+ }
+diff --git a/drivers/acpi/apei/hest.c b/drivers/acpi/apei/hest.c
+index 20d757687e3d..90a13f20f052 100644
+--- a/drivers/acpi/apei/hest.c
++++ b/drivers/acpi/apei/hest.c
+@@ -142,6 +142,14 @@ static int apei_hest_parse(apei_hest_func_t func, void *data)
+ if (hest_disable || !hest_tab)
+ return -EINVAL;
+
++#ifdef CONFIG_ARM64
++ /* Ignore broken firmware */
++ if (!strncmp(hest_tab->header.oem_id, "HPE ", 6) &&
++ !strncmp(hest_tab->header.oem_table_id, "ProLiant", 8) &&
++ MIDR_IMPLEMENTOR(read_cpuid_id()) == ARM_CPU_IMP_APM)
++ return -EINVAL;
++#endif
++
+ hest_hdr = (struct acpi_hest_header *)(hest_tab + 1);
+ for (i = 0; i < hest_tab->error_source_count; i++) {
+ len = hest_esrc_len(hest_hdr);
+diff --git a/drivers/acpi/irq.c b/drivers/acpi/irq.c
+index d1595156c86a..9485212f1a6d 100644
+--- a/drivers/acpi/irq.c
++++ b/drivers/acpi/irq.c
+@@ -143,6 +143,7 @@ struct acpi_irq_parse_one_ctx {
+ unsigned int index;
+ unsigned long *res_flags;
+ struct irq_fwspec *fwspec;
++ bool skip_producer_check;
+ };
+
+ /**
+@@ -216,7 +217,8 @@ static acpi_status acpi_irq_parse_one_cb(struct acpi_resource *ares,
+ return AE_CTRL_TERMINATE;
+ case ACPI_RESOURCE_TYPE_EXTENDED_IRQ:
+ eirq = &ares->data.extended_irq;
+- if (eirq->producer_consumer == ACPI_PRODUCER)
++ if (!ctx->skip_producer_check &&
++ eirq->producer_consumer == ACPI_PRODUCER)
+ return AE_OK;
+ if (ctx->index >= eirq->interrupt_count) {
+ ctx->index -= eirq->interrupt_count;
+@@ -252,8 +254,19 @@ static acpi_status acpi_irq_parse_one_cb(struct acpi_resource *ares,
+ static int acpi_irq_parse_one(acpi_handle handle, unsigned int index,
+ struct irq_fwspec *fwspec, unsigned long *flags)
+ {
+- struct acpi_irq_parse_one_ctx ctx = { -EINVAL, index, flags, fwspec };
++ struct acpi_irq_parse_one_ctx ctx = { -EINVAL, index, flags, fwspec, false };
+
++ /*
++ * Firmware on arm64-based HPE m400 platform incorrectly marks
++ * its UART interrupt as ACPI_PRODUCER rather than ACPI_CONSUMER.
++ * Don't do the producer/consumer check for that device.
++ */
++ if (IS_ENABLED(CONFIG_ARM64)) {
++ struct acpi_device *adev = acpi_get_acpi_dev(handle);
++
++ if (adev && !strcmp(acpi_device_hid(adev), "APMC0D08"))
++ ctx.skip_producer_check = true;
++ }
+ acpi_walk_resources(handle, METHOD_NAME__CRS, acpi_irq_parse_one_cb, &ctx);
+ return ctx.rc;
+ }
+diff --git a/drivers/acpi/scan.c b/drivers/acpi/scan.c
+index 9a7ac2eb9ce0..6556c3d7b269 100644
+--- a/drivers/acpi/scan.c
++++ b/drivers/acpi/scan.c
+@@ -1794,6 +1794,15 @@ static bool acpi_device_enumeration_by_parent(struct acpi_device *device)
+ if (!acpi_match_device_ids(device, ignore_serial_bus_ids))
+ return false;
+
++ /*
++ * Firmware on some arm64 X-Gene platforms will make the UART
++ * device appear as both a UART and a slave of that UART. Just
++ * bail out here for X-Gene UARTs.
++ */
++ if (IS_ENABLED(CONFIG_ARM64) &&
++ !strcmp(acpi_device_hid(device), "APMC0D08"))
++ return false;
++
+ INIT_LIST_HEAD(&resource_list);
+ acpi_dev_get_resources(device, &resource_list,
+ acpi_check_serial_bus_slave,
+diff --git a/drivers/ata/libahci.c b/drivers/ata/libahci.c
+index 6d72eb017b49..0a6701eb8d37 100644
+--- a/drivers/ata/libahci.c
++++ b/drivers/ata/libahci.c
+@@ -727,6 +727,24 @@ int ahci_stop_engine(struct ata_port *ap)
+ tmp &= ~PORT_CMD_START;
+ writel(tmp, port_mmio + PORT_CMD);
+
++#ifdef CONFIG_ARM64
++ /* Rev Ax of Cavium CN99XX needs a hack for port stop */
++ if (dev_is_pci(ap->host->dev) &&
++ to_pci_dev(ap->host->dev)->vendor == 0x14e4 &&
++ to_pci_dev(ap->host->dev)->device == 0x9027 &&
++ midr_is_cpu_model_range(read_cpuid_id(),
++ MIDR_CPU_MODEL(ARM_CPU_IMP_BRCM, BRCM_CPU_PART_VULCAN),
++ MIDR_CPU_VAR_REV(0, 0),
++ MIDR_CPU_VAR_REV(0, MIDR_REVISION_MASK))) {
++ tmp = readl(hpriv->mmio + 0x8000);
++ udelay(100);
++ writel(tmp | (1 << 26), hpriv->mmio + 0x8000);
++ udelay(100);
++ writel(tmp & ~(1 << 26), hpriv->mmio + 0x8000);
++ dev_warn(ap->host->dev, "CN99XX SATA reset workaround applied\n");
++ }
++#endif
++
+ /* wait for engine to stop. This could be as long as 500 msec */
+ tmp = ata_wait_register(ap, port_mmio + PORT_CMD,
+ PORT_CMD_LIST_ON, PORT_CMD_LIST_ON, 1, 500);
+diff --git a/drivers/char/ipmi/ipmi_dmi.c b/drivers/char/ipmi/ipmi_dmi.c
+index 505e32911c34..26f7ee0ccf40 100644
+--- a/drivers/char/ipmi/ipmi_dmi.c
++++ b/drivers/char/ipmi/ipmi_dmi.c
+@@ -215,6 +215,21 @@ static int __init scan_for_dmi_ipmi(void)
+ {
+ const struct dmi_device *dev = NULL;
+
++#ifdef CONFIG_ARM64
++ /* RHEL-only
++ * If this is ARM-based HPE m400, return now, because that platform
++ * reports the host-side ipmi address as intel port-io space, which
++ * does not exist in the ARM architecture.
++ */
++ const char *dmistr = dmi_get_system_info(DMI_PRODUCT_NAME);
++
++ if (dmistr && (strcmp("ProLiant m400 Server", dmistr) == 0)) {
++ pr_debug("%s does not support host ipmi\n", dmistr);
++ return 0;
++ }
++ /* END RHEL-only */
++#endif
++
+ while ((dev = dmi_find_device(DMI_DEV_TYPE_IPMI, NULL, dev)))
+ dmi_decode_ipmi((const struct dmi_header *) dev->device_data);
+
+diff --git a/drivers/char/ipmi/ipmi_msghandler.c b/drivers/char/ipmi/ipmi_msghandler.c
+index ab4c85f3d6fe..92de1165f6ef 100644
+--- a/drivers/char/ipmi/ipmi_msghandler.c
++++ b/drivers/char/ipmi/ipmi_msghandler.c
+@@ -34,6 +34,7 @@
+ #include <linux/uuid.h>
+ #include <linux/nospec.h>
+ #include <linux/vmalloc.h>
++#include <linux/dmi.h>
+ #include <linux/delay.h>
+
+ #define IPMI_DRIVER_VERSION "39.2"
+@@ -5643,8 +5644,21 @@ static int __init ipmi_init_msghandler_mod(void)
+ {
+ int rv;
+
+- pr_info("version " IPMI_DRIVER_VERSION "\n");
++#ifdef CONFIG_ARM64
++ /* RHEL-only
++ * If this is ARM-based HPE m400, return now, because that platform
++ * reports the host-side ipmi address as intel port-io space, which
++ * does not exist in the ARM architecture.
++ */
++ const char *dmistr = dmi_get_system_info(DMI_PRODUCT_NAME);
+
++ if (dmistr && (strcmp("ProLiant m400 Server", dmistr) == 0)) {
++ pr_debug("%s does not support host ipmi\n", dmistr);
++ return -ENOSYS;
++ }
++ /* END RHEL-only */
++#endif
++ pr_info("version " IPMI_DRIVER_VERSION "\n");
+ mutex_lock(&ipmi_interfaces_mutex);
+ rv = ipmi_register_driver();
+ mutex_unlock(&ipmi_interfaces_mutex);
+diff --git a/drivers/char/random.c b/drivers/char/random.c
+index b4da1fb976c1..1e112e2b405b 100644
+--- a/drivers/char/random.c
++++ b/drivers/char/random.c
+@@ -51,9 +51,11 @@
+ #include <linux/completion.h>
+ #include <linux/uuid.h>
+ #include <linux/uaccess.h>
++#include <linux/rcupdate.h>
+ #include <linux/suspend.h>
+ #include <linux/siphash.h>
+ #include <linux/sched/isolation.h>
++#include <linux/fips.h>
+ #include <crypto/chacha.h>
+ #include <crypto/blake2s.h>
+ #include <vdso/datapage.h>
+@@ -320,6 +322,11 @@ static void crng_fast_key_erasure(u8 key[CHACHA_KEY_SIZE],
+ memzero_explicit(first_block, sizeof(first_block));
+ }
+
++/*
++ * Hook for external RNG.
++ */
++static const struct random_extrng __rcu *extrng;
++
+ /*
+ * This function returns a ChaCha state that you may use for generating
+ * random data. It also returns up to 32 bytes on its own of random data
+@@ -732,7 +739,8 @@ static void __cold _credit_init_bits(size_t bits)
+ queue_work(system_dfl_wq, &set_ready);
+ atomic_notifier_call_chain(&random_ready_notifier, 0, NULL);
+ if (IS_ENABLED(CONFIG_VDSO_GETRANDOM))
+- WRITE_ONCE(vdso_k_rng_data->is_ready, true);
++ if (!fips_enabled)
++ WRITE_ONCE(vdso_k_rng_data->is_ready, true);
+ wake_up_interruptible(&crng_init_wait);
+ kill_fasync(&fasync, SIGIO, POLL_IN);
+ pr_notice("crng init done\n");
+@@ -751,6 +759,9 @@ static void __cold _credit_init_bits(size_t bits)
+ }
+
+
++static const struct file_operations extrng_random_fops;
++static const struct file_operations extrng_urandom_fops;
++
+ /**********************************************************************
+ *
+ * Entropy collection routines.
+@@ -967,6 +978,19 @@ void __init add_bootloader_randomness(const void *buf, size_t len)
+ credit_init_bits(len * 8);
+ }
+
++void random_register_extrng(const struct random_extrng *rng)
++{
++ rcu_assign_pointer(extrng, rng);
++}
++EXPORT_SYMBOL_GPL(random_register_extrng);
++
++void random_unregister_extrng(void)
++{
++ RCU_INIT_POINTER(extrng, NULL);
++ synchronize_rcu();
++}
++EXPORT_SYMBOL_GPL(random_unregister_extrng);
++
+ #if IS_ENABLED(CONFIG_VMGENID)
+ static BLOCKING_NOTIFIER_HEAD(vmfork_chain);
+
+@@ -1381,6 +1405,7 @@ SYSCALL_DEFINE3(getrandom, char __user *, ubuf, size_t, len, unsigned int, flags
+ {
+ struct iov_iter iter;
+ int ret;
++ const struct random_extrng *rng;
+
+ if (flags & ~(GRND_NONBLOCK | GRND_RANDOM | GRND_INSECURE))
+ return -EINVAL;
+@@ -1392,6 +1417,21 @@ SYSCALL_DEFINE3(getrandom, char __user *, ubuf, size_t, len, unsigned int, flags
+ if ((flags & (GRND_INSECURE | GRND_RANDOM)) == (GRND_INSECURE | GRND_RANDOM))
+ return -EINVAL;
+
++ rcu_read_lock();
++ rng = rcu_dereference(extrng);
++ if (rng && !try_module_get(rng->owner))
++ rng = NULL;
++ rcu_read_unlock();
++
++ if (rng) {
++ ret = import_ubuf(ITER_DEST, ubuf, len, &iter);
++ if (unlikely(ret))
++ return ret;
++ ret = rng->extrng_read_iter(&iter, !!(flags & GRND_RANDOM));
++ module_put(rng->owner);
++ return ret;
++ }
++
+ if (!crng_ready() && !(flags & GRND_INSECURE)) {
+ if (flags & GRND_NONBLOCK)
+ return -EAGAIN;
+@@ -1412,6 +1452,12 @@ static __poll_t random_poll(struct file *file, poll_table *wait)
+ return crng_ready() ? EPOLLIN | EPOLLRDNORM : EPOLLOUT | EPOLLWRNORM;
+ }
+
++static __poll_t extrng_poll(struct file *file, poll_table * wait)
++{
++ /* extrng pool is always full, always read, no writes */
++ return EPOLLIN | EPOLLRDNORM;
++}
++
+ static ssize_t write_pool_user(struct iov_iter *iter)
+ {
+ u8 block[BLAKE2S_BLOCK_SIZE];
+@@ -1552,7 +1598,58 @@ static int random_fasync(int fd, struct file *filp, int on)
+ return fasync_helper(fd, filp, on, &fasync);
+ }
+
++static int random_open(struct inode *inode, struct file *filp)
++{
++ const struct random_extrng *rng;
++
++ rcu_read_lock();
++ rng = rcu_dereference(extrng);
++ if (rng && !try_module_get(rng->owner))
++ rng = NULL;
++ rcu_read_unlock();
++
++ if (!rng)
++ return 0;
++
++ filp->f_op = &extrng_random_fops;
++ filp->private_data = rng->owner;
++
++ return 0;
++}
++
++static int urandom_open(struct inode *inode, struct file *filp)
++{
++ const struct random_extrng *rng;
++
++ rcu_read_lock();
++ rng = rcu_dereference(extrng);
++ if (rng && !try_module_get(rng->owner))
++ rng = NULL;
++ rcu_read_unlock();
++
++ if (!rng)
++ return 0;
++
++ filp->f_op = &extrng_urandom_fops;
++ filp->private_data = rng->owner;
++
++ return 0;
++}
++
++static int extrng_release(struct inode *inode, struct file *filp)
++{
++ module_put(filp->private_data);
++ return 0;
++}
++
++static ssize_t
++extrng_read_iter(struct kiocb *kiocb, struct iov_iter *iter)
++{
++ return rcu_dereference_raw(extrng)->extrng_read_iter(iter, false);
++}
++
+ const struct file_operations random_fops = {
++ .open = random_open,
+ .read_iter = random_read_iter,
+ .write_iter = random_write_iter,
+ .poll = random_poll,
+@@ -1565,6 +1662,7 @@ const struct file_operations random_fops = {
+ };
+
+ const struct file_operations urandom_fops = {
++ .open = urandom_open,
+ .read_iter = urandom_read_iter,
+ .write_iter = random_write_iter,
+ .unlocked_ioctl = random_ioctl,
+@@ -1575,6 +1673,32 @@ const struct file_operations urandom_fops = {
+ .splice_write = iter_file_splice_write,
+ };
+
++static const struct file_operations extrng_random_fops = {
++ .open = random_open,
++ .read_iter = extrng_read_iter,
++ .write_iter = random_write_iter,
++ .poll = extrng_poll,
++ .unlocked_ioctl = random_ioctl,
++ .compat_ioctl = compat_ptr_ioctl,
++ .fasync = random_fasync,
++ .llseek = noop_llseek,
++ .release = extrng_release,
++ .splice_read = copy_splice_read,
++ .splice_write = iter_file_splice_write,
++};
++
++static const struct file_operations extrng_urandom_fops = {
++ .open = urandom_open,
++ .read_iter = extrng_read_iter,
++ .write_iter = random_write_iter,
++ .unlocked_ioctl = random_ioctl,
++ .compat_ioctl = compat_ptr_ioctl,
++ .fasync = random_fasync,
++ .llseek = noop_llseek,
++ .release = extrng_release,
++ .splice_read = copy_splice_read,
++ .splice_write = iter_file_splice_write,
++};
+
+ /********************************************************************
+ *
+diff --git a/drivers/firmware/efi/Makefile b/drivers/firmware/efi/Makefile
+index 8efbcf699e4f..96d5a1ca981d 100644
+--- a/drivers/firmware/efi/Makefile
++++ b/drivers/firmware/efi/Makefile
+@@ -25,6 +25,7 @@ subdir-$(CONFIG_EFI_STUB) += libstub
+ obj-$(CONFIG_EFI_BOOTLOADER_CONTROL) += efibc.o
+ obj-$(CONFIG_EFI_TEST) += test/
+ obj-$(CONFIG_EFI_DEV_PATH_PARSER) += dev-path-parser.o
++obj-$(CONFIG_EFI) += secureboot.o
+ obj-$(CONFIG_APPLE_PROPERTIES) += apple-properties.o
+ obj-$(CONFIG_EFI_RCI2_TABLE) += rci2-table.o
+ obj-$(CONFIG_EFI_EMBEDDED_FIRMWARE) += embedded-firmware.o
+diff --git a/drivers/firmware/efi/efi.c b/drivers/firmware/efi/efi.c
+index 0327a39d31fa..5b5332b4de78 100644
+--- a/drivers/firmware/efi/efi.c
++++ b/drivers/firmware/efi/efi.c
+@@ -33,6 +33,7 @@
+ #include <linux/memblock.h>
+ #include <linux/security.h>
+ #include <linux/notifier.h>
++#include <linux/bsearch.h>
+
+ #include <asm/early_ioremap.h>
+
+@@ -1017,40 +1018,101 @@ int efi_mem_type(unsigned long phys_addr)
