kernel-6.19.0-0.rc5.38

* Mon Jan 12 2026 Fedora Kernel Team <kernel-team@fedoraproject.org> [6.19.0-0.rc5.38]
- rust: Add -fdiagnostics-show-context to bindgen_skip_c_flags (Siddhesh Poyarekar)
Resolves:

Signed-off-by: Justin M. Forbes <jforbes@fedoraproject.org>

Makefile.rhelver

@@ -1,4 +1,4 @@
-RHEL_MAJOR = 9
+RHEL_MAJOR = 10
 RHEL_MINOR = 99
 
 #
@@ -12,7 +12,7 @@ RHEL_MINOR = 99
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 63
+RHEL_RELEASE = 38
 
 #
 # RHEL_REBASE_NUM
@@ -50,31 +50,11 @@ RHEL_REBASE_NUM = 1
 ZSTREAM ?= no
 
 #
-# Early y+1 numbering
-# --------------------
+# Automotive
+# ----------
 #
-# In early y+1 process, RHEL_RELEASE consists of 2 numbers: x.y
-# First is RHEL_RELEASE inherited/merged from y as-is, second number
-# is incremented with each build starting from 1. After merge from y,
-# it resets back to 1. This way y+1 nvr reflects status of last merge.
-#
-# Example:
-#
-# rhel8.0                        rhel-8.1
-#   kernel-4.18.0-58.el8   -->     kernel-4.18.0-58.1.el8
-#                                  kernel-4.18.0-58.2.el8
-#   kernel-4.18.0-59.el8           kernel-4.18.0-59.1.el8
-#   kernel-4.18.0-60.el8
-#   kernel-4.18.0-61.el8   -->     kernel-4.18.0-61.1.el8
-#
-#
-# Use this spot to avoid future merge conflicts.
-# Do not trim this comment.
-EARLY_YSTREAM ?= no
-EARLY_YBUILD:=
-EARLY_YRELEASE:=
-ifneq ("$(ZSTREAM)", "yes")
-  ifeq ("$(EARLY_YSTREAM)","yes")
-    RHEL_RELEASE:=$(RHEL_RELEASE).$(EARLY_YRELEASE)
-  endif
-endif
+# Represents the major and minor release used by automotive.
+# Primarily this is used to to identify the build target when
+# building the automotive kernel package.
+AUTOMOTIVE_MAJOR = 2
+AUTOMOTIVE_MINOR = 99