+ return md.type;
+ }
+
++struct efi_error_code {
++ efi_status_t status;
++ int errno;
++ const char *description;
++};
++
++static const struct efi_error_code efi_error_codes[] = {
++ { EFI_SUCCESS, 0, "Success"},
++#if 0
++ { EFI_LOAD_ERROR, -EPICK_AN_ERRNO, "Load Error"},
++#endif
++ { EFI_INVALID_PARAMETER, -EINVAL, "Invalid Parameter"},
++ { EFI_UNSUPPORTED, -ENOSYS, "Unsupported"},
++ { EFI_BAD_BUFFER_SIZE, -ENOSPC, "Bad Buffer Size"},
++ { EFI_BUFFER_TOO_SMALL, -ENOSPC, "Buffer Too Small"},
++ { EFI_NOT_READY, -EAGAIN, "Not Ready"},
++ { EFI_DEVICE_ERROR, -EIO, "Device Error"},
++ { EFI_WRITE_PROTECTED, -EROFS, "Write Protected"},
++ { EFI_OUT_OF_RESOURCES, -ENOMEM, "Out of Resources"},
++#if 0
++ { EFI_VOLUME_CORRUPTED, -EPICK_AN_ERRNO, "Volume Corrupt"},
++ { EFI_VOLUME_FULL, -EPICK_AN_ERRNO, "Volume Full"},
++ { EFI_NO_MEDIA, -EPICK_AN_ERRNO, "No Media"},
++ { EFI_MEDIA_CHANGED, -EPICK_AN_ERRNO, "Media changed"},
++#endif
++ { EFI_NOT_FOUND, -ENOENT, "Not Found"},
++#if 0
++ { EFI_ACCESS_DENIED, -EPICK_AN_ERRNO, "Access Denied"},
++ { EFI_NO_RESPONSE, -EPICK_AN_ERRNO, "No Response"},
++ { EFI_NO_MAPPING, -EPICK_AN_ERRNO, "No mapping"},
++ { EFI_TIMEOUT, -EPICK_AN_ERRNO, "Time out"},
++ { EFI_NOT_STARTED, -EPICK_AN_ERRNO, "Not started"},
++ { EFI_ALREADY_STARTED, -EPICK_AN_ERRNO, "Already started"},
++#endif
++ { EFI_ABORTED, -EINTR, "Aborted"},
++#if 0
++ { EFI_ICMP_ERROR, -EPICK_AN_ERRNO, "ICMP Error"},
++ { EFI_TFTP_ERROR, -EPICK_AN_ERRNO, "TFTP Error"},
++ { EFI_PROTOCOL_ERROR, -EPICK_AN_ERRNO, "Protocol Error"},
++ { EFI_INCOMPATIBLE_VERSION, -EPICK_AN_ERRNO, "Incompatible Version"},
++#endif
++ { EFI_SECURITY_VIOLATION, -EACCES, "Security Policy Violation"},
++#if 0
++ { EFI_CRC_ERROR, -EPICK_AN_ERRNO, "CRC Error"},
++ { EFI_END_OF_MEDIA, -EPICK_AN_ERRNO, "End of Media"},
++ { EFI_END_OF_FILE, -EPICK_AN_ERRNO, "End of File"},
++ { EFI_INVALID_LANGUAGE, -EPICK_AN_ERRNO, "Invalid Languages"},
++ { EFI_COMPROMISED_DATA, -EPICK_AN_ERRNO, "Compromised Data"},
++
++ // warnings
++ { EFI_WARN_UNKOWN_GLYPH, -EPICK_AN_ERRNO, "Warning Unknown Glyph"},
++ { EFI_WARN_DELETE_FAILURE, -EPICK_AN_ERRNO, "Warning Delete Failure"},
++ { EFI_WARN_WRITE_FAILURE, -EPICK_AN_ERRNO, "Warning Write Failure"},
++ { EFI_WARN_BUFFER_TOO_SMALL, -EPICK_AN_ERRNO, "Warning Buffer Too Small"},
++#endif
++};
++
++static int
++efi_status_cmp_bsearch(const void *key, const void *item)
++{
++ u64 status = (u64)(uintptr_t)key;
++ struct efi_error_code *code = (struct efi_error_code *)item;
++
++ if (status < code->status)
++ return -1;
++ if (status > code->status)
++ return 1;
++ return 0;
++}
++
+ int efi_status_to_err(efi_status_t status)
+ {
+- int err;
+-
+- switch (status) {
+- case EFI_SUCCESS:
+- err = 0;
+- break;
+- case EFI_INVALID_PARAMETER:
+- err = -EINVAL;
+- break;
+- case EFI_OUT_OF_RESOURCES:
+- err = -ENOSPC;
+- break;
+- case EFI_DEVICE_ERROR:
+- err = -EIO;
+- break;
+- case EFI_WRITE_PROTECTED:
+- err = -EROFS;
+- break;
+- case EFI_SECURITY_VIOLATION:
+- err = -EACCES;
+- break;
+- case EFI_NOT_FOUND:
+- err = -ENOENT;
+- break;
+- case EFI_ABORTED:
+- err = -EINTR;
+- break;
+- default:
+- err = -EINVAL;
+- }
++ struct efi_error_code *found;
++ size_t num = sizeof(efi_error_codes) / sizeof(struct efi_error_code);
+
+- return err;
++ found = bsearch((void *)(uintptr_t)status, efi_error_codes,
++ num, sizeof(struct efi_error_code),
++ efi_status_cmp_bsearch);
++ if (!found)
++ return -EINVAL;
++ return found->errno;
++}
++
++const char *
++efi_status_to_str(efi_status_t status)
++{
++ struct efi_error_code *found;
++ size_t num = sizeof(efi_error_codes) / sizeof(struct efi_error_code);
++
++ found = bsearch((void *)(uintptr_t)status, efi_error_codes,
++ num, sizeof(struct efi_error_code),
++ efi_status_cmp_bsearch);
++ if (!found)
++ return "Unknown error code";
++ return found->description;
+ }
+ EXPORT_SYMBOL_GPL(efi_status_to_err);
+
+diff --git a/drivers/firmware/efi/libstub/fdt.c b/drivers/firmware/efi/libstub/fdt.c
+index 23b3543d3041..0d08a549a10b 100644
+--- a/drivers/firmware/efi/libstub/fdt.c
++++ b/drivers/firmware/efi/libstub/fdt.c
+@@ -132,6 +132,11 @@ static efi_status_t update_fdt(void *orig_fdt, unsigned long orig_fdt_size,
+ }
+ }
+
++ fdt_val32 = cpu_to_fdt32((u32)efi_get_secureboot());
++ status = fdt_setprop_var(fdt, node, "secure-boot-mode", fdt_val32);
++ if (status)
++ goto fdt_set_fail;
++
+ /* Shrink the FDT back to its minimum size: */
+ fdt_pack(fdt);
+
+diff --git a/drivers/firmware/efi/libstub/secureboot.c b/drivers/firmware/efi/libstub/secureboot.c
+index 516f4f0069bd..380354755108 100644
+--- a/drivers/firmware/efi/libstub/secureboot.c
++++ b/drivers/firmware/efi/libstub/secureboot.c
+@@ -29,10 +29,13 @@ enum efi_secureboot_mode efi_get_secureboot(void)
+ {
+ u32 attr;
+ unsigned long size;
+- enum efi_secureboot_mode mode;
++ static enum efi_secureboot_mode mode;
+ efi_status_t status;
+ u8 moksbstate;
+
++ if (mode != efi_secureboot_mode_unset)
++ return mode;
++
+ mode = efi_get_secureboot_mode(get_var);
+ if (mode == efi_secureboot_mode_unknown) {
+ efi_err("Could not determine UEFI Secure Boot status.\n");
+@@ -53,10 +56,13 @@ enum efi_secureboot_mode efi_get_secureboot(void)
+ /* If it fails, we don't care why. Default to secure */
+ if (status != EFI_SUCCESS)
+ goto secure_boot_enabled;
+- if (!(attr & EFI_VARIABLE_NON_VOLATILE) && moksbstate == 1)
+- return efi_secureboot_mode_disabled;
++ if (!(attr & EFI_VARIABLE_NON_VOLATILE) && moksbstate == 1) {
++ mode = efi_secureboot_mode_disabled;
++ return mode;
++ }
+
+ secure_boot_enabled:
+ efi_info("UEFI Secure Boot is enabled.\n");
+- return efi_secureboot_mode_enabled;
++ mode = efi_secureboot_mode_enabled;
++ return mode;
+ }
+diff --git a/drivers/firmware/efi/secureboot.c b/drivers/firmware/efi/secureboot.c
+new file mode 100644
+index 000000000000..de0a3714a5d4
+--- /dev/null
++++ b/drivers/firmware/efi/secureboot.c
+@@ -0,0 +1,38 @@
++/* Core kernel secure boot support.
++ *
++ * Copyright (C) 2017 Red Hat, Inc. All Rights Reserved.
++ * Written by David Howells (dhowells@redhat.com)
++ *
++ * This program is free software; you can redistribute it and/or
++ * modify it under the terms of the GNU General Public Licence
++ * as published by the Free Software Foundation; either version
++ * 2 of the Licence, or (at your option) any later version.
++ */
++
++#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
++
++#include <linux/efi.h>
++#include <linux/kernel.h>
++#include <linux/printk.h>
++
++/*
++ * Decide what to do when UEFI secure boot mode is enabled.
++ */
++void __init efi_set_secure_boot(enum efi_secureboot_mode mode)
++{
++ if (efi_enabled(EFI_BOOT)) {
++ switch (mode) {
++ case efi_secureboot_mode_disabled:
++ pr_info("Secure boot disabled\n");
++ break;
++ case efi_secureboot_mode_enabled:
++ set_bit(EFI_SECURE_BOOT, &efi.flags);
++ pr_info("Secure boot enabled\n");
++ break;
++ default:
++ pr_warn("Secure boot could not be determined (mode %u)\n",
++ mode);
++ break;
++ }
++ }
++}
+diff --git a/drivers/hwtracing/coresight/coresight-etm4x-core.c b/drivers/hwtracing/coresight/coresight-etm4x-core.c
+index 14bb31bd6a0b..0529359d7440 100644
+--- a/drivers/hwtracing/coresight/coresight-etm4x-core.c
++++ b/drivers/hwtracing/coresight/coresight-etm4x-core.c
+@@ -12,6 +12,7 @@
+ #include <linux/init.h>
+ #include <linux/types.h>
+ #include <linux/device.h>
++#include <linux/dmi.h>
+ #include <linux/io.h>
+ #include <linux/err.h>
+ #include <linux/fs.h>
+@@ -2447,6 +2448,16 @@ static const struct amba_id etm4_ids[] = {
+ {},
+ };
+
++static const struct dmi_system_id broken_coresight[] = {
++ {
++ .matches = {
++ DMI_MATCH(DMI_SYS_VENDOR, "HPE"),
++ DMI_MATCH(DMI_PRODUCT_NAME, "Apollo 70"),
++ },
++ },
++ { } /* terminating entry */
++};
++
+ MODULE_DEVICE_TABLE(amba, etm4_ids);
+
+ static struct amba_driver etm4x_amba_driver = {
+@@ -2521,6 +2532,11 @@ static int __init etm4x_init(void)
+ {
+ int ret;
+
++ if (dmi_check_system(broken_coresight)) {
++ pr_info("ETM4 disabled due to firmware bug\n");
++ return 0;
++ }
++
+ ret = etm4_pm_setup();
+
+ /* etm4_pm_setup() does its own cleanup - exit on error */
+@@ -2547,6 +2563,9 @@ static int __init etm4x_init(void)
+
+ static void __exit etm4x_exit(void)
+ {
++ if (dmi_check_system(broken_coresight))
++ return;
++
+ amba_driver_unregister(&etm4x_amba_driver);
+ platform_driver_unregister(&etm4_platform_driver);
+ etm4_pm_clear();
+diff --git a/drivers/iommu/iommu.c b/drivers/iommu/iommu.c
+index e8f13dcebbde..dd7014ca962c 100644
+--- a/drivers/iommu/iommu.c
++++ b/drivers/iommu/iommu.c
+@@ -8,6 +8,7 @@
+
+ #include <linux/amba/bus.h>
+ #include <linux/device.h>
++#include <linux/dmi.h>
+ #include <linux/kernel.h>
+ #include <linux/bits.h>
+ #include <linux/bug.h>
+@@ -3135,6 +3136,27 @@ int iommu_fwspec_add_ids(struct device *dev, const u32 *ids, int num_ids)
+ }
+ EXPORT_SYMBOL_GPL(iommu_fwspec_add_ids);
+
++#ifdef CONFIG_ARM64
++static int __init iommu_quirks(void)
++{
++ const char *vendor, *name;
++
++ vendor = dmi_get_system_info(DMI_SYS_VENDOR);
++ name = dmi_get_system_info(DMI_PRODUCT_NAME);
++
++ if (vendor &&
++ (strncmp(vendor, "GIGABYTE", 8) == 0 && name &&
++ (strncmp(name, "R120", 4) == 0 ||
++ strncmp(name, "R270", 4) == 0))) {
++ pr_warn("Gigabyte %s detected, force iommu passthrough mode", name);
++ iommu_def_domain_type = IOMMU_DOMAIN_IDENTITY;
++ }
++
++ return 0;
++}
++arch_initcall(iommu_quirks);
++#endif
++
+ /**
+ * iommu_setup_default_domain - Set the default_domain for the group
+ * @group: Group to change
+diff --git a/drivers/message/fusion/mptsas.c b/drivers/message/fusion/mptsas.c
+index c362f09a8c55..bcda62d89ecd 100644
+--- a/drivers/message/fusion/mptsas.c
++++ b/drivers/message/fusion/mptsas.c
+@@ -5377,6 +5377,10 @@ static void mptsas_remove(struct pci_dev *pdev)
+ }
+
+ static const struct pci_device_id mptsas_pci_table[] = {
++#ifdef CONFIG_RHEL_DIFFERENCES
++ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_SAS1068,
++ PCI_VENDOR_ID_VMWARE, PCI_ANY_ID },
++#else
+ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_SAS1064,
+ PCI_ANY_ID, PCI_ANY_ID },
+ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_SAS1068,
+@@ -5389,6 +5393,7 @@ static const struct pci_device_id mptsas_pci_table[] = {
+ PCI_ANY_ID, PCI_ANY_ID },
+ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_SAS1068_820XELP,
+ PCI_ANY_ID, PCI_ANY_ID },
++#endif
+ {0} /* Terminating entry */
+ };
+ MODULE_DEVICE_TABLE(pci, mptsas_pci_table);
+diff --git a/drivers/message/fusion/mptspi.c b/drivers/message/fusion/mptspi.c
+index 56892b1f3de2..b0e55913bb2e 100644
+--- a/drivers/message/fusion/mptspi.c
++++ b/drivers/message/fusion/mptspi.c
+@@ -1240,12 +1240,17 @@ static struct spi_function_template mptspi_transport_functions = {
+ */
+
+ static const struct pci_device_id mptspi_pci_table[] = {
++#ifdef CONFIG_RHEL_DIFFERENCES
++ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_53C1030,
++ PCI_VENDOR_ID_VMWARE, PCI_ANY_ID },
++#else
+ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_53C1030,
+ PCI_ANY_ID, PCI_ANY_ID },
+ { PCI_VENDOR_ID_ATTO, MPI_MANUFACTPAGE_DEVID_53C1030,
+ PCI_ANY_ID, PCI_ANY_ID },
+ { PCI_VENDOR_ID_LSI_LOGIC, MPI_MANUFACTPAGE_DEVID_53C1035,
+ PCI_ANY_ID, PCI_ANY_ID },
++#endif
+ {0} /* Terminating entry */
+ };
+ MODULE_DEVICE_TABLE(pci, mptspi_pci_table);
+diff --git a/drivers/net/wireguard/main.c b/drivers/net/wireguard/main.c
+index a00671b58701..eeef2766b8b3 100644
+--- a/drivers/net/wireguard/main.c
++++ b/drivers/net/wireguard/main.c
+@@ -12,6 +12,7 @@
+
+ #include <uapi/linux/wireguard.h>
+
++#include <linux/fips.h>
+ #include <linux/init.h>
+ #include <linux/module.h>
+ #include <net/genetlink.h>
+@@ -21,6 +22,11 @@ static int __init wg_mod_init(void)
+ {
+ int ret;
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++ if (fips_enabled)
++ return -EOPNOTSUPP;
++#endif
++
+ ret = wg_allowedips_slab_init();
+ if (ret < 0)
+ goto err_allowedips;
+diff --git a/drivers/pci/pci-driver.c b/drivers/pci/pci-driver.c
+index f36778e62ac1..7b4dc4aff7c5 100644
+--- a/drivers/pci/pci-driver.c
++++ b/drivers/pci/pci-driver.c
+@@ -19,6 +19,7 @@
+ #include <linux/kexec.h>
+ #include <linux/of_device.h>
+ #include <linux/acpi.h>
++#include <linux/kernel.h>
+ #include <linux/dma-map-ops.h>
+ #include <linux/iommu.h>
+ #include "pci.h"
+@@ -329,7 +330,15 @@ static int local_pci_probe(struct drv_dev_and_id *ddi)
+ */
+ pm_runtime_get_sync(dev);
+ pci_dev->driver = pci_drv;
++
++#ifdef CONFIG_RHEL_DIFFERENCES
++ rc = -EACCES;
++ if (!pci_rh_check_status(pci_dev))
++ rc = pci_drv->probe(pci_dev, ddi->id);
++#else
+ rc = pci_drv->probe(pci_dev, ddi->id);
++#endif
++
+ if (!rc)
+ return rc;
+ if (rc < 0) {
+diff --git a/drivers/pci/quirks.c b/drivers/pci/quirks.c
+index b09f27f7846f..b54fe538511a 100644
+--- a/drivers/pci/quirks.c
++++ b/drivers/pci/quirks.c
+@@ -4496,6 +4496,30 @@ static void quirk_aspeed_pci_bridge_no_alias(struct pci_dev *pdev)
+ }
+ DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_ASPEED, 0x1150, quirk_aspeed_pci_bridge_no_alias);
+
++/*
++ * PCI BAR 5 is not setup correctly for the on-board AHCI controller
++ * on Broadcom's Vulcan processor. Added a quirk to fix BAR 5 by
++ * using BAR 4's resources which are populated correctly and NOT
++ * actually used by the AHCI controller.
++ */
++static void quirk_fix_vulcan_ahci_bars(struct pci_dev *dev)
++{
++ struct resource *r = &dev->resource[4];
++
++ if (!(r->flags & IORESOURCE_MEM) || (r->start == 0))
++ return;
++
++ /* Set BAR5 resource to BAR4 */
++ dev->resource[5] = *r;
++
++ /* Update BAR5 in pci config space */
++ pci_write_config_dword(dev, PCI_BASE_ADDRESS_5, r->start);
++
++ /* Clear BAR4's resource */
++ memset(r, 0, sizeof(*r));
++}
++DECLARE_PCI_FIXUP_HEADER(PCI_VENDOR_ID_BROADCOM, 0x9027, quirk_fix_vulcan_ahci_bars);
++
+ /*
+ * Intersil/Techwell TW686[4589]-based video capture cards have an empty (zero)
+ * class code. Fix it.
+diff --git a/drivers/scsi/hpsa.c b/drivers/scsi/hpsa.c
+index 8edad1830abe..e558acedfa44 100644
+--- a/drivers/scsi/hpsa.c
++++ b/drivers/scsi/hpsa.c
+@@ -82,7 +82,9 @@ MODULE_DESCRIPTION("Driver for HP Smart Array Controller version " \
+ HPSA_DRIVER_VERSION);
+ MODULE_VERSION(HPSA_DRIVER_VERSION);
+ MODULE_LICENSE("GPL");
++#ifndef CONFIG_RHEL_DIFFERENCES
+ MODULE_ALIAS("cciss");
++#endif
+
+ static int hpsa_simple_mode;
+ module_param(hpsa_simple_mode, int, S_IRUGO|S_IWUSR);
+@@ -144,10 +146,12 @@ static const struct pci_device_id hpsa_pci_device_id[] = {
+ {PCI_VENDOR_ID_HP_3PAR, 0x0075, 0x1590, 0x007D},
+ {PCI_VENDOR_ID_HP_3PAR, 0x0075, 0x1590, 0x0088},
+ {PCI_VENDOR_ID_HP, 0x333f, 0x103c, 0x333f},
++#ifndef CONFIG_RHEL_DIFFERENCES
+ {PCI_VENDOR_ID_HP, PCI_ANY_ID, PCI_ANY_ID, PCI_ANY_ID,
+ PCI_CLASS_STORAGE_RAID << 8, 0xffff << 8, 0},
+ {PCI_VENDOR_ID_COMPAQ, PCI_ANY_ID, PCI_ANY_ID, PCI_ANY_ID,
+ PCI_CLASS_STORAGE_RAID << 8, 0xffff << 8, 0},
++#endif
+ {0,}
+ };
+
+diff --git a/drivers/scsi/qla2xxx/qla_os.c b/drivers/scsi/qla2xxx/qla_os.c
+index 72b1c28e4dae..2226c9dffa94 100644
+--- a/drivers/scsi/qla2xxx/qla_os.c
++++ b/drivers/scsi/qla2xxx/qla_os.c
+@@ -8128,6 +8128,7 @@ static const struct pci_error_handlers qla2xxx_err_handler = {
+ };
+
+ static const struct pci_device_id qla2xxx_pci_tbl[] = {
++#ifndef CONFIG_RHEL_DIFFERENCES
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2100) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2200) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2300) },
+@@ -8140,13 +8141,18 @@ static const struct pci_device_id qla2xxx_pci_tbl[] = {
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8432) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP5422) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP5432) },
++#endif
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2532) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2031) },
++#ifndef CONFIG_RHEL_DIFFERENCES
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8001) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8021) },
++#endif
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8031) },
++#ifndef CONFIG_RHEL_DIFFERENCES
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISPF001) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP8044) },
++#endif
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2071) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2271) },
+ { PCI_DEVICE(PCI_VENDOR_ID_QLOGIC, PCI_DEVICE_ID_QLOGIC_ISP2261) },
+diff --git a/drivers/scsi/sd.c b/drivers/scsi/sd.c
+index 599e75f33334..ec52c3a4fa14 100644
+--- a/drivers/scsi/sd.c
++++ b/drivers/scsi/sd.c
+@@ -145,6 +145,13 @@ static void sd_large_pool_destroy(void)
+ }
+ mutex_unlock(&sd_mutex_lock);
+ }
++#ifdef CONFIG_RHEL_DIFFERENCES
++static char sd_probe_type[6] = "async";
++module_param_string(probe, sd_probe_type, sizeof(sd_probe_type),
++ S_IRUGO|S_IWUSR);
++MODULE_PARM_DESC(probe, "async or sync. Setting to 'sync' disables asynchronous "
++ "device number assignments (sda, sdb, ...).");
++#endif
+
+ static void sd_disable_discard(struct scsi_disk *sdkp)
+ {
+@@ -4460,6 +4467,11 @@ static int __init init_sd(void)
+ goto err_out_class;
+ }
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++ if (!strcmp(sd_probe_type, "sync"))
++ sd_template.gendrv.probe_type = PROBE_FORCE_SYNCHRONOUS;
++#endif
++
+ err = scsi_register_driver(&sd_template);
+ if (err)
+ goto err_out_driver;
+diff --git a/drivers/usb/core/hub.c b/drivers/usb/core/hub.c
+index d92bf887739d..039fd5620282 100644
+--- a/drivers/usb/core/hub.c
++++ b/drivers/usb/core/hub.c
+@@ -5902,6 +5902,13 @@ static void hub_event(struct work_struct *work)
+ (u16) hub->change_bits[0],
+ (u16) hub->event_bits[0]);
+
++ /* Don't disconnect USB-SATA on TrimSlice */
++ if (strcmp(dev_name(hdev->bus->controller), "tegra-ehci.0") == 0) {
++ if ((hdev->state == 7) && (hub->change_bits[0] == 0) &&
++ (hub->event_bits[0] == 0x2))
++ hub->event_bits[0] = 0;
++ }
++
+ /* Lock the device, then check to see if we were
+ * disconnected while waiting for the lock to succeed. */
+ usb_lock_device(hdev);
+diff --git a/fs/afs/main.c b/fs/afs/main.c
+index 7a883c59976f..907ec60e500a 100644
+--- a/fs/afs/main.c
++++ b/fs/afs/main.c
+@@ -194,6 +194,9 @@ static int __init afs_init(void)
+ goto error_proc;
+ }
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++ mark_partner_supported(KBUILD_MODNAME, THIS_MODULE);
++#endif
+ return ret;
+
+ error_proc:
+diff --git a/fs/erofs/super.c b/fs/erofs/super.c
+index 770808685934..a99921aaebde 100644
+--- a/fs/erofs/super.c
++++ b/fs/erofs/super.c
+@@ -599,6 +599,9 @@ static int erofs_fc_fill_super(struct super_block *sb, struct fs_context *fc)
+ {
+ struct inode *inode;
+ struct erofs_sb_info *sbi = EROFS_SB(sb);
++#ifdef CONFIG_RHEL_DIFFERENCES
++ static bool printed = false;
++#endif
+ int err;
+
+ sb->s_magic = EROFS_SUPER_MAGIC;
+@@ -738,6 +741,12 @@ static int erofs_fc_fill_super(struct super_block *sb, struct fs_context *fc)
+
+ sbi->dir_ra_bytes = EROFS_DIR_RA_BYTES;
+ erofs_info(sb, "mounted with root inode @ nid %llu.", sbi->root_nid);
++#ifdef CONFIG_RHEL_DIFFERENCES
++ if (!printed) {
++ mark_tech_preview("EROFS filesystem", NULL);
++ printed = true;
++ }
++#endif
+ return 0;
+ }
+
+diff --git a/fs/ext4/super.c b/fs/ext4/super.c
+index 4b6112e5d6c5..263615d17120 100644
+--- a/fs/ext4/super.c
++++ b/fs/ext4/super.c
+@@ -5747,6 +5747,17 @@ static int __ext4_fill_super(struct fs_context *fc, struct super_block *sb)
+ atomic_set(&sbi->s_warning_count, 0);
+ atomic_set(&sbi->s_msg_count, 0);
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++ if (ext4_has_feature_verity(sb)) {
++ static bool printed = false;
++
++ if (!printed) {
++ mark_tech_preview("fs-verity on ext4", NULL);
++ printed = true;
++ }
++ }
++#endif
++
+ /* Register sysfs after all initializations are complete. */
+ err = ext4_register_sysfs(sb);
+ if (err)
+diff --git a/include/linux/crypto.h b/include/linux/crypto.h
+index b7c97f1c47c9..0a484f45b24a 100644
+--- a/include/linux/crypto.h
++++ b/include/linux/crypto.h
+@@ -152,6 +152,8 @@
+ #define CRYPTO_TFM_REQ_MAY_BACKLOG 0x00000400
+ #define CRYPTO_TFM_REQ_ON_STACK 0x00000800
+
++#define CRYPTO_TFM_FIPS_COMPLIANCE 0x80000000
++
+ /*
+ * Miscellaneous stuff.
+ */
+diff --git a/include/linux/efi.h b/include/linux/efi.h
+index ccbc35479684..8eb9a1276ba7 100644
+--- a/include/linux/efi.h
++++ b/include/linux/efi.h
+@@ -45,6 +45,8 @@ struct screen_info;
+ #define EFI_ABORTED (21 | (1UL << (BITS_PER_LONG-1)))
+ #define EFI_SECURITY_VIOLATION (26 | (1UL << (BITS_PER_LONG-1)))
+
++#define EFI_IS_ERROR(x) ((x) & (1UL << (BITS_PER_LONG-1)))
++
+ typedef unsigned long efi_status_t;
+ typedef u8 efi_bool_t;
+ typedef u16 efi_char16_t; /* UNICODE character */
+@@ -847,6 +849,14 @@ extern int __init parse_efi_signature_list(
+ #define EFI_MEM_ATTR 9 /* Did firmware publish an EFI_MEMORY_ATTRIBUTES table? */
+ #define EFI_MEM_NO_SOFT_RESERVE 10 /* Is the kernel configured to ignore soft reservations? */
+ #define EFI_PRESERVE_BS_REGIONS 11 /* Are EFI boot-services memory segments available? */
++#define EFI_SECURE_BOOT 12 /* Are we in Secure Boot mode? */
++
++enum efi_secureboot_mode {
++ efi_secureboot_mode_unset,
++ efi_secureboot_mode_unknown,
++ efi_secureboot_mode_disabled,
++ efi_secureboot_mode_enabled,
++};
+
+ #ifdef CONFIG_EFI
+ /*
+@@ -858,6 +868,8 @@ static inline bool efi_enabled(int feature)
+ }
+ extern void efi_reboot(enum reboot_mode reboot_mode, const char *__unused);
+
++extern void __init efi_set_secure_boot(enum efi_secureboot_mode mode);
++
+ bool __pure __efi_soft_reserve_enabled(void);
+
+ static inline bool __pure efi_soft_reserve_enabled(void)
+@@ -879,6 +891,8 @@ static inline bool efi_enabled(int feature)
+ static inline void
+ efi_reboot(enum reboot_mode reboot_mode, const char *__unused) {}
+
++static inline void efi_set_secure_boot(enum efi_secureboot_mode mode) {}
++
+ static inline bool efi_soft_reserve_enabled(void)
+ {
+ return false;
+@@ -893,6 +907,7 @@ static inline void efi_find_mirror(void) {}
+ #endif
+
+ extern int efi_status_to_err(efi_status_t status);
++extern const char *efi_status_to_str(efi_status_t status);
+
+ /*
+ * Variable Attributes
+@@ -1110,13 +1125,6 @@ extern unsigned long efi_call_virt_save_flags(void);
+
+ void efi_runtime_assert_lock_held(void);
+
+-enum efi_secureboot_mode {
+- efi_secureboot_mode_unset,
+- efi_secureboot_mode_unknown,
+- efi_secureboot_mode_disabled,
+- efi_secureboot_mode_enabled,
+-};
+-
+ static inline
+ enum efi_secureboot_mode efi_get_secureboot_mode(efi_get_variable_t *get_var)
+ {
+diff --git a/include/linux/kernel.h b/include/linux/kernel.h
+index e5570a16cbb1..82945b474e2e 100644
+--- a/include/linux/kernel.h
++++ b/include/linux/kernel.h
+@@ -194,4 +194,32 @@ extern enum system_states system_state;
+ # define REBUILD_DUE_TO_DYNAMIC_FTRACE
+ #endif
+
++/* Permissions on a sysfs file: you didn't miss the 0 prefix did you? */
++#define VERIFY_OCTAL_PERMISSIONS(perms) \
++ (BUILD_BUG_ON_ZERO((perms) < 0) + \
++ BUILD_BUG_ON_ZERO((perms) > 0777) + \
++ /* USER_READABLE >= GROUP_READABLE >= OTHER_READABLE */ \
++ BUILD_BUG_ON_ZERO((((perms) >> 6) & 4) < (((perms) >> 3) & 4)) + \
++ BUILD_BUG_ON_ZERO((((perms) >> 3) & 4) < ((perms) & 4)) + \
++ /* USER_WRITABLE >= GROUP_WRITABLE */ \
++ BUILD_BUG_ON_ZERO((((perms) >> 6) & 2) < (((perms) >> 3) & 2)) + \
++ /* OTHER_WRITABLE? Generally considered a bad idea. */ \
++ BUILD_BUG_ON_ZERO((perms) & 2) + \
++ (perms))
++
++struct module;
++
++#ifdef CONFIG_RHEL_DIFFERENCES
++void mark_hardware_unmaintained(const char *driver_name, char *fmt, ...);
++void mark_hardware_deprecated(const char *driver_name, char *fmt, ...);
++void mark_tech_preview(const char *msg, struct module *mod);
++void mark_partner_supported(const char *msg, struct module *mod);
++void init_rh_check_status(char *fn_name);
++#else
++static inline void mark_hardware_unmaintained(const char *driver_name, char *fmt, ...) { }
++static inline void mark_hardware_deprecated(const char *driver_name, char *fmt, ...) { }
++static inline void mark_tech_preview(const char *msg, struct module *mod) { }
++static inline void mark_partner_supported(const char *msg, struct module *mod) { }
++#endif
++
+ #endif
+diff --git a/include/linux/lsm_hook_defs.h b/include/linux/lsm_hook_defs.h
+index 65c9609ec207..2cc243ec73f6 100644
+--- a/include/linux/lsm_hook_defs.h
++++ b/include/linux/lsm_hook_defs.h
+@@ -456,6 +456,7 @@ LSM_HOOK(int, 0, bpf_token_capable, const struct bpf_token *token, int cap)
+
+ LSM_HOOK(int, 0, locked_down, enum lockdown_reason what)
+
++
+ #ifdef CONFIG_PERF_EVENTS
+ LSM_HOOK(int, 0, perf_event_open, int type)
+ LSM_HOOK(int, 0, perf_event_alloc, struct perf_event *event)
+diff --git a/include/linux/module.h b/include/linux/module.h
+index 7566815fabbe..f18af7fdb45b 100644
+--- a/include/linux/module.h
++++ b/include/linux/module.h
+@@ -413,6 +413,7 @@ struct module {
+ struct module_attribute *modinfo_attrs;
+ const char *version;
+ const char *srcversion;
++ const char *rhelversion;
+ const char *imported_namespaces;
+ struct kobject *holders_dir;
+
+@@ -1020,6 +1021,10 @@ static inline unsigned long find_kallsyms_symbol_value(struct module *mod,
+
+ #endif /* CONFIG_MODULES && CONFIG_KALLSYMS */
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++void module_rh_check_status(const char * module_name);
++#endif
++
+ /* Define __free(module_put) macro for struct module *. */
+ DEFINE_FREE(module_put, struct module *, if (_T) module_put(_T))
+
+diff --git a/include/linux/panic.h b/include/linux/panic.h
+index f1dd417e54b2..95344281ed2c 100644
+--- a/include/linux/panic.h
++++ b/include/linux/panic.h
+@@ -88,7 +88,22 @@ static inline void set_arch_panic_timeout(int timeout, int arch_default_timeout)
+ #define TAINT_RANDSTRUCT 17
+ #define TAINT_TEST 18
+ #define TAINT_FWCTL 19
+-#define TAINT_FLAGS_COUNT 20
++/* Start of Red Hat-specific taint flags */
++#define TAINT_20 20
++#define TAINT_21 21
++#define TAINT_22 22
++#define TAINT_23 23
++#define TAINT_24 24
++#define TAINT_25 25
++#define TAINT_PARTNER_SUPPORTED 26
++#define TAINT_SUPPORT_REMOVED 27
++/* Bits 28 - 31 are reserved for Red Hat use only */
++#define TAINT_RESERVED28 28
++#define TAINT_RESERVED29 29
++#define TAINT_RESERVED30 30
++#define TAINT_UNPRIVILEGED_BPF 31
++/* End of Red Hat-specific taint flags */
++#define TAINT_FLAGS_COUNT 32
+ #define TAINT_FLAGS_MAX ((1UL << TAINT_FLAGS_COUNT) - 1)
+
+ struct taint_flag {
+diff --git a/include/linux/pci.h b/include/linux/pci.h
+index 64b308b6e61c..0967f9be0b54 100644
+--- a/include/linux/pci.h
++++ b/include/linux/pci.h
+@@ -1715,6 +1715,7 @@ int pci_add_dynid(struct pci_driver *drv,
+ unsigned long driver_data);
+ const struct pci_device_id *pci_match_id(const struct pci_device_id *ids,
+ struct pci_dev *dev);
++
+ int pci_scan_bridge(struct pci_bus *bus, struct pci_dev *dev, int max,
+ int pass);
+
+@@ -2879,6 +2880,10 @@ static inline bool pci_is_thunderbolt_attached(struct pci_dev *pdev)
+ return false;
+ }
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++bool pci_rh_check_status(struct pci_dev *pci_dev);
++#endif
++
+ #if defined(CONFIG_PCIEPORTBUS) || defined(CONFIG_EEH) || defined(CONFIG_S390)
+ void pci_uevent_ers(struct pci_dev *pdev, enum pci_ers_result err_type);
+ #endif
+diff --git a/include/linux/random.h b/include/linux/random.h
+index 8a8064dc3970..3238fab8f749 100644
+--- a/include/linux/random.h
++++ b/include/linux/random.h
+@@ -9,6 +9,13 @@
+
+ #include <uapi/linux/random.h>
+
++struct iov_iter;
++
++struct random_extrng {
++ ssize_t (*extrng_read_iter)(struct iov_iter *iter, bool reseed);
++ struct module *owner;
++};
++
+ struct notifier_block;
+
+ void add_device_randomness(const void *buf, size_t len);
+@@ -135,6 +142,9 @@ int random_prepare_cpu(unsigned int cpu);
+ int random_online_cpu(unsigned int cpu);
+ #endif
+
++void random_register_extrng(const struct random_extrng *rng);
++void random_unregister_extrng(void);
++
+ #ifndef MODULE
+ extern const struct file_operations random_fops, urandom_fops;
+ #endif
+diff --git a/include/linux/rh_flags.h b/include/linux/rh_flags.h
+new file mode 100644
+index 000000000000..4bb0f5585df0
+--- /dev/null
++++ b/include/linux/rh_flags.h
+@@ -0,0 +1,34 @@
++/* SPDX-License-Identifier: GPL-2.0 */
++/*
++ * rh_flags.h -- Red Hat flags tracking
++ *
++ * Copyright (c) 2018 Red Hat, Inc. -- Jiri Benc <jbenc@redhat.com>
++ *
++ * The intent of the flag tracking is to provide better and more focused
++ * support. Only those flags that are of a special interest for customer
++ * support should be tracked.