Patchlist.changelog

@@ -1,537 +1,474 @@
-https://gitlab.com/cki-project/kernel-ark/-/commit/62c8b960ac29123120679713d9af3699a131320d
- 62c8b960ac29123120679713d9af3699a131320d apply -Wno-error=unterminated-string-initialization temporarily
+https://gitlab.com/cki-project/kernel-ark/-/commit/831ff9bcd8e9eab864062470a3250beb1e1ec924
+ 831ff9bcd8e9eab864062470a3250beb1e1ec924 rust: Add -fdiagnostics-show-context to bindgen_skip_c_flags
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/1d80a0ca33d0f3dc08748a5b29e7a90683480ece
- 1d80a0ca33d0f3dc08748a5b29e7a90683480ece include/linux: Adjust headers for C23
+https://gitlab.com/cki-project/kernel-ark/-/commit/fe3e9e24af806d756edbda922103b1fa95d9b89b
+ fe3e9e24af806d756edbda922103b1fa95d9b89b Revert "Removing Obsolete hba pci-ids from rhel8"
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a2b469d541d286bdc008c198158aa58b3fe6ba33
- a2b469d541d286bdc008c198158aa58b3fe6ba33 x86/insn_decoder_test: allow longer symbol-names
+https://gitlab.com/cki-project/kernel-ark/-/commit/c4a0a995da9df8732f688d09db5252173277589d
+ c4a0a995da9df8732f688d09db5252173277589d rh_messages.h: add missing lpfc devices
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/97cfb1ed8fdcb10f75ef199427eed4563511ec49
- 97cfb1ed8fdcb10f75ef199427eed4563511ec49 mei: vsc: Fix fortify-panic caused by invalid counted_by() use
+https://gitlab.com/cki-project/kernel-ark/-/commit/0ad9a88c3263fa8fa39437f69472588917255c99
+ 0ad9a88c3263fa8fa39437f69472588917255c99 kernel: extend rh_waived to cope better with the CVE mitigations case
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/be163c8164ebf72e9820a78774533b1f0672d751
- be163c8164ebf72e9820a78774533b1f0672d751 Revert "be2iscsi: remove unsupported device IDs"
+https://gitlab.com/cki-project/kernel-ark/-/commit/cf18c49636f2583c85831f909699034026325242
+ cf18c49636f2583c85831f909699034026325242 rh_messages.h: add missing aacraid device
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/6d55db355f06007b389dccdd428ed1b98c4d9f28
- 6d55db355f06007b389dccdd428ed1b98c4d9f28 Revert "qla4xxx: Remove deprecated PCI IDs from RHEL 8"
+https://gitlab.com/cki-project/kernel-ark/-/commit/26ca931184edb2c3c7f7c1951f53fa3333d9c90e
+ 26ca931184edb2c3c7f7c1951f53fa3333d9c90e rh_messages.h: update unmaintained drivers
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/7f79d0b57486a6e4b3dcccb75d55e3e87f6360bb
- 7f79d0b57486a6e4b3dcccb75d55e3e87f6360bb Revert "megaraid_sas: remove deprecated pci-ids"
+https://gitlab.com/cki-project/kernel-ark/-/commit/c1c1a1b7059900f4b9b657f5189285a287160e11
+ c1c1a1b7059900f4b9b657f5189285a287160e11 arm64: add early lockdown for secure boot
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/1fea0b1d914063b3118e1bafdf02ca943f3eeff3
- 1fea0b1d914063b3118e1bafdf02ca943f3eeff3 Revert "[scsi] megaraid_sas: re-add certain pci-ids"
+https://gitlab.com/cki-project/kernel-ark/-/commit/a613ae52a8d9378e6fa70f697b3ce0acee220491
+ a613ae52a8d9378e6fa70f697b3ce0acee220491 efi: pass secure boot mode to kernel proper
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a7dbc25e5c52db9089499c46ef42c765af103139
- a7dbc25e5c52db9089499c46ef42c765af103139 Revert "mpt*: remove certain deprecated pci-ids"
+https://gitlab.com/cki-project/kernel-ark/-/commit/f869258b6b654d316e84325e46e431da4dfd04e7
+ f869258b6b654d316e84325e46e431da4dfd04e7 selftests/bpf: Remove ksyms_weak_lskel test
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/01b2a501019463fe74fe2794ba565a67caf30318
- 01b2a501019463fe74fe2794ba565a67caf30318 media: ov08x40: Extend sleep after reset to 5 ms
+https://gitlab.com/cki-project/kernel-ark/-/commit/8b69219fe6a11766cf1a2e07dc94e56448b47824
+ 8b69219fe6a11766cf1a2e07dc94e56448b47824 Simplify include Makefile.rhelver
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8ba0148447642b46fdd13d4b037de208ff6534c9
- 8ba0148447642b46fdd13d4b037de208ff6534c9 media: ov08x40: Log chip ID when identifying the chip
+https://gitlab.com/cki-project/kernel-ark/-/commit/c2621ac616e25a9a04fbcb8af0c1f8b2bdd8c099
+ c2621ac616e25a9a04fbcb8af0c1f8b2bdd8c099 redhat: make ENABLE_WERROR also enable OBJTOOL_WERROR
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/793e11bec25e03d107b5c2466c3ae71a2c70547b
- 793e11bec25e03d107b5c2466c3ae71a2c70547b media: ov08x40: Fix value of reset GPIO when requesting it
+https://gitlab.com/cki-project/kernel-ark/-/commit/d28cbdeb89fe565e10fb4be8d8378153e86611f6
+ d28cbdeb89fe565e10fb4be8d8378153e86611f6 main.c: fix initcall blacklisted
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/bd6c4aadceef6e1d8dfba0034cf0155bffd766f6
- bd6c4aadceef6e1d8dfba0034cf0155bffd766f6 main.c: fix initcall blacklisted
+https://gitlab.com/cki-project/kernel-ark/-/commit/b71ab57c8db44881edc32a124ddc2ebe536b6a4c
+ b71ab57c8db44881edc32a124ddc2ebe536b6a4c arch/x86/kernel/setup.c: fix rh_check_supported
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a80114a29498954d43ad1e848199d326d56a298b
- a80114a29498954d43ad1e848199d326d56a298b arch/x86/kernel/setup.c: fix rh_check_supported