++ *
++ * THE FLAGS DO NOT EXPRESS ANY SUPPORT POLICIES.
++ */
++
++#ifndef _LINUX_RH_FLAGS_H
++#define _LINUX_RH_FLAGS_H
++
++#if defined CONFIG_RHEL_DIFFERENCES
++bool __rh_add_flag(const char *flag_name);
++void rh_print_flags(void);
++
++#define rh_add_flag(flag_name) \
++({ \
++ static bool __mark_once __read_mostly; \
++ bool __ret_mark_once = !__mark_once; \
++ \
++ if (!__mark_once) \
++ __mark_once = __rh_add_flag(flag_name); \
++ unlikely(__ret_mark_once); \
++})
++#else
++static inline void rh_print_flags(void) { }
++static inline void rh_add_flag(const char *flag_name) { }
++#endif
++#endif
+diff --git a/include/linux/rh_kabi.h b/include/linux/rh_kabi.h
+new file mode 100644
+index 000000000000..5139cb2cabdc
+--- /dev/null
++++ b/include/linux/rh_kabi.h
+@@ -0,0 +1,541 @@
++/*
++ * rh_kabi.h - Red Hat kABI abstraction header
++ *
++ * Copyright (c) 2014 Don Zickus
++ * Copyright (c) 2015-2020 Jiri Benc
++ * Copyright (c) 2015 Sabrina Dubroca, Hannes Frederic Sowa
++ * Copyright (c) 2016-2018 Prarit Bhargava
++ * Copyright (c) 2017 Paolo Abeni, Larry Woodman
++ *
++ * This file is released under the GPLv2.
++ * See the file COPYING for more details.
++ *
++ * These kabi macros hide the changes from the kabi checker and from the
++ * process that computes the exported symbols' checksums.
++ * They have 2 variants: one (defined under __GENKSYMS__) used when
++ * generating the checksums, and the other used when building the kernel's
++ * binaries.
++ *
++ * The use of these macros does not guarantee that the usage and modification
++ * of code is correct. As with all Red Hat only changes, an engineer must
++ * explain why the use of the macro is valid in the patch containing the
++ * changes.
++ *
++ */
++
++#ifndef _LINUX_RH_KABI_H
++#define _LINUX_RH_KABI_H
++
++#include <linux/kconfig.h>
++#include <linux/compiler.h>
++#include <linux/stringify.h>
++
++/*
++ * NOTE
++ * Unless indicated otherwise, don't use ';' after these macros as it
++ * messes up the kABI checker by changing what the resulting token string
++ * looks like. Instead let the macros add the ';' so it can be properly
++ * hidden from the kABI checker (mainly for RH_KABI_EXTEND, but applied to
++ * most macros for uniformity).
++ *
++ *
++ * RH_KABI_CONST
++ * Adds a new const modifier to a function parameter preserving the old
++ * checksum.
++ *
++ * RH_KABI_ADD_MODIFIER
++ * Adds a new modifier to a function parameter or a typedef, preserving
++ * the old checksum. Useful e.g. for adding rcu annotations or changing
++ * int to unsigned. Beware that this may change the semantics; if you're
++ * sure this is safe, always explain why binary compatibility with 3rd
++ * party modules is retained.
++ *
++ * RH_KABI_DEPRECATE
++ * Marks the element as deprecated and make it unusable by modules while
++ * keeping a hole in its place to preserve binary compatibility.
++ *
++ * RH_KABI_DEPRECATE_FN
++ * Marks the function pointer as deprecated and make it unusable by modules
++ * while keeping a hole in its place to preserve binary compatibility.
++ *
++ * RH_KABI_EXTEND
++ * Adds a new field to a struct. This must always be added to the end of
++ * the struct. Before using this macro, make sure this is actually safe
++ * to do - there is a number of conditions under which it is *not* safe.
++ * In particular (but not limited to), this macro cannot be used:
++ * - if the struct in question is embedded in another struct, or
++ * - if the struct is allocated by drivers either statically or
++ * dynamically, or
++ * - if the struct is allocated together with driver data (an example of
++ * such behavior is struct net_device or struct request).
++ *
++ * RH_KABI_EXTEND_WITH_SIZE
++ * Adds a new element (usually a struct) to a struct and reserves extra
++ * space for the new element. The provided 'size' is the total space to
++ * be added in longs (i.e. it's 8 * 'size' bytes), including the size of
++ * the added element. It is automatically checked that the new element
++ * does not overflow the reserved space, now nor in the future. However,
++ * no attempt is done to check the content of the added element (struct)
++ * for kABI conformance - kABI checking inside the added element is
++ * effectively switched off.
++ * For any struct being added by RH_KABI_EXTEND_WITH_SIZE, it is
++ * recommended its content to be documented as not covered by kABI
++ * guarantee.
++ *
++ * RH_KABI_FILL_HOLE
++ * Fills a hole in a struct.
++ *
++ * Warning: only use if a hole exists for _all_ arches. Use pahole to verify.
++ *
++ * RH_KABI_RENAME
++ * Renames an element without changing its type. This macro can be used in
++ * bitfields, for example.
++ *
++ * NOTE: this macro does not add the final ';'
++ *
++ * RH_KABI_REPLACE
++ * Replaces the _orig field by the _new field. The size of the occupied
++ * space is preserved, it's fine if the _new field is smaller than the
++ * _orig field. If a _new field is larger or has a different alignment,
++ * compilation will abort.
++ *
++ * RH_KABI_REPLACE_SPLIT
++ * Works the same as RH_KABI_REPLACE but replaces a single _orig field by
++ * multiple new fields. The checks for size and alignment done by
++ * RH_KABI_REPLACE are still applied.
++ *
++ * RH_KABI_HIDE_INCLUDE
++ * Hides the given include file from kABI checksum computations. This is
++ * used when a newly added #include makes a previously opaque struct
++ * visible.
++ *
++ * Example usage:
++ * #include RH_KABI_HIDE_INCLUDE(<linux/poll.h>)
++ *
++ * RH_KABI_FAKE_INCLUDE
++ * Pretends inclusion of the given file for kABI checksum computations.
++ * This is used when upstream removed a particular #include but that made
++ * some structures opaque that were previously visible and is causing kABI
++ * checker failures.
++ *
++ * Example usage:
++ * #include RH_KABI_FAKE_INCLUDE(<linux/rhashtable.h>)
++ *
++ * RH_KABI_RESERVE
++ * Adds a reserved field to a struct. This is done prior to kABI freeze
++ * for structs that cannot be expanded later using RH_KABI_EXTEND (for
++ * example because they are embedded in another struct or because they are
++ * allocated by drivers or because they use unusual memory layout). The
++ * size of the reserved field is 'unsigned long' and is assumed to be
++ * 8 bytes.
++ *
++ * The argument is a number unique for the given struct; usually, multiple
++ * RH_KABI_RESERVE macros are added to a struct with numbers starting from
++ * one.
++ *
++ * Example usage:
++ * struct foo {
++ * int a;
++ * RH_KABI_RESERVE(1)
++ * RH_KABI_RESERVE(2)
++ * RH_KABI_RESERVE(3)
++ * RH_KABI_RESERVE(4)
++ * };
++ *
++ * RH_KABI_USE
++ * Uses a previously reserved field or multiple fields. The arguments are
++ * one or more numbers assigned to RH_KABI_RESERVE, followed by a field to
++ * be put in their place. The compiler ensures that the new field is not
++ * larger than the reserved area.
++ *
++ * Example usage:
++ * struct foo {
++ * int a;
++ * RH_KABI_USE(1, int b)
++ * RH_KABI_USE(2, 3, int c[3])
++ * RH_KABI_RESERVE(4)
++ * };
++ *
++ * RH_KABI_USE_SPLIT
++ * Works the same as RH_KABI_USE but replaces a single reserved field by
++ * multiple new fields.
++ *
++ * RH_KABI_AUX_EMBED
++ * RH_KABI_AUX_PTR
++ * Adds an extenstion of a struct in the form of "auxiliary structure".
++ * This is done prior to kABI freeze for structs that cannot be expanded
++ * later using RH_KABI_EXTEND. See also RH_KABI_RESERVED, these two
++ * approaches can (and often are) combined.
++ *
++ * To use this for 'struct foo' (the "base structure"), define a new
++ * structure called 'struct foo_rh'; this new struct is called "auxiliary
++ * structure". Then add RH_KABI_AUX_EMBED or RH_KABI_AUX_PTR to the end
++ * of the base structure. The argument is the name of the base structure,
++ * without the 'struct' keyword.
++ *
++ * RH_KABI_AUX_PTR stores a pointer to the aux structure in the base
++ * struct. The lifecycle of the aux struct needs to be properly taken
++ * care of.
++ *
++ * RH_KABI_AUX_EMBED embeds the aux struct into the base struct. This
++ * cannot be used when the base struct is itself embedded into another
++ * struct, allocated in an array, etc.
++ *
++ * Both approaches (ptr and embed) work correctly even when the aux struct
++ * is allocated by modules. To ensure this, the code responsible for
++ * allocation/assignment of the aux struct has to properly set the size of
++ * the aux struct; see the RH_KABI_AUX_SET_SIZE and RH_KABI_AUX_INIT_SIZE
++ * macros.
++ *
++ * New fields can be later added to the auxiliary structure, always to its
++ * end. Note the auxiliary structure cannot be shrunk in size later (i.e.,
++ * fields cannot be removed, only deprecated). Any code accessing fields
++ * from the aux struct must guard the access using the RH_KABI_AUX macro.
++ * The access itself is then done via a '_rh' field in the base struct.
++ *
++ * The auxiliary structure is not guaranteed for access by modules unless
++ * explicitly commented as such in the declaration of the aux struct
++ * itself or some of its elements.
++ *
++ * Example:
++ *
++ * struct foo_rh {
++ * int newly_added;
++ * };
++ *
++ * struct foo {
++ * bool big_hammer;
++ * RH_KABI_AUX_PTR(foo)
++ * };
++ *
++ * void use(struct foo *f)
++ * {
++ * if (RH_KABI_AUX(f, foo, newly_added))
++ * f->_rh->newly_added = 123;
++ * else
++ * // the field 'newly_added' is not present in the passed
++ * // struct, fall back to old behavior
++ * f->big_hammer = true;
++ * }
++ *
++ * static struct foo_rh my_foo_rh {
++ * .newly_added = 0;
++ * }
++ *
++ * static struct foo my_foo = {
++ * .big_hammer = false,
++ * ._rh = &my_foo_rh,
++ * RH_KABI_AUX_INIT_SIZE(foo)
++ * };
++ *
++ * RH_KABI_USE_AUX_PTR
++ * Creates an auxiliary structure post kABI freeze. This works by using
++ * two reserved fields (thus there has to be two reserved fields still
++ * available) and converting them to RH_KABI_AUX_PTR.
++ *
++ * Example:
++ *
++ * struct foo_rh {
++ * };
++ *
++ * struct foo {
++ * int a;
++ * RH_KABI_RESERVE(1)
++ * RH_KABI_USE_AUX_PTR(2, 3, foo)
++ * };
++ *
++ * RH_KABI_AUX_SET_SIZE
++ * RH_KABI_AUX_INIT_SIZE
++ * Calculates and stores the size of the auxiliary structure.
++ *
++ * RH_KABI_AUX_SET_SIZE is for dynamically allocated base structs,
++ * RH_KABI_AUX_INIT_SIZE is for statically allocated case structs.
++ *
++ * These macros must be called from the allocation (RH_KABI_AUX_SET_SIZE)
++ * or declaration (RH_KABI_AUX_INIT_SIZE) site, regardless of whether
++ * that happens in the kernel or in a module. Without calling one of
++ * these macros, the aux struct will appear to have no fields to the
++ * kernel.
++ *
++ * Note: since RH_KABI_AUX_SET_SIZE is intended to be invoked outside of
++ * a struct definition, it does not add the semicolon and must be
++ * terminated by semicolon by the caller.
++ *
++ * RH_KABI_AUX
++ * Verifies that the given field exists in the given auxiliary structure.
++ * This MUST be called prior to accessing that field; failing to do that
++ * may lead to invalid memory access.
++ *
++ * The first argument is a pointer to the base struct, the second argument
++ * is the name of the base struct (without the 'struct' keyword), the
++ * third argument is the field name.
++ *
++ * This macro works for structs extended by either of RH_KABI_AUX_EMBED,
++ * RH_KABI_AUX_PTR and RH_KABI_USE_AUX_PTR.
++ *
++ * RH_KABI_FORCE_CHANGE
++ * Force change of the symbol checksum. The argument of the macro is a
++ * version for cases we need to do this more than once.
++ *
++ * This macro does the opposite: it changes the symbol checksum without
++ * actually changing anything about the exported symbol. It is useful for
++ * symbols that are not whitelisted, we're changing them in an
++ * incompatible way and want to prevent 3rd party modules to silently
++ * corrupt memory. Instead, by changing the symbol checksum, such modules
++ * won't be loaded by the kernel. This macro should only be used as a
++ * last resort when all other KABI workarounds have failed.
++ *
++ * RH_KABI_EXCLUDE
++ * !!! WARNING: DANGEROUS, DO NOT USE unless you are aware of all the !!!
++ * !!! implications. This should be used ONLY EXCEPTIONALLY and only !!!
++ * !!! under specific circumstances. Very likely, this macro does not !!!
++ * !!! do what you expect it to do. Note that any usage of this macro !!!
++ * !!! MUST be paired with a RH_KABI_FORCE_CHANGE annotation of !!!
++ * !!! a suitable symbol (or an equivalent safeguard) and the commit !!!
++ * !!! log MUST explain why the chosen solution is appropriate. !!!
++ *
++ * Exclude the element from checksum generation. Any such element is
++ * considered not to be part of the kABI whitelist and may be changed at
++ * will. Note however that it's the responsibility of the developer
++ * changing the element to ensure 3rd party drivers using this element
++ * won't panic, for example by not allowing them to be loaded. That can
++ * be achieved by changing another, non-whitelisted symbol they use,
++ * either by nature of the change or by using RH_KABI_FORCE_CHANGE.
++ *
++ * Also note that any change to the element must preserve its size. Change
++ * of the size is not allowed and would constitute a silent kABI breakage.
++ * Beware that the RH_KABI_EXCLUDE macro does not do any size checks.
++ *
++ * RH_KABI_EXCLUDE_WITH_SIZE
++ * Like RH_KABI_EXCLUDE, this macro excludes the element from
++ * checksum generation. The same warnings as for RH_KABI_EXCLUDE
++ * apply: use RH_KABI_FORCE_CHANGE.
++ *
++ * This macro is intended to be used for elements embedded inside
++ * kABI-protected structures (struct, array). In contrast with
++ * RH_KABI_EXCLUDE, this macro reserves extra space, so that the
++ * embedded element can grow without changing the offsets of the
++ * fields that follow. The provided 'size' is the total space to be
++ * added in longs (i.e. it's 8 * 'size' bytes), including the size
++ * of the added element. It is automatically checked that the new
++ * element does not overflow the reserved space, now nor in the
++ * future. The size is also included in the checksum via the
++ * reserved space, to ensure that we don't accidentally change it,
++ * which would change the offsets of the fields that follow.
++ *
++ * RH_KABI_BROKEN_INSERT
++ * RH_KABI_BROKEN_REMOVE
++ * Insert a field to the middle of a struct / delete a field from a struct.
++ * Note that this breaks kABI! It can be done only when it's certain that
++ * no 3rd party driver can validly reach into the struct. A typical
++ * example is a struct that is: both (a) referenced only through a long
++ * chain of pointers from another struct that is part of a whitelisted
++ * symbol and (b) kernel internal only, it should have never been visible
++ * to genksyms in the first place.
++ *
++ * Another example are structs that are explicitly exempt from kABI
++ * guarantee but we did not have enough foresight to use RH_KABI_EXCLUDE.
++ * In this case, the warning for RH_KABI_EXCLUDE applies.
++ *
++ * A detailed explanation of correctness of every RH_KABI_BROKEN_* macro
++ * use is especially important.
++ *
++ * RH_KABI_BROKEN_INSERT_BLOCK
++ * RH_KABI_BROKEN_REMOVE_BLOCK
++ * A version of RH_KABI_BROKEN_INSERT / REMOVE that allows multiple fields
++ * to be inserted or removed together. All fields need to be terminated
++ * by ';' inside(!) the macro parameter. The macro itself must not be
++ * terminated by ';'.
++ *
++ * RH_KABI_BROKEN_REPLACE
++ * Replace a field by a different one without doing any checking. This
++ * allows replacing a field by another with a different size. Similarly
++ * to other RH_KABI_BROKEN macros, use of this indicates a kABI breakage.
++ *
++ * RH_KABI_BROKEN_INSERT_ENUM
++ * RH_KABI_BROKEN_REMOVE_ENUM
++ * Insert a field to the middle of an enumaration type / delete a field from
++ * an enumaration type. Note that this can break kABI especially if the
++ * number of enum fields is used in an array within a structure. It can be
++ * done only when it is certain that no 3rd party driver will use the
++ * enumeration type or a structure that embeds an array with size determined
++ * by an enumeration type.
++ *
++ * RH_KABI_EXTEND_ENUM
++ * Adds a new field to an enumeration type. This must always be added to
++ * the end of the enum. Before using this macro, make sure this is actually
++ * safe to do.
++ */
++
++#undef linux
++#define linux linux
++
++#ifdef __GENKSYMS__
++
++# define RH_KABI_CONST
++# define RH_KABI_ADD_MODIFIER(_new)
++# define RH_KABI_EXTEND(_new)
++# define RH_KABI_FILL_HOLE(_new)
++# define RH_KABI_FORCE_CHANGE(ver) __attribute__((rh_kabi_change ## ver))
++# define RH_KABI_RENAME(_orig, _new) _orig
++# define RH_KABI_HIDE_INCLUDE(_file) <linux/rh_kabi.h>
++# define RH_KABI_FAKE_INCLUDE(_file) _file
++# define RH_KABI_BROKEN_INSERT(_new)
++# define RH_KABI_BROKEN_REMOVE(_orig) _orig;
++# define RH_KABI_BROKEN_INSERT_BLOCK(_new)
++# define RH_KABI_BROKEN_REMOVE_BLOCK(_orig) _orig
++# define RH_KABI_BROKEN_REPLACE(_orig, _new) _orig;
++# define RH_KABI_BROKEN_INSERT_ENUM(_new)
++# define RH_KABI_BROKEN_REMOVE_ENUM(_orig) _orig,
++# define RH_KABI_EXTEND_ENUM(_new)
++
++# define _RH_KABI_DEPRECATE(_type, _orig) _type _orig
++# define _RH_KABI_DEPRECATE_FN(_type, _orig, _args...) _type (*_orig)(_args)
++# define _RH_KABI_REPLACE(_orig, _new) _orig
++# define _RH_KABI_EXCLUDE(_elem)
++
++# define __RH_KABI_CHECK_SIZE(_item, _size)
++
++#else
++
++# define RH_KABI_ALIGN_WARNING ". Disable CONFIG_RH_KABI_SIZE_ALIGN_CHECKS if debugging."
++
++# define RH_KABI_CONST const
++# define RH_KABI_ADD_MODIFIER(_new) _new
++# define RH_KABI_EXTEND(_new) _new;
++# define RH_KABI_FILL_HOLE(_new) _new;
++# define RH_KABI_FORCE_CHANGE(ver)
++# define RH_KABI_RENAME(_orig, _new) _new
++# define RH_KABI_HIDE_INCLUDE(_file) _file
++# define RH_KABI_FAKE_INCLUDE(_file) <linux/rh_kabi.h>
++# define RH_KABI_BROKEN_INSERT(_new) _new;
++# define RH_KABI_BROKEN_REMOVE(_orig)
++# define RH_KABI_BROKEN_INSERT_BLOCK(_new) _new
++# define RH_KABI_BROKEN_REMOVE_BLOCK(_orig)
++# define RH_KABI_BROKEN_REPLACE(_orig, _new) _new;
++# define RH_KABI_BROKEN_INSERT_ENUM(_new) _new,
++# define RH_KABI_BROKEN_REMOVE_ENUM(_orig)
++# define RH_KABI_EXTEND_ENUM(_new) _new,
++
++#if IS_BUILTIN(CONFIG_RH_KABI_SIZE_ALIGN_CHECKS)
++# define __RH_KABI_CHECK_SIZE_ALIGN(_orig, _new) \
++ union { \
++ _Static_assert(sizeof(struct{_new;}) <= sizeof(struct{_orig;}), \
++ __FILE__ ":" __stringify(__LINE__) ": " __stringify(_new) " is larger than " __stringify(_orig) RH_KABI_ALIGN_WARNING); \
++ _Static_assert(__alignof__(struct{_new;}) <= __alignof__(struct{_orig;}), \
++ __FILE__ ":" __stringify(__LINE__) ": " __stringify(_orig) " is not aligned the same as " __stringify(_new) RH_KABI_ALIGN_WARNING); \
++ }
++# define __RH_KABI_CHECK_SIZE(_item, _size) \
++ _Static_assert(sizeof(struct{_item;}) <= _size, \
++ __FILE__ ":" __stringify(__LINE__) ": " __stringify(_item) " is larger than the reserved size (" __stringify(_size) " bytes)" RH_KABI_ALIGN_WARNING);
++#else
++# define __RH_KABI_CHECK_SIZE_ALIGN(_orig, _new)
++# define __RH_KABI_CHECK_SIZE(_item, _size)
++#endif
++
++#define RH_KABI_UNIQUE_ID __PASTE(rh_kabi_hidden_, __LINE__)
++
++# define _RH_KABI_DEPRECATE(_type, _orig) _type rh_reserved_##_orig
++# define _RH_KABI_DEPRECATE_FN(_type, _orig, _args...) \
++ _type (* rh_reserved_##_orig)(_args)
++# define _RH_KABI_REPLACE(_orig, _new) \
++ union { \
++ _new; \
++ struct { \
++ _orig; \
++ } RH_KABI_UNIQUE_ID; \
++ __RH_KABI_CHECK_SIZE_ALIGN(_orig, _new); \
++ }
++
++# define _RH_KABI_EXCLUDE(_elem) _elem
++
++#endif /* __GENKSYMS__ */
++
++# define RH_KABI_DEPRECATE(_type, _orig) _RH_KABI_DEPRECATE(_type, _orig);
++# define RH_KABI_DEPRECATE_FN(_type, _orig, _args...) \
++ _RH_KABI_DEPRECATE_FN(_type, _orig, _args);
++# define RH_KABI_REPLACE(_orig, _new) _RH_KABI_REPLACE(_orig, _new);
++
++#define _RH_KABI_REPLACE1(_new) _new;
++#define _RH_KABI_REPLACE2(_new, ...) _new; _RH_KABI_REPLACE1(__VA_ARGS__)
++#define _RH_KABI_REPLACE3(_new, ...) _new; _RH_KABI_REPLACE2(__VA_ARGS__)
++#define _RH_KABI_REPLACE4(_new, ...) _new; _RH_KABI_REPLACE3(__VA_ARGS__)
++#define _RH_KABI_REPLACE5(_new, ...) _new; _RH_KABI_REPLACE4(__VA_ARGS__)
++#define _RH_KABI_REPLACE6(_new, ...) _new; _RH_KABI_REPLACE5(__VA_ARGS__)
++#define _RH_KABI_REPLACE7(_new, ...) _new; _RH_KABI_REPLACE6(__VA_ARGS__)
++#define _RH_KABI_REPLACE8(_new, ...) _new; _RH_KABI_REPLACE7(__VA_ARGS__)
++#define _RH_KABI_REPLACE9(_new, ...) _new; _RH_KABI_REPLACE8(__VA_ARGS__)
++#define _RH_KABI_REPLACE10(_new, ...) _new; _RH_KABI_REPLACE9(__VA_ARGS__)
++#define _RH_KABI_REPLACE11(_new, ...) _new; _RH_KABI_REPLACE10(__VA_ARGS__)
++#define _RH_KABI_REPLACE12(_new, ...) _new; _RH_KABI_REPLACE11(__VA_ARGS__)
++
++#define RH_KABI_REPLACE_SPLIT(_orig, ...) _RH_KABI_REPLACE(_orig, \
++ struct { __PASTE(_RH_KABI_REPLACE, COUNT_ARGS(__VA_ARGS__))(__VA_ARGS__) });
++
++# define RH_KABI_RESERVE(n) _RH_KABI_RESERVE(n);
++
++#define _RH_KABI_USE1(n, _new) _RH_KABI_RESERVE(n), _new
++#define _RH_KABI_USE2(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE1(__VA_ARGS__)
++#define _RH_KABI_USE3(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE2(__VA_ARGS__)
++#define _RH_KABI_USE4(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE3(__VA_ARGS__)
++#define _RH_KABI_USE5(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE4(__VA_ARGS__)
++#define _RH_KABI_USE6(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE5(__VA_ARGS__)
++#define _RH_KABI_USE7(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE6(__VA_ARGS__)
++#define _RH_KABI_USE8(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE7(__VA_ARGS__)
++#define _RH_KABI_USE9(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE8(__VA_ARGS__)
++#define _RH_KABI_USE10(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE9(__VA_ARGS__)
++#define _RH_KABI_USE11(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE10(__VA_ARGS__)
++#define _RH_KABI_USE12(n, ...) _RH_KABI_RESERVE(n); _RH_KABI_USE11(__VA_ARGS__)
++
++#define _RH_KABI_USE(...) _RH_KABI_REPLACE(__VA_ARGS__)
++#define RH_KABI_USE(n, ...) _RH_KABI_USE(__PASTE(_RH_KABI_USE, COUNT_ARGS(__VA_ARGS__))(n, __VA_ARGS__));
++
++# define RH_KABI_USE_SPLIT(n, ...) RH_KABI_REPLACE_SPLIT(_RH_KABI_RESERVE(n), __VA_ARGS__)
++
++# define _RH_KABI_RESERVE(n) unsigned long rh_reserved##n
++
++#define RH_KABI_EXCLUDE(_elem) _RH_KABI_EXCLUDE(_elem);
++
++#define RH_KABI_EXCLUDE_WITH_SIZE(_new, _size) \
++ union { \
++ RH_KABI_EXCLUDE(_new) \
++ unsigned long RH_KABI_UNIQUE_ID[_size]; \
++ __RH_KABI_CHECK_SIZE(_new, 8 * (_size)) \
++ };
++
++#define RH_KABI_EXTEND_WITH_SIZE(_new, _size) \
++ RH_KABI_EXTEND(union { \
++ _new; \
++ unsigned long RH_KABI_UNIQUE_ID[_size]; \
++ __RH_KABI_CHECK_SIZE(_new, 8 * (_size)) \
++ })
++
++#define _RH_KABI_AUX_PTR(_struct) \
++ size_t _struct##_size_rh; \
++ _RH_KABI_EXCLUDE(struct _struct##_rh *_rh)
++#define RH_KABI_AUX_PTR(_struct) \
++ _RH_KABI_AUX_PTR(_struct);
++
++#define _RH_KABI_AUX_EMBED(_struct) \
++ size_t _struct##_size_rh; \
++ _RH_KABI_EXCLUDE(struct _struct##_rh _rh)
++#define RH_KABI_AUX_EMBED(_struct) \
++ _RH_KABI_AUX_EMBED(_struct);
++
++#define RH_KABI_USE_AUX_PTR(n1, n2, _struct) \
++ RH_KABI_USE(n1, n2, \
++ struct { RH_KABI_AUX_PTR(_struct) })
++
++#define RH_KABI_AUX_SET_SIZE(_name, _struct) ({ \
++ (_name)->_struct##_size_rh = sizeof(struct _struct##_rh); \
++})
++
++#define RH_KABI_AUX_INIT_SIZE(_struct) \
++ ._struct##_size_rh = sizeof(struct _struct##_rh),
++
++#define RH_KABI_AUX(_ptr, _struct, _field) ({ \
++ size_t __off = offsetof(struct _struct##_rh, _field); \
++ (_ptr)->_struct##_size_rh > __off ? true : false; \
++})
++
++#endif /* _LINUX_RH_KABI_H */
+diff --git a/include/linux/rh_waived.h b/include/linux/rh_waived.h
+new file mode 100644
+index 000000000000..d62a9e896b5e
+--- /dev/null
++++ b/include/linux/rh_waived.h
+@@ -0,0 +1,19 @@
++/* SPDX-License-Identifier: GPL-2.0 */
++/*
++ * include/linux/rh_waived.h
++ *
++ * rh_waived cmdline parameter interface.
++ *
++ * Copyright (C) 2024, Red Hat, Inc. Ricardo Robaina <rrobaina@redhat.com>
++ */
++#ifndef _RH_WAIVED_H
++#define _RH_WAIVED_H
++
++enum rh_waived_items {
++ /* RH_WAIVED_ITEMS must always be the last item in the enum */
++ RH_WAIVED_ITEMS,
++};
++
++bool is_rh_waived(enum rh_waived_items feat);
++
++#endif /* _RH_WAIVED_H */
+diff --git a/include/linux/security.h b/include/linux/security.h
+index 153e9043058f..2ee3a8990968 100644
+--- a/include/linux/security.h
++++ b/include/linux/security.h
+@@ -2439,4 +2439,13 @@ static inline void security_initramfs_populated(void)
+ }
+ #endif /* CONFIG_SECURITY */
+
++#ifdef CONFIG_SECURITY_LOCKDOWN_LSM
++extern int security_lock_kernel_down(const char *where, enum lockdown_reason level);
++#else
++static inline int security_lock_kernel_down(const char *where, enum lockdown_reason level)
++{
++ return 0;
++}
++#endif /* CONFIG_SECURITY_LOCKDOWN_LSM */
++
+ #endif /* ! __LINUX_SECURITY_H */
+diff --git a/init/main.c b/init/main.c
+index 92d34e496a33..05d799f92383 100644
+--- a/init/main.c
++++ b/init/main.c
+@@ -1242,8 +1242,10 @@ static bool __init_or_module initcall_blacklisted(initcall_t fn)
+ char fn_name[KSYM_SYMBOL_LEN];
+ unsigned long addr;
+
++#ifndef CONFIG_RHEL_DIFFERENCES
+ if (list_empty(&blacklisted_initcalls))
+ return false;
++#endif
+
+ addr = (unsigned long) dereference_function_descriptor(fn);
+ sprint_symbol_no_offset(fn_name, addr);
+@@ -1254,6 +1256,9 @@ static bool __init_or_module initcall_blacklisted(initcall_t fn)
+ */
+ strreplace(fn_name, ' ', '\0');
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++ init_rh_check_status(fn_name);
++#endif
+ list_for_each_entry(entry, &blacklisted_initcalls, next) {
+ if (!strcmp(fn_name, entry->buf)) {
+ pr_debug("initcall %s blacklisted\n", fn_name);
+diff --git a/kernel/Makefile b/kernel/Makefile
+index 1e1a31673577..60af4f6c2316 100644
+--- a/kernel/Makefile
++++ b/kernel/Makefile
+@@ -12,6 +12,8 @@ obj-y = fork.o exec_domain.o exec_state.o panic.o \
+ notifier.o ksysfs.o cred.o reboot.o \
+ async.o range.o smpboot.o ucount.o regset.o ksyms_common.o
+
++obj-$(CONFIG_RHEL_DIFFERENCES) += rh_messages.o rh_flags.o rh_waived.o
++obj-$(CONFIG_USERMODE_DRIVER) += usermode_driver.o
+ obj-$(CONFIG_MULTIUSER) += groups.o
+ obj-$(CONFIG_VHOST_TASK) += vhost_task.o
+
+diff --git a/kernel/bpf/core.c b/kernel/bpf/core.c
+index 6e19a030da6f..840338c51e6c 100644
+--- a/kernel/bpf/core.c
++++ b/kernel/bpf/core.c
+@@ -547,7 +547,12 @@ void bpf_prog_kallsyms_del_all(struct bpf_prog *fp)
+ /* All BPF JIT sysctl knobs here. */
+ int bpf_jit_enable __read_mostly = IS_BUILTIN(CONFIG_BPF_JIT_DEFAULT_ON);
+ int bpf_jit_kallsyms __read_mostly = IS_BUILTIN(CONFIG_BPF_JIT_DEFAULT_ON);
++#ifdef CONFIG_RHEL_DIFFERENCES
++/* RHEL-only: set it to 1 by default */
++int bpf_jit_harden __read_mostly = 1;
++#else
+ int bpf_jit_harden __read_mostly;
++#endif /* CONFIG_RHEL_DIFFERENCES */
+ long bpf_jit_limit __read_mostly;
+ long bpf_jit_limit_max __read_mostly;
+
+diff --git a/kernel/bpf/syscall.c b/kernel/bpf/syscall.c
+index 6db306d23b47..a758feebfe03 100644
+--- a/kernel/bpf/syscall.c
++++ b/kernel/bpf/syscall.c
+@@ -28,6 +28,7 @@
+ #include <linux/ctype.h>
+ #include <linux/nospec.h>
+ #include <linux/audit.h>
++#include <linux/init.h>
+ #include <uapi/linux/btf.h>
+ #include <linux/pgtable.h>
+ #include <linux/bpf_lsm.h>
+@@ -66,6 +67,23 @@ static DEFINE_SPINLOCK(map_idr_lock);
+ static DEFINE_IDR(link_idr);
+ static DEFINE_SPINLOCK(link_idr_lock);
+
++static int __init unprivileged_bpf_setup(char *str)
++{
++ unsigned long disabled;
++ if (!kstrtoul(str, 0, &disabled))
++ sysctl_unprivileged_bpf_disabled = !!disabled;
++
++ if (!sysctl_unprivileged_bpf_disabled) {
++ pr_warn("Unprivileged BPF has been enabled "
++ "(unprivileged_bpf_disabled=0 has been supplied "
++ "in boot parameters), tainting the kernel");
++ add_taint(TAINT_UNPRIVILEGED_BPF, LOCKDEP_STILL_OK);
++ }
++
++ return 1;
++}
++__setup("unprivileged_bpf_disabled=", unprivileged_bpf_setup);
++
+ int sysctl_unprivileged_bpf_disabled __read_mostly =
+ IS_BUILTIN(CONFIG_BPF_UNPRIV_DEFAULT_OFF) ? 2 : 0;
+
+@@ -6754,6 +6772,11 @@ static int bpf_unpriv_handler(const struct ctl_table *table, int write,
+ if (write && !ret) {
+ if (locked_state && unpriv_enable != 1)
+ return -EPERM;
++ if (!unpriv_enable) {
++ pr_warn("Unprivileged BPF has been enabled, "
++ "tainting the kernel");
++ add_taint(TAINT_UNPRIVILEGED_BPF, LOCKDEP_STILL_OK);
++ }
+ *(int *)table->data = unpriv_enable;
+ }
+
+diff --git a/kernel/module/main.c b/kernel/module/main.c
+index 46dd8d25a605..e82b2b13f588 100644
+--- a/kernel/module/main.c
++++ b/kernel/module/main.c
+@@ -66,6 +66,8 @@
+ #define CREATE_TRACE_POINTS
+ #include <trace/events/module.h>
+
++#include <linux/rh_flags.h>
++
+ /*
+ * Mutex protects:
+ * 1) List of modules (also safely readable within RCU read section),
+@@ -604,6 +606,7 @@ static const struct module_attribute modinfo_##field = { \
+
+ MODINFO_ATTR(version);
+ MODINFO_ATTR(srcversion);
++MODINFO_ATTR(rhelversion);
+
+ static void setup_modinfo_import_ns(struct module *mod, const char *s)
+ {
+@@ -1086,6 +1089,7 @@ const struct module_attribute *const modinfo_attrs[] = {
+ &module_uevent,
+ &modinfo_version,
+ &modinfo_srcversion,
++ &modinfo_rhelversion,
+ &modinfo_import_ns,
+ &modinfo_initstate,
+ &modinfo_coresize,
+@@ -3396,6 +3400,11 @@ static int early_mod_check(struct load_info *info, int flags)
+ return -EPERM;
+ }
+
++#ifdef CONFIG_RHEL_DIFFERENCES
++ if (get_modinfo(info, "intree"))
++ module_rh_check_status(info->name);
++#endif
++
+ err = rewrite_section_headers(info, flags);
+ if (err)
+ return err;
+@@ -3974,6 +3983,10 @@ void print_modules(void)
+ pr_cont(" [last unloaded: %s%s]", last_unloaded_module.name,
+ last_unloaded_module.taints);
+ pr_cont("\n");
++
++#ifdef CONFIG_RHEL_DIFFERENCES
++ rh_print_flags();