+https://gitlab.com/cki-project/kernel-ark/-/commit/c4ea2384863e54e0c5582b3508518e659581ce69
+ c4ea2384863e54e0c5582b3508518e659581ce69 efi,lockdown: fix kernel lockdown on Secure Boot
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/823c03387bfa05b7e6ae2183bcc575aae67791f3
- 823c03387bfa05b7e6ae2183bcc575aae67791f3 efi,lockdown: fix kernel lockdown on Secure Boot
+https://gitlab.com/cki-project/kernel-ark/-/commit/60b2ddeb0986e1c43a98b44a4ab414a7e2744701
+ 60b2ddeb0986e1c43a98b44a4ab414a7e2744701 Revert "nvme: Return BLK_STS_TARGET if the DNR bit is set"
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a68a37697cd8843ebd2e3ead3b90c58c4703dcb5
- a68a37697cd8843ebd2e3ead3b90c58c4703dcb5 Revert "nvme: Return BLK_STS_TARGET if the DNR bit is set"
+https://gitlab.com/cki-project/kernel-ark/-/commit/860632dd288c7aa7807959a79af9159482510cd1
+ 860632dd288c7aa7807959a79af9159482510cd1 Revert "nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT"
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/4071facb43f4fb4fd2f8bf01aac8481759c1b22f
- 4071facb43f4fb4fd2f8bf01aac8481759c1b22f Revert "nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT"
+https://gitlab.com/cki-project/kernel-ark/-/commit/aaef2c3ee081c8980bb60fd4b7a6ed9e187d9048
+ aaef2c3ee081c8980bb60fd4b7a6ed9e187d9048 Revert "nvme: decouple basic ANA log page re-read support from native multipathing"
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8a32431f7ec14655884b569cc40a07f0215381c3
- 8a32431f7ec14655884b569cc40a07f0215381c3 Revert "nvme: decouple basic ANA log page re-read support from native multipathing"
+https://gitlab.com/cki-project/kernel-ark/-/commit/5cd4353dae0ee79d13f57b7ccee85cd0bcbe4b4f
+ 5cd4353dae0ee79d13f57b7ccee85cd0bcbe4b4f Revert "nvme: nvme_mpath_init remove multipath check"
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b977a34bdb5cef8a59107cf00f1d20575e84ac76
- b977a34bdb5cef8a59107cf00f1d20575e84ac76 Revert "nvme: nvme_mpath_init remove multipath check"
+https://gitlab.com/cki-project/kernel-ark/-/commit/656a0565ffe54f99ac1390a68c5ee7050ab6fb25
+ 656a0565ffe54f99ac1390a68c5ee7050ab6fb25 redhat: automotive: define CONFIG_RH_AUTOMOTIVE
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5d878e8fa09cbffbdeecb0ba4c7111904ece499e
- 5d878e8fa09cbffbdeecb0ba4c7111904ece499e redhat: automotive: define CONFIG_RH_AUTOMOTIVE
+https://gitlab.com/cki-project/kernel-ark/-/commit/f1025d6236c72b4fbd03940b6fa2178f2a84f418
+ f1025d6236c72b4fbd03940b6fa2178f2a84f418 redhat: fix modules.order target
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/7ca78a8bb54c74194cd008f2a66230bf42a0ccf0
- 7ca78a8bb54c74194cd008f2a66230bf42a0ccf0 media: ov08x40: Don't log ov08x40_check_hwcfg() errors twice
+https://gitlab.com/cki-project/kernel-ark/-/commit/6e0fa997052c92d6085a50083e75dedc0160443f
+ 6e0fa997052c92d6085a50083e75dedc0160443f [redhat] rh_messages.h: driver and device updates
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/aac4abe4caf0bc1cc6beae59bae781727df41bba
- aac4abe4caf0bc1cc6beae59bae781727df41bba media: ov08x40: Add missing '\n' to ov08x40_check_hwcfg() error messages
+https://gitlab.com/cki-project/kernel-ark/-/commit/d8822fd0573e9f254f097c1743078e4e74ac70f5
+ d8822fd0573e9f254f097c1743078e4e74ac70f5 crypto: rng - Fix extrng EFAULT handling
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/6e532cd9727bf11ad4975ea9f73004a34f4bf4a9
- 6e532cd9727bf11ad4975ea9f73004a34f4bf4a9 media: ov08x40: Add missing ov08x40_identify_module() call on stream-start
+https://gitlab.com/cki-project/kernel-ark/-/commit/c224e4b6a61af08574bb0565755ed609bf08cacb
+ c224e4b6a61af08574bb0565755ed609bf08cacb crypto: sig - Disable signing
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c650959b90019b8c7d9556afb90fba2e5b2656db
- c650959b90019b8c7d9556afb90fba2e5b2656db media: ov08x40: Improve ov08x40_[read|write]_reg() error returns
+https://gitlab.com/cki-project/kernel-ark/-/commit/39417e970be7f6bc63f34d5ed5511f7e629802c2
+ 39417e970be7f6bc63f34d5ed5511f7e629802c2 crypto: rng - Ensure stdrng is tested before user-space starts
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c66f33cb5dbde98c07e9462a9ceab82c889dec05
- c66f33cb5dbde98c07e9462a9ceab82c889dec05 media: ov08x40: Improve ov08x40_identify_module() error logging
+https://gitlab.com/cki-project/kernel-ark/-/commit/52be246b6342ed5b1486729fd5c5893b10549a92
+ 52be246b6342ed5b1486729fd5c5893b10549a92 [redhat] rh_messages.h: Mark BlueField-4 as disabled
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/7d4f663fa639700153320d761205345c2efdc358
- 7d4f663fa639700153320d761205345c2efdc358 media: ov08x40: Move ov08x40_identify_module() function up
+https://gitlab.com/cki-project/kernel-ark/-/commit/2c9e64af9fa1f8599ce05877441afcac8ac91b04
+ 2c9e64af9fa1f8599ce05877441afcac8ac91b04 Update the RHEL_DIFFERENCES help string
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a067145ac9934d1bdd6b709091fc33cc9954b9be
- a067145ac9934d1bdd6b709091fc33cc9954b9be media: ov08x40: Get clock on ACPI platforms too
+https://gitlab.com/cki-project/kernel-ark/-/commit/beef34cb1efc34b7fbee