++#endif
+ }
+
+ #ifdef CONFIG_MODULE_DEBUGFS
+diff --git a/kernel/module/signing.c b/kernel/module/signing.c
+index 590ba29c85ab..02153d857531 100644
+--- a/kernel/module/signing.c
++++ b/kernel/module/signing.c
+@@ -61,10 +61,17 @@ int mod_verify_sig(const void *mod, struct load_info *info)
+ modlen -= sig_len + sizeof(ms);
+ info->len = modlen;
+
+- return verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
++ ret = verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
+ VERIFY_USE_SECONDARY_KEYRING,
+ VERIFYING_MODULE_SIGNATURE,
+ NULL, NULL);
++ if (ret == -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) {
++ ret = verify_pkcs7_signature(mod, modlen, mod + modlen, sig_len,
++ VERIFY_USE_PLATFORM_KEYRING,
++ VERIFYING_MODULE_SIGNATURE,
++ NULL, NULL);
++ }
++ return ret;
+ }
+
+ int module_sig_check(struct load_info *info, int flags)
+diff --git a/kernel/panic.c b/kernel/panic.c
+index 213725b612aa..a823d01f1f05 100644
+--- a/kernel/panic.c
++++ b/kernel/panic.c
+@@ -826,6 +826,18 @@ const struct taint_flag taint_flags[TAINT_FLAGS_COUNT] = {
+ TAINT_FLAG(RANDSTRUCT, 'T', ' '),
+ TAINT_FLAG(TEST, 'N', ' '),
+ TAINT_FLAG(FWCTL, 'J', ' '),
++ TAINT_FLAG(20, '?', '-'),
++ TAINT_FLAG(21, '?', '-'),
++ TAINT_FLAG(22, '?', '-'),
++ TAINT_FLAG(23, '?', '-'),
++ TAINT_FLAG(24, '?', '-'),
++ TAINT_FLAG(25, '?', '-'),
++ TAINT_FLAG(PARTNER_SUPPORTED, 'p', ' '),
++ TAINT_FLAG(SUPPORT_REMOVED, 'h', ' '),
++ TAINT_FLAG(RESERVED28, '?', '-'),
++ TAINT_FLAG(RESERVED29, '?', '-'),
++ TAINT_FLAG(RESERVED30, '?', '-'),
++ TAINT_FLAG(UNPRIVILEGED_BPF, 'u', ' '),
+ };
+
+ #undef TAINT_FLAG
+diff --git a/kernel/rh_flags.c b/kernel/rh_flags.c
+new file mode 100644
+index 000000000000..10d26958f840
+--- /dev/null
++++ b/kernel/rh_flags.c
+@@ -0,0 +1,115 @@
++#include <linux/kernel.h>
++#include <linux/list.h>
++#include <linux/proc_fs.h>
++#include <linux/seq_file.h>
++#include <linux/slab.h>
++#include <linux/spinlock.h>
++#include <linux/rh_flags.h>
++
++#define RH_FLAG_NAME_LEN 32
++#define MAX_RH_FLAGS 128
++#define MAX_RH_FLAG_NAME_LEN (MAX_RH_FLAGS * RH_FLAG_NAME_LEN)
++
++struct rh_flag {
++ struct list_head list;
++ char name[RH_FLAG_NAME_LEN];
++};
++
++static LIST_HEAD(rh_flag_list);
++static DEFINE_SPINLOCK(rh_flag_lock);
++
++bool __rh_add_flag(const char *flag_name)
++{
++ struct rh_flag *feat, *iter;
++
++ BUG_ON(in_interrupt());
++ feat = kzalloc(sizeof(*feat), GFP_ATOMIC);
++ if (WARN(!feat, "Adding Red Hat flag %s.\n", flag_name))
++ return false;
++ strscpy(feat->name, flag_name, RH_FLAG_NAME_LEN);
++
++ spin_lock(&rh_flag_lock);
++ list_for_each_entry_rcu(iter, &rh_flag_list, list) {
++ if (!strcmp(iter->name, flag_name)) {
++ kfree(feat);
++ feat = NULL;
++ break;
++ }
++ }
++ if (feat)
++ list_add_rcu(&feat->list, &rh_flag_list);
++ spin_unlock(&rh_flag_lock);
++
++ if (feat)
++ pr_info("Adding Red Hat flag %s.\n", flag_name);
++ return true;
++}
++EXPORT_SYMBOL(__rh_add_flag);
++
++void rh_print_flags(void)
++{
++ struct rh_flag *feat;
++
++ /*
++ * This function cannot do any locking, we're oopsing. Traversing
++ * rh_flag_list is okay, though, even without the rcu_read_lock
++ * taken: we never delete from that list and thus don't need the
++ * delayed free. All we need are the smp barriers invoked by the rcu
++ * list manipulation routines.
++ */
++ if (list_empty(&rh_flag_list))
++ return;
++ printk(KERN_DEFAULT "Red Hat flags:");
++ list_for_each_entry_lockless(feat, &rh_flag_list, list) {
++ pr_cont(" %s", feat->name);
++ }
++ pr_cont("\n");
++}
++EXPORT_SYMBOL(rh_print_flags);
++
++#ifdef CONFIG_SYSCTL
++static int rh_flags_show(const struct ctl_table *ctl, int write,
++ void __user *buffer, size_t *lenp,
++ loff_t *ppos)
++{
++ struct ctl_table tbl = { .maxlen = MAX_RH_FLAG_NAME_LEN, };
++ struct rh_flag *feat;
++ size_t offs = 0;
++ int ret;
++
++ tbl.data = kmalloc(tbl.maxlen, GFP_KERNEL);
++ if (!tbl.data)
++ return -ENOMEM;
++ ((char *)tbl.data)[0] = '\0';
++
++ rcu_read_lock();
++ list_for_each_entry_rcu(feat, &rh_flag_list, list) {
++ offs += scnprintf(tbl.data + offs, tbl.maxlen - offs, "%s%s",
++ offs == 0 ? "" : " ", feat->name);
++ }
++ rcu_read_unlock();
++
++ ret = proc_dostring(&tbl, write, buffer, lenp, ppos);
++ kfree(tbl.data);
++ return ret;
++}
++
++static struct ctl_table rh_flags_table[] = {
++ {
++ .procname = "rh_flags",
++ .data = &rh_flag_list,
++ .maxlen = MAX_RH_FLAG_NAME_LEN,
++ .mode = 0444,
++ .proc_handler = rh_flags_show,
++ },
++};
++#endif
++
++static __init int rh_flags_init(void)
++{
++#ifdef CONFIG_SYSCTL
++ register_sysctl_init("kernel", rh_flags_table);
++#endif
++ return 0;
++}
++subsys_initcall(rh_flags_init);
+diff --git a/kernel/rh_messages.c b/kernel/rh_messages.c
+new file mode 100644
+index 000000000000..bb69e8965748
+--- /dev/null
++++ b/kernel/rh_messages.c
+@@ -0,0 +1,414 @@
++/*
++ * The following functions are used by Red Hat to indicate to users that
++ * hardware and drivers are unsupported, or have limited support in RHEL major
++ * and minor releases. These functions output loud warning messages to the end
++ * user and should be USED WITH CAUTION.
++ *
++ * Any use of these functions _MUST_ be documented in the RHEL Release Notes,
++ * and have approval of management.
++ *
++ * Generally, the process of disabling a driver or device in RHEL requires the
++ * driver or device to be marked as 'deprecated' in all existing releases, and
++ * then either 'unmaintained' or 'disabled' in a future release.
++ *
++ * In general, deprecated and unmaintained drivers continue to receive security
++ * related fixes until they are disabled.
++ */
++
++#include <linux/kernel.h>
++#include <linux/module.h>
++#include <linux/pci.h>
++#include "rh_messages.h"
++
++/**
++ * mark_hardware_unmaintained() - Mark hardware as unmaintained.
++ * @driver_name: driver name
++ * @fmt: format for device description
++ * @...: args for device description
++ *
++ * Called to notify users that the device will no longer be tested on a routine
++ * basis and driver code associated with this device is no longer being updated.
++ * Red Hat may, at their own discretion, fix security-related and critical
++ * issues. Support for this device will be disabled in a future major release
++ * and users deploying this device should plan to replace the device in
++ * production systems.
++ *
++ * This function should be used when the driver's usage can be tied to a
++ * specific hardware device. For example, a network device driver loading on a
++ * specific device that is no longer maintained by the manufacturer.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++void __maybe_unused mark_hardware_unmaintained(const char *driver_name, char *fmt, ...)
++{
++ char device_description[DEV_DESC_LEN];
++ va_list args;
++
++ va_start(args, fmt);
++ vsnprintf(device_description, DEV_DESC_LEN, fmt, args);
++ pr_crit(RH_UNMAINT_HW,
++ driver_name, device_description);
++ va_end(args);
++}
++EXPORT_SYMBOL(mark_hardware_unmaintained);
++
++/**
++ * mark_hardware_deprecated() - Mark hardware as deprecated.
++ * @driver_name: driver name
++ * @fmt: format for device description
++ * @...: args for device description
++ *
++ * Called to notify users that support for the device is planned to be
++ * unmaintained in a future major release, and will eventually be disabled in a
++ * future major release. This device should not be used in new production
++ * environments and users should replace the device in production systems.
++ *
++ * This function should be used when the driver's usage can be tied to a
++ * specific hardware device. For example, a network device driver loading on a
++ * specific device that is no longer maintained by the manufacturer.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++void __maybe_unused mark_hardware_deprecated(const char *driver_name, char *fmt, ...)
++{
++ char device_description[DEV_DESC_LEN];
++ va_list args;
++
++ va_start(args, fmt);
++ vsnprintf(device_description, DEV_DESC_LEN, fmt, args);
++ pr_crit(RH_DEPRECATED_HW,
++ driver_name, device_description);
++ va_end(args);
++}
++
++/**
++ * mark_hardware_disabled() - Mark a driver as removed.
++ * @driver_name: driver name
++ * @fmt: format for device description
++ * @...: args for device description
++ *
++ * Called to notify users that a device's support has been completely disabled
++ * and no future support updates will occur. This device cannot be used in new
++ * production environments, and users must replace the device in production
++ * systems.
++ *
++ * This function should be used when the driver's usage can be tied to a
++ * specific hardware device. For example, a network device driver loading on a
++ * specific device that is no longer maintained by the manufacturer.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++static void __maybe_unused mark_hardware_disabled(const char *driver_name, char *fmt, ...)
++{
++ char device_description[DEV_DESC_LEN];
++ va_list args;
++
++ va_start(args, fmt);
++ vsnprintf(device_description, DEV_DESC_LEN, fmt, args);
++ pr_crit(RH_DISABLED_HW,
++ driver_name, device_description);
++ va_end(args);
++}
++
++#ifdef CONFIG_PCI
++/**
++ * pci_hw_deprecated() - Mark a PCI device deprecated.
++ * @dev: the PCI device structure to match against
++ *
++ * Called to check if this @dev is in the list of deprecated devices.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++static void __maybe_unused pci_hw_deprecated(struct pci_dev *dev)
++{
++ const struct pci_device_id *ret = pci_match_id(rh_deprecated_pci_devices, dev);
++
++ if (!ret)
++ return;
++
++ mark_hardware_deprecated(dev_driver_string(&dev->dev), "%04X:%04X @ %s",
++ dev->device, dev->vendor, pci_name(dev));
++}
++
++/**
++ * pci_hw_unmaintained() - Mark a PCI device unmaintained.
++ * @dev: the PCI device structure to match against
++ *
++ * Called to check if this @dev is in the list of unmaintained devices.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++static void pci_hw_unmaintained(struct pci_dev *dev)
++{
++ const struct pci_device_id *ret = pci_match_id(rh_unmaintained_pci_devices, dev);
++
++ if (!ret)
++ return;
++
++ mark_hardware_unmaintained(dev_driver_string(&dev->dev), "%04X:%04X @ %s",
++ dev->device, dev->vendor, pci_name(dev));
++}
++
++/**
++ * pci_hw_disabled() - Mark a PCI device disabled.
++ * @dev: the PCI device structure to match against
++ *
++ * Called to check if this @dev is in the list of disabled devices.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++static bool __maybe_unused pci_hw_disabled(struct pci_dev *dev)
++{
++ const struct pci_device_id *ret = pci_match_id(rh_disabled_pci_devices, dev);
++
++ if (!ret)
++ return false;
++
++ mark_hardware_disabled(dev_driver_string(&dev->dev), "%04X:%04X @ %s",
++ dev->device, dev->vendor, pci_name(dev));
++ return true;
++}
++#endif
++
++/**
++ * driver_unmaintained() - check to see if a driver is unmaintained
++ * @module_name: module name
++ *
++ * Called to notify users that a driver will no longer be tested on a routine
++ * basis and the driver code is no longer being updated. Red Hat may fix
++ * security-related and critical issues. Support for this driver will be
++ * disabled in a future major release, and users should replace any affected
++ * devices in production systems.
++ *
++ * This function should be used when a driver's usage cannot be tied to a
++ * specific hardware device. For example, a network bonding driver or a higher
++ * level storage layer driver that is no longer maintained upstream.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++static void __maybe_unused driver_unmaintained(const char* module_name)
++{
++ int i = 0;
++
++ while (rh_unmaintained_drivers[i]) {
++ if (strcmp(rh_unmaintained_drivers[i], module_name) == 0) {
++ pr_crit(RH_UNMAINT_DR, module_name);
++ return;
++ }
++ i++;
++ }
++}
++
++/**
++ * driver_deprecated() - check to see if a driver is deprecated
++ * @driver_name: module name
++ *
++ * Called to notify users that support for this driver is planned to be
++ * unmaintained in a future major release, and will eventually be disabled in a
++ * future major release. This driver should not be used in new production
++ * environments and users should replace any affected devices in production
++ * systems.
++ *
++ * This function should be used when a driver's usage cannot be tied to a
++ * specific hardware device. For example, a network bonding driver or a higher
++ * level storage layer driver that is no longer maintained upstream.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++static void __maybe_unused driver_deprecated(const char* module_name)
++{
++ int i = 0;
++
++ while (rh_deprecated_drivers[i]) {
++ if (strcmp(rh_deprecated_drivers[i], module_name) == 0) {
++ pr_crit(RH_DEPRECATED_DR, module_name);
++ return;
++ }
++ i++;
++ }
++}
++
++/* There is no driver_disabled() function. Disabled drivers are configured off ;). */
++
++/**
++ * init_fn_unmaintained - check to see if a built-in driver is unmaintained.
++ * @fn_name: module's module_init function name
++ *
++ * Called to notify users that a built-in driver will no longer be tested on a routine
++ * basis and the built-in driver code is no longer being updated. Red Hat may fix
++ * security-related and critical issues. Support for this built-in driver will be
++ * disabled in a future major release, and users should replace any affected
++ * devices in production systems.
++ *
++ * This function should be used when a built-in driver's usage cannot be tied to a
++ * specific hardware device. For example, a network bonding driver or a higher
++ * level storage layer driver that is no longer maintained upstream.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++
++static void __maybe_unused init_fn_unmaintained(char* fn_name)
++{
++ int i = 0;
++
++ while (rh_unmaintained_init_fns[i]) {
++ if (strcmp(rh_unmaintained_init_fns[i], fn_name) == 0) {
++ pr_crit(RH_UNMAINT_DR, fn_name);
++ return;
++ }
++ i++;
++ }
++}
++
++/**
++ * init_fn_deprecated() - check to see if a built-in driver is deprecated
++ * @fn_name: module's module_init function name
++ *
++ * Called to notify users that support for this built-in driver is planned to be
++ * unmaintained in a future major release, and will eventually be disabled in a
++ * future major release. This driver should not be used in new production
++ * environments and users should replace any affected devices in production
++ * systems.
++ *
++ * This function should be used when a built-in driver's usage cannot be tied to a
++ * specific hardware device. For example, a network bonding driver or a higher
++ * level storage layer driver that is no longer maintained upstream.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++static void __maybe_unused init_fn_deprecated(char* fn_name)
++{
++ int i = 0;
++
++ while (rh_deprecated_init_fns[i]) {
++ if (strcmp(rh_deprecated_init_fns[i], fn_name) == 0) {
++ pr_crit(RH_DEPRECATED_DR, fn_name);
++ return;
++ }
++ i++;
++ }
++}
++
++/**
++ * mark_tech_preview() - Mark driver or kernel subsystem as 'Tech Preview'
++ * @msg: Driver or kernel subsystem name
++ *
++ * Called to minimize the support status of a new driver. This does TAINT the
++ * kernel. Calling this function indicates that the driver or subsystem has
++ * had limited testing and is not marked for full support within this RHEL
++ * minor release. The next RHEL minor release may contain full support for
++ * this driver. Red Hat does not guarantee that bugs reported against this
++ * driver or subsystem will be resolved.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++void __maybe_unused mark_tech_preview(const char *msg, struct module *mod)
++{
++ const char *str = NULL;
++
++ if (msg)
++ str = msg;
++#ifdef CONFIG_MODULES
++ else if (mod)
++ str = mod->name;
++#endif
++
++ pr_warn(RH_TECH_PREVIEW, (str ? str : "kernel"));
++ add_taint(TAINT_AUX, LOCKDEP_STILL_OK);
++#ifdef CONFIG_MODULES
++ if (mod)
++ mod->taints |= (1U << TAINT_AUX);
++#endif
++}
++EXPORT_SYMBOL(mark_tech_preview);
++
++/**
++ * mark_partner_supported() - Mark driver or kernel subsystem as 'Partner Supported'
++ * @msg: Driver or kernel subsystem name
++ *
++ * Called to minimize the support status of a new driver. This does TAINT the
++ * kernel. Calling this function indicates that the driver or subsystem
++ * is not supported directly by Red Hat but by a partner engineer.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++void __maybe_unused mark_partner_supported(const char *msg, struct module *mod)
++{
++ const char *str = NULL;
++
++ if (msg)
++ str = msg;
++#ifdef CONFIG_MODULES
++ else if (mod)
++ str = mod->name;
++#endif
++
++ pr_warn(RH_PARTNER_SUPPORTED, (str ? str : "kernel"));
++ add_taint(TAINT_PARTNER_SUPPORTED, LOCKDEP_STILL_OK);
++#ifdef CONFIG_MODULES
++ if (mod)
++ mod->taints |= (1U << TAINT_PARTNER_SUPPORTED);
++#endif
++}
++EXPORT_SYMBOL(mark_partner_supported);
++
++/*
++ *
++ * Functions called by 'main' kernel code.
++ *
++ */
++
++#ifdef CONFIG_PCI
++/**
++ * pci_rh_check_status - checks the status of a PCI device.
++ * @pci_dev: PCI device to be examined
++ *
++ * This function is called by the PCI driver subsystem to check the status of a
++ * PCI device.
++ *
++ * This function returns true if the PCI device is disabled, and false otherwise.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++bool __maybe_unused pci_rh_check_status(struct pci_dev *pci_dev)
++{
++ if (pci_dev->driver->driver.owner != NULL) {
++ if (!test_bit(TAINT_OOT_MODULE, &pci_dev->driver->driver.owner->taints)) {
++ pci_hw_unmaintained(pci_dev);
++ pci_hw_deprecated(pci_dev);
++ return pci_hw_disabled(pci_dev);
++ }
++ }
++ return false;
++}
++#endif
++
++/** module_rh_check_status - checks the status of a module.
++ * @module_name: Name of module to be examined
++ *
++ * This function is called by the module loading code to check the status of a
++ * module.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++void __maybe_unused module_rh_check_status(const char * module_name)
++{
++ driver_unmaintained(module_name);
++ driver_deprecated(module_name);
++}
++
++/**
++ * init_rh_check_status - checks the status of a built-in module.
++ * @fn_name: init function of module to be examined
++ *
++ * This function is called by the init code to check the status of a built-in module.
++ * When a module is built-in, the module_init() function is converted into an initcall.
++ * The initcall is the called during boot with the other system initcalls.
++ *
++ * Reserved for Internal Red Hat use only.
++ */
++void __maybe_unused init_rh_check_status(char *fn_name)
++{
++ init_fn_deprecated(fn_name);
++ init_fn_unmaintained(fn_name);
++}
+diff --git a/kernel/rh_messages.h b/kernel/rh_messages.h
+new file mode 100644
+index 000000000000..6c757a2fe4e0
+--- /dev/null
++++ b/kernel/rh_messages.h
+@@ -0,0 +1,334 @@
++/*
++ * WARNING: This file is auto-generated by an internal Red Hat script and,
++ * in general, should not be modified by hand.
++ * See: https://gitlab.com/redhat/rhel/src/kernel/hardware-removal-support
++ */
++
++/*
++ * The following tables are used by Red Hat to define what hardware and drivers
++ * are unsupported, or have limited support in RHEL major and minor releases.
++ *
++ * Generally, the process of disabling a driver or device in RHEL requires the
++ * driver or device to be marked as 'deprecated' in all existing releases, and
++ * then either 'unmaintained' or 'disabled' in a future release.
++ *
++ * In general, deprecated and unmaintained drivers continue to receive security
++ * related fixes until they are disabled.
++ */
++
++#ifndef __RH_MESSAGES_H
++#define __RH_MESSAGES_H
++
++#include <linux/version.h>
++#include <linux/pci.h>
++
++#define DEV_DESC_LEN 256
++
++#define RH_UNMAINT_HW "Warning: Unmaintained Hardware is detected: %s:%s\n"
++
++#define RH_UNMAINT_DR "Warning: Unmaintained driver is detected: %s\n"
++
++#define RH_DEPRECATED_HW "Warning: Deprecated Hardware is detected: %s:%s " \
++ "will not be maintained in a future major release " \
++ "and may be disabled\n"
++
++#define RH_DEPRECATED_DR "Warning: Deprecated Driver is detected: %s will " \
++ "not be maintained in a future major release and " \
++ "may be disabled\n"
++
++#define RH_DISABLED_HW "Warning: Disabled Hardware is detected: %s:%s is " \
++ "no longer enabled in this release.\n"
++
++#define RH_TECH_PREVIEW "TECH PREVIEW: %s may not be fully supported.\n" \
++ "Please review provided documentation for " \
++ "limitations.\n"
++
++#define RH_PARTNER_SUPPORTED "Warning: %s is a Partner supported GPL " \
++ "module and not supported directly by Red Hat.\n"
++
++static const char *rh_deprecated_drivers[] = {
++ 0 /* Terminating entry */
++};
++
++static const char *rh_deprecated_init_fns[] = {
++ 0 /* Terminating entry */
++};
++
++static const char *rh_unmaintained_drivers[] = {
++ "aacraid",
++ "af_key",
++ "ahci_seattle",
++ "ahci_xgene",
++ "arp_tables",
++ "bnx2",
++ "bnx2fc",
++ "bnx2i",
++ "bnx2x",
++ "cnic",
++ "dl2k",
++ "e1000",
++ "ebtables",
++ "hdlc_fr",
++ "hisi_sas_main",
++ "hpsa",
++ "ip6_tables",
++ "ip_set",
++ "ip_tables",
++ "mptbase",
++ "mptsas",
++ "mptscsih",
++ "mptspi",
++ "myri10ge",
++ "netxen_nic",
++ "nft_compat",
++ "nicpf",
++ "nicvf",
++ "nvmet_fc",
++ "nvmet_tcp",
++ "team",
++ 0 /* Terminating entry */
++};
++
++static const char *rh_unmaintained_init_fns[] = {
++ "bnx2_pci_driver_init",
++ "e1000_init_module",
++ "rio_driver_init",
++ "hpsa_init",
++ "fusion_init",
++ "mptsas_init",
++ "fusion_init",
++ "mptspi_init",
++ "myri10ge_init_module",
++ "netxen_init_module",
++ "hdlc_fr_init",
++ "nvmet_fc_init_module",
++ "nvmet_tcp_init",
++ "team_module_init",
++ "ebtables_init",
++ "arp_tables_init",
++ "ip_tables_init",
++ "ip6_tables_init",
++ "ip_set_init",
++ "nft_compat_module_init",
++ "nicvf_init_module",
++ "nic_init_module",
++ "ipsec_pfkey_init",
++ "aac_init",
++ "cnic_init",
++ "bnx2x_init",
++ "bnx2fc_mod_init",
++ "bnx2i_mod_init",
++ "ahci_seattle_probe",
++ "xgene_ahci_probe",
++ "hisi_sas_init",
++ 0 /* Terminating entry */
++};
++
++static const struct pci_device_id rh_deprecated_pci_devices[] = {
++ {0} /* Terminating entry */
++};
++
++static const struct pci_device_id rh_disabled_pci_devices[] = {
++ { 0x1011, 0x0046, 0x103c, 0x10c2 },
++ { 0x1011, 0x0046, 0x9005, 0x0364 },
++ { 0x1011, 0x0046, 0x9005, 0x0365 },
++ { 0x1011, 0x0046, 0x9005, 0x1364 },
++ { 0x1028, 0x0001, 0x1028, 0x0001 },
++ { 0x1028, 0x0002, 0x1028, 0x0002 },
++ { 0x1028, 0x0002, 0x1028, 0x00d1 },
++ { 0x1028, 0x0002, 0x1028, 0x00d9 },
++ { 0x1028, 0x0003, 0x1028, 0x0003 },
++ { 0x1028, 0x0004, 0x1028, 0x00d0 },
++ { 0x1028, 0x000a, 0x1028, 0x0106 },
++ { 0x1028, 0x000a, 0x1028, 0x011b },
++ { 0x1028, 0x000a, 0x1028, 0x0121 },
++ { 0x9005, 0x0200, 0x9005, 0x0200 },
++ { 0x9005, 0x0283, 0x9005, 0x0283 },
++ { 0x9005, 0x0284, 0x9005, 0x0284 },
++ { 0x9005, 0x0285, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x9005, 0x0285, 0x1014, 0x02F2 },
++ { 0x9005, 0x0285, 0x1014, 0x0312 },
++ { 0x9005, 0x0285, 0x1028, PCI_ANY_ID },
++ { 0x9005, 0x0285, 0x1028, 0x0287 },
++ { 0x9005, 0x0285, 0x1028, 0x0291 },
++ { 0x9005, 0x0285, 0x103C, 0x3227 },
++ { 0x9005, 0x0285, 0x17aa, PCI_ANY_ID },
++ { 0x9005, 0x0285, 0x17aa, 0x0286 },
++ { 0x9005, 0x0285, 0x17aa, 0x0287 },
++ { 0x9005, 0x0285, 0x9005, 0x0285 },
++ { 0x9005, 0x0285, 0x9005, 0x0286 },
++ { 0x9005, 0x0285, 0x9005, 0x0287 },
++ { 0x9005, 0x0285, 0x9005, 0x0288 },
++ { 0x9005, 0x0285, 0x9005, 0x0289 },
++ { 0x9005, 0x0285, 0x9005, 0x028a },
++ { 0x9005, 0x0285, 0x9005, 0x028b },
++ { 0x9005, 0x0285, 0x9005, 0x028e },
++ { 0x9005, 0x0285, 0x9005, 0x028f },
++ { 0x9005, 0x0285, 0x9005, 0x0290 },
++ { 0x9005, 0x0285, 0x9005, 0x0291 },
++ { 0x9005, 0x0285, 0x9005, 0x0292 },
++ { 0x9005, 0x0285, 0x9005, 0x0293 },
++ { 0x9005, 0x0285, 0x9005, 0x0294 },
++ { 0x9005, 0x0285, 0x9005, 0x0296 },
++ { 0x9005, 0x0285, 0x9005, 0x0297 },
++ { 0x9005, 0x0285, 0x9005, 0x0298 },
++ { 0x9005, 0x0285, 0x9005, 0x0299 },
++ { 0x9005, 0x0285, 0x9005, 0x029a },
++ { 0x9005, 0x0285, 0x9005, 0x02a4 },
++ { 0x9005, 0x0285, 0x9005, 0x02a5 },
++ { 0x9005, 0x0286, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x9005, 0x0286, 0x1014, 0x9540 },
++ { 0x9005, 0x0286, 0x1014, 0x9580 },
++ { 0x9005, 0x0286, 0x9005, 0x028c },
++ { 0x9005, 0x0286, 0x9005, 0x028d },
++ { 0x9005, 0x0286, 0x9005, 0x029b },
++ { 0x9005, 0x0286, 0x9005, 0x029c },
++ { 0x9005, 0x0286, 0x9005, 0x029d },
++ { 0x9005, 0x0286, 0x9005, 0x029e },
++ { 0x9005, 0x0286, 0x9005, 0x029f },
++ { 0x9005, 0x0286, 0x9005, 0x02a0 },
++ { 0x9005, 0x0286, 0x9005, 0x02a1 },
++ { 0x9005, 0x0286, 0x9005, 0x02a2 },
++ { 0x9005, 0x0286, 0x9005, 0x02a3 },
++ { 0x9005, 0x0286, 0x9005, 0x02a6 },
++ { 0x9005, 0x0286, 0x9005, 0x0800 },
++ { 0x9005, 0x0287, 0x9005, 0x0800 },
++ { 0x9005, 0x0288, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x0222, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x0712, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x212, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x702, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x703, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x0700, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x0211, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x0710, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x0221, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0xe220, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0x1ae5, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xe100, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xe131, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xe180, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xe260, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf095, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf098, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0a1, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0a5, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0d1, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0d5, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0e1, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0e5, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0f5, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0f6, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf0f7, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf180, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf700, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf800, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf900, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf980, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfa00, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfb00, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfc00, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfc10, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfc20, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfc50, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfd00, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfd11, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfd12, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfe00, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfe05, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfe11, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfe12, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x0704, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x19a2, 0x0714, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xe208, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xe268, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0060, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0078, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x007C, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0411, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0413, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1028, 0x0015, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1002, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x6340, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x634A, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x6354, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x6368, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x6372, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x6732, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x673C, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x6746, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x6750, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x675A, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x6764, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x676E, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1003, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1004, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1005, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1006, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1007, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1008, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1009, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x100a, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x100b, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x100c, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x100d, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x100e, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x100f, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1010, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x15B3, 0x1027, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0064, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0065, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0070, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0072, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0074, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0076, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0077, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x007E, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x2422, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x2432, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x5422, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x5432, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x8001, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x8021, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x8044, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x8432, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0xF000, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x8022, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x8032, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x8042, PCI_ANY_ID, PCI_ANY_ID },
++ {0} /* Terminating entry */
++};
++
++static const struct pci_device_id rh_unmaintained_pci_devices[] = {
++ { 0x10df, 0xe220, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0x0724, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xe200, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf011, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf015, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xf100, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x10df, 0xfc40, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x005b, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0071, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0073, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0079, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x006E, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0080, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0081, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0082, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0083, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0084, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0085, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0086, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1000, 0x0087, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x177d, 0xa01e, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x177d, 0xa034, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x177d, 0x0011, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x2031, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x2532, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1077, 0x8031, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1924, 0x0803, PCI_ANY_ID, PCI_ANY_ID },
++ { 0x1924, 0x0813, PCI_ANY_ID, PCI_ANY_ID },
++ {0} /* Terminating entry */
++};
++
++#endif /* __RH_MESSAGES_H */
+diff --git a/kernel/rh_waived.c b/kernel/rh_waived.c
+new file mode 100644
+index 000000000000..20966f7c7277
+--- /dev/null
++++ b/kernel/rh_waived.c
+@@ -0,0 +1,147 @@
++/* SPDX-License-Identifier: GPL-2.0 */
++/*
++ * kernel/rh_waived.c
++ *
++ * rh_waived cmdline parameter support.
++ *
++ * Copyright (C) 2024, Red Hat, Inc. Ricardo Robaina <rrobaina@redhat.com>
++ */
++#include <linux/types.h>
++#include <linux/init.h>
++#include <linux/printk.h>
++#include <linux/string.h>
++#include <linux/panic.h>
++#include <linux/module.h>
++#include <linux/kernel.h>
++#include <linux/rh_flags.h>
++#include <linux/rh_waived.h>
++
++/*
++ * * RH_INSERT_WAIVED_ITEM
++ * This macro is intended to be used to insert items into the
++ * rh_waived_list array. It expects to get an item from
++ * enum rh_waived_items as its first argument, and a string
++ * holding the feature name as its second argument.
++ *
++ * The feature name is also utilized as the token for the
++ * boot parameter parser.
++ *
++ * Example usage:
++ * struct rh_waived_item foo[RH_WAIVED_FEAT_ITEMS] = {
++ * RH_INSERT_WAIVED_ITEM(FOO_FEAT, "foo_feat_short_str", "alias", RH_WAIVED_FEAT),
++ * };
++ */
++#define RH_INSERT_WAIVED_ITEM(enum_item, item, item_alt, class) \
++ [(enum_item)] = { .name = (item), .alias = (item_alt), \
++ .type = (class), .waived = 0, }
++
++/* Indicates if the rh_flag 'rh_waived' should be added. */
++bool __initdata add_rh_flag = false;
++
++typedef enum {
++ RH_WAIVED_FEAT,
++ RH_WAIVED_CVE,
++ RH_WAIVED_ANY
++} rh_waived_t;
++
++struct rh_waived_item {
++ char *name, *alias;
++ rh_waived_t type;
++ unsigned int waived;
++
++};
++
++/* Always use the marco RH_INSERT_WAIVED to insert items to this array. */
++struct rh_waived_item rh_waived_list[RH_WAIVED_ITEMS] = {
++};
++
++/*
++ * is_rh_waived() - Checks if a given item has been marked as waived.
++ *
++ * @item: waived item.
++ */
++__inline__ bool is_rh_waived(enum rh_waived_items item)
++{
++ return !!rh_waived_list[item].waived;
++}
++EXPORT_SYMBOL(is_rh_waived);
++
++static void __init rh_waived_parser(char *s, rh_waived_t type)
++{
++ int i;
++ char *token;
++
++ pr_info(KERN_CONT "rh_waived: ");
++
++ if (!s) {
++ for (i = 0; i < RH_WAIVED_ITEMS; i++) {
++ if (type != RH_WAIVED_ANY && rh_waived_list[i].type != type)
++ continue;
++
++ rh_waived_list[i].waived = 1;
++ pr_info(KERN_CONT "%s%s", rh_waived_list[i].name,
++ i < RH_WAIVED_ITEMS - 1 ? " " : "\n");
++ }
++
++ add_rh_flag = true;
++ return;
++ }
++
++ while ((token = strsep(&s, ",")) != NULL) {
++ for (i = 0; i < RH_WAIVED_ITEMS; i++) {
++ char *alias = rh_waived_list[i].alias;
++
++ if (type != RH_WAIVED_ANY && rh_waived_list[i].type != type)
++ continue;
++
++ if (!strcmp(token, rh_waived_list[i].name) ||
++ (alias && !strcmp(token, alias))) {
++ rh_waived_list[i].waived = 1;
++ pr_info(KERN_CONT "%s ", rh_waived_list[i].name);
++ }
++ }
++ }
++
++ pr_info(KERN_CONT "\n");
++ add_rh_flag = true;
++}
++
++static int __init rh_waived_setup(char *s)
++{
++ /*
++ * originally, if no string was passed to the cmdline option
++ * all listed features would be waived, so we keep that same
++ * compromise with the new contract.
++ */
++ if (!s || !strcmp(s, "features")) {
++ rh_waived_parser(NULL, RH_WAIVED_FEAT);
++ return 0;
++ }
++
++ /* waive all possible mitigations in the list */
++ if (!strcmp(s, "cves")) {
++ rh_waived_parser(NULL, RH_WAIVED_CVE);
++ return 0;
++ }
++
++ /* otherwise, just deal with the enumerated waive list */
++ rh_waived_parser(s, RH_WAIVED_ANY);
++
++ return 0;
++}
++early_param("rh_waived", rh_waived_setup);
++
++/*
++ * rh_flags is initialized at subsys_initcall, calling rh_add_flag()
++ * from rh_waived_setup() would result in a can't boot situation.
++ * Deffering the inclusion 'rh_waived' rh_flag to late_initcall to
++ * avoid this issue.
++ */
++static int __init __add_rh_flag(void)
++{
++ if (add_rh_flag)
++ rh_add_flag("rh_waived");
++
++ return 0;
++}
++late_initcall(__add_rh_flag);
+diff --git a/scripts/Makefile.lib b/scripts/Makefile.lib
+index 0a4fdd8bd975..dcb12dad419f 100644
+--- a/scripts/Makefile.lib
++++ b/scripts/Makefile.lib
+@@ -207,7 +207,10 @@ objtool-args-$(CONFIG_STACK_VALIDATION) += --stackval
+ objtool-args-$(CONFIG_HAVE_STATIC_CALL_INLINE) += --static-call
+ objtool-args-$(CONFIG_HAVE_UACCESS_VALIDATION) += --uaccess
+ objtool-args-$(or $(CONFIG_GCOV_KERNEL),$(CONFIG_KCOV)) += --no-unreachable
++# RHEL-only: don't enforce OBJTOOL_WERROR for out of tree modules
++ifeq ($(KBUILD_EXTMOD),)
+ objtool-args-$(CONFIG_OBJTOOL_WERROR) += --werror
++endif
+
+ objtool-args = $(objtool-args-y) \
+ $(if $(delay-objtool), --link) \
+diff --git a/scripts/mod/modpost.c b/scripts/mod/modpost.c
+index a7b72a81d248..9b62ee078734 100644
+--- a/scripts/mod/modpost.c
++++ b/scripts/mod/modpost.c
+@@ -27,6 +27,7 @@
+ #include <xalloc.h>
+ #include "modpost.h"
+ #include "../../include/linux/license.h"
++#include "../../include/generated/uapi/linux/version.h"
+
+ #define MODULE_NS_PREFIX "module:"
+
+@@ -2066,6 +2067,12 @@ static void write_buf(struct buffer *b, const char *fname)
+ }
+ }
+
++static void add_rhelversion(struct buffer *b, struct module *mod)
++{
++ buf_printf(b, "MODULE_INFO(rhelversion, \"%d.%d\");\n", RHEL_MAJOR,
++ RHEL_MINOR);
++}
++
+ static void write_if_changed(struct buffer *b, const char *fname)
+ {
+ char *tmp;
+@@ -2150,6 +2157,7 @@ static void write_mod_c_file(struct module *mod)
+ }
+
+ add_srcversion(&buf, mod);
++ add_rhelversion(&buf, mod);
+
+ ret = snprintf(fname, sizeof(fname), "%s.mod.c", mod->name);
+ if (ret >= sizeof(fname)) {
+diff --git a/scripts/tags.sh b/scripts/tags.sh
+index 243373683f98..2affd5e58ee8 100755
+--- a/scripts/tags.sh
++++ b/scripts/tags.sh
+@@ -16,6 +16,8 @@ fi
+ ignore="$(echo "$RCS_FIND_IGNORE" | sed 's|\\||g' )"
+ # tags and cscope files should also ignore MODVERSION *.mod.c files
+ ignore="$ignore ( -name *.mod.c ) -prune -o"
++# RHEL tags and cscope should also ignore redhat/rpm
++ignore="$ignore ( -path redhat/rpm ) -prune -o"
+
+ # ignore arbitrary directories
+ if [ -n "${IGNORE_DIRS}" ]; then
+diff --git a/security/integrity/platform_certs/load_uefi.c b/security/integrity/platform_certs/load_uefi.c
+index c0d6948446c3..bed56532e206 100644
+--- a/security/integrity/platform_certs/load_uefi.c
++++ b/security/integrity/platform_certs/load_uefi.c
+@@ -74,7 +74,8 @@ static __init void *get_cert_list(efi_char16_t *name, efi_guid_t *guid,
+ return NULL;
+
+ if (*status != EFI_BUFFER_TOO_SMALL) {
+- pr_err("Couldn't get size: 0x%lx\n", *status);
++ pr_err("Couldn't get size: %s (0x%lx)\n",
++ efi_status_to_str(*status), *status);
+ return NULL;
+ }
+
+@@ -85,7 +86,8 @@ static __init void *get_cert_list(efi_char16_t *name, efi_guid_t *guid,
+ *status = efi.get_variable(name, guid, NULL, &lsize, db);
+ if (*status != EFI_SUCCESS) {
+ kfree(db);
+- pr_err("Error reading db var: 0x%lx\n", *status);
++ pr_err("Error reading db var: %s (0x%lx)\n",
++ efi_status_to_str(*status), *status);
+ return NULL;
+ }
+
+diff --git a/security/lockdown/Kconfig b/security/lockdown/Kconfig
+index e84ddf484010..d0501353a4b9 100644
+--- a/security/lockdown/Kconfig
++++ b/security/lockdown/Kconfig
+@@ -16,6 +16,19 @@ config SECURITY_LOCKDOWN_LSM_EARLY
+ subsystem is fully initialised. If enabled, lockdown will
+ unconditionally be called before any other LSMs.
+
++config LOCK_DOWN_IN_EFI_SECURE_BOOT
++ bool "Lock down the kernel in EFI Secure Boot mode"
++ default n
++ depends on EFI && SECURITY_LOCKDOWN_LSM_EARLY
++ help
++ UEFI Secure Boot provides a mechanism for ensuring that the firmware
++ will only load signed bootloaders and kernels. Secure boot mode may
++ be determined from EFI variables provided by the system firmware if
++ not indicated by the boot parameters.
++
++ Enabling this option results in kernel lockdown being triggered if
++ EFI Secure Boot is set.
++
+ choice
+ prompt "Kernel default lockdown mode"
+ default LOCK_DOWN_KERNEL_FORCE_NONE
+diff --git a/security/lockdown/lockdown.c b/security/lockdown/lockdown.c
+index 8d46886d2cca..14a9cdff942b 100644
+--- a/security/lockdown/lockdown.c
++++ b/security/lockdown/lockdown.c
+@@ -72,6 +72,17 @@ static int lockdown_is_locked_down(enum lockdown_reason what)
+ return 0;
+ }
+
++/**
++ * security_lock_kernel_down() - Put the kernel into lock-down mode.
++ *
++ * @where: Where the lock-down is originating from (e.g. command line option)
++ * @level: The lock-down level (can only increase)
++ */
++int security_lock_kernel_down(const char *where, enum lockdown_reason level)
++{
++ return lock_kernel_down(where, level);
++}
++
+ static struct security_hook_list lockdown_hooks[] __ro_after_init = {
+ LSM_HOOK_INIT(locked_down, lockdown_is_locked_down),
+ };
+diff --git a/tools/testing/selftests/bpf/DENYLIST.rhel b/tools/testing/selftests/bpf/DENYLIST.rhel
+new file mode 100644
+index 000000000000..9424a83c6f48
+--- /dev/null
++++ b/tools/testing/selftests/bpf/DENYLIST.rhel
+@@ -0,0 +1,76 @@
++# Tests that need CONFIG_FUNCTION_ERROR_INJECTION
++# Typical observed errors are:
++# <...some function...> is not sleepable
++# <...some function...> is not modifiable
++cgrp_local_storage/yes_rcu_lock
++cgrp_local_storage/no_rcu_lock
++cgrp_local_storage/cgrp1_yes_rcu_lock
++cgrp_local_storage/cgrp1_no_rcu_lock
++compute_live_registers/addr_space_cast
++dynptr/test_read_write
++dynptr/test_dynptr_data
++dynptr/test_dynptr_copy
++dynptr/test_dynptr_copy_xdp
++dynptr/test_dynptr_memset_zero
++dynptr/test_dynptr_memset_notzero
++dynptr/test_dynptr_memset_zero_offset
++dynptr/test_dynptr_memset_zero_adjusted
++dynptr/test_dynptr_memset_overflow
++dynptr/test_dynptr_memset_overflow_offset
++dynptr/test_dynptr_memset_readonly
++dynptr/test_dynptr_memset_xdp_chunks
++dynptr/test_dynptr_skb_meta_data
++dynptr/test_dynptr_skb_meta_flags
++dynptr/test_ringbuf
++dynptr/test_skb_readonly
++dynptr/test_dynptr_skb_data
++dynptr/test_adjust
++dynptr/test_adjust_err
++dynptr/test_zero_size_dynptr
++dynptr/test_dynptr_is_null
++dynptr/test_dynptr_is_rdonly
++dynptr/test_dynptr_clone
++dynptr/test_dynptr_skb_no_buff
++dynptr/test_dynptr_skb_strcmp
++dynptr/test_dynptr_skb_tp_btf
++dynptr/test_probe_read_user_dynptr
++dynptr/test_probe_read_kernel_dynptr
++dynptr/test_probe_read_user_str_dynptr
++dynptr/test_probe_read_kernel_str_dynptr
++dynptr/test_copy_from_user_dynptr
++dynptr/test_copy_from_user_str_dynptr
++dynptr/test_copy_from_user_task_dynptr
++dynptr/test_copy_from_user_task_str_dynptr
++irq/irq_sleepable_helper
++irq/irq_sleepable_kfunc
++iters/iter_css_task_for_each_sleep
++iters/iter_ret_rcu_test_protected
++iters/iter_ret_rcu_test_type
++iters/iter_ret_rcu_test_protected_nostruct
++iters/iter_ret_rcu_test_type_nostruct
++iters/task
++iters/css
++iters/iter_tasks_without_lock
++iters/iter_css_without_lock
++iters/iter_tasks_lock_and_unlock
++iters/iter_css_lock_and_unlock
++map_excl/map_excl_allowed
++map_in_map/sleepable_acc_map_in_array
++map_in_map/sleepable_acc_map_in_htab
++mem_rdonly_untrusted/helper_param_not_ok
++module_attach
++preempt_lock/preempt_sleepable_helper
++preempt_lock/preempt_sleepable_kfunc
++rcu_read_lock/success
++rcu_read_lock/rcuptr_acquire
++read_vsyscall
++refcounted_kptr/rbtree_sleepable_rcu
++refcounted_kptr/rbtree_sleepable_rcu_no_explicit_rcu_lock
++refcounted_kptr_fail/rbtree_fail_sleepable_lock_across_rcu
++test_lsm/lsm_basic
++verifier_global_subprogs/arg_tag_ctx_fmod_ret
++
++kprobe_multi_test/attach_override # needs CONFIG_BPF_KPROBE_OVERRIDE
++libbpf_probe_prog_types/BPF_PROG_TYPE_LIRC_MODE2 # needs CONFIG_BPF_LIRC_MODE2
++test_bpffs # needs CONFIG_BPF_PRELOAD
++tunnel # needs CONFIG_NET_FOU
+diff --git a/tools/testing/selftests/bpf/Makefile b/tools/testing/selftests/bpf/Makefile
+index b642ee489ea6..7e3204186a8b 100644
+--- a/tools/testing/selftests/bpf/Makefile
++++ b/tools/testing/selftests/bpf/Makefile
+@@ -532,7 +532,7 @@ LSKELS := fexit_sleep.c trace_printk.c trace_vprintk.c map_ptr_kern.c \
+ LSKELS_SIGNED := fentry_test.c fexit_test.c atomics.c
+
+ # Generate both light skeleton and libbpf skeleton for these
+-LSKELS_EXTRA := test_ksyms_module.c test_ksyms_weak.c kfunc_call_test.c \
++LSKELS_EXTRA := test_ksyms_module.c kfunc_call_test.c \
+ kfunc_call_test_subprog.c
+ SKEL_BLACKLIST += $$(LSKELS) $$(LSKELS_SIGNED)
+
+diff --git a/tools/testing/selftests/bpf/prog_tests/ksyms_btf.c b/tools/testing/selftests/bpf/prog_tests/ksyms_btf.c
+index 1d7a2f1e0731..b22f3a9cb8b8 100644
+--- a/tools/testing/selftests/bpf/prog_tests/ksyms_btf.c
++++ b/tools/testing/selftests/bpf/prog_tests/ksyms_btf.c
+@@ -7,7 +7,6 @@
+ #include "test_ksyms_btf.skel.h"
+ #include "test_ksyms_btf_null_check.skel.h"
+ #include "test_ksyms_weak.skel.h"
+-#include "test_ksyms_weak.lskel.h"
+ #include "test_ksyms_btf_write_check.skel.h"
+
+ static int duration;
+@@ -111,33 +110,6 @@ static void test_weak_syms(void)
+ test_ksyms_weak__destroy(skel);
+ }
+
+-static void test_weak_syms_lskel(void)
+-{
+- struct test_ksyms_weak_lskel *skel;
+- struct test_ksyms_weak_lskel__data *data;
+- int err;
+-
+- skel = test_ksyms_weak_lskel__open_and_load();
+- if (!ASSERT_OK_PTR(skel, "test_ksyms_weak_lskel__open_and_load"))
+- return;
+-
+- err = test_ksyms_weak_lskel__attach(skel);
+- if (!ASSERT_OK(err, "test_ksyms_weak_lskel__attach"))
+- goto cleanup;
+-
+- /* trigger tracepoint */
+- usleep(1);
+-
+- data = skel->data;
+- ASSERT_EQ(data->out__existing_typed, 0, "existing typed ksym");
+- ASSERT_NEQ(data->out__existing_typeless, -1, "existing typeless ksym");
+- ASSERT_EQ(data->out__non_existent_typeless, 0, "nonexistent typeless ksym");
+- ASSERT_EQ(data->out__non_existent_typed, 0, "nonexistent typed ksym");
+-
+-cleanup:
+- test_ksyms_weak_lskel__destroy(skel);
+-}
+-
+ static void test_write_check(bool test_handler1)
+ {
+ struct test_ksyms_btf_write_check *skel;
+@@ -180,9 +152,6 @@ void test_ksyms_btf(void)
+ if (test__start_subtest("weak_ksyms"))
+ test_weak_syms();
+
+- if (test__start_subtest("weak_ksyms_lskel"))
+- test_weak_syms_lskel();
+-
+ if (test__start_subtest("write_check1"))
+ test_write_check(true);
+
diff --git a/rpminspect.yaml b/rpminspect.yaml
index 07539f4..b293085 100644
--- a/rpminspect.yaml
+++ b/rpminspect.yaml
@@ -39,7 +39,7 @@ emptyrpm:
patches:
ignore_list:
- linux-kernel-test.patch
- - patch-7.2-redhat.patch
+ - patch-7.3-redhat.patch
runpath:
ignore:
diff --git a/sources b/sources
index 4ab9eab..66a3804 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (linux-7.2.tar.xz) = cfa78fe506c20ceed1e4f4a01a92efc1a2bc59d5567f8d5534843d3f1be8c6b06d09a94960889981bc1a645e2583659cba0ed4a24fe6aaa3f7ba6d89327d0ac7
-SHA512 (kernel-abi-stablelists-7.2.0.tar.xz) = 38637ce71efa3ccfc16a4cf2a0e8dba58296088775aa05e85c10648bedf0ccb22862941892823ac5d50ccc516ef27ee18a5d6ae1c4ec357e214f8c0266a51bd1
-SHA512 (kernel-kabi-dw-7.2.0.tar.xz) = a86ef37b507c2fef220e4fd93d3ac1f2a517c256ba9fa94e006937cd3cdb2d99f3b122b4c6a48e0c6ab9fba7dcee405bec851c6942fd25f8fca8c22d504516dc
+SHA512 (linux-7.2-437-g0f23d56f17fd.tar.xz) = ffc12092f485226a85c5ee237fabc11566ac36dd20cb0541aad0d96f5ea258089b025f2e4ce090a89cae7dedf7791bae70aa33357c8dae215cab70b8aa87cf90
+SHA512 (kernel-abi-stablelists-7.3.0.tar.xz) = 35e2230b6cba8870b99b17db643ee3db216c085b93bdf2a4c7433bb862f1165708637200fc4621ec1299a185b014c6a35f1d2113ff2bec5e9eeab82626beb1d5
+SHA512 (kernel-kabi-dw-7.3.0.tar.xz) = 57dc2f8eef166002fc7c90923f8b47fe1dc9d1335a69cf2ea155c05496c20f5f6f92f1ccd5bc3088033fa76d24d256db6c36b6de92b6c4ae5d022c8274277578
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-18 17:23 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-18 17:23 [rpms/kernel] rawhide: kernel-7.3.0-0.rc0.260818g0f23d56f17fd.3 Justin M. Forbes
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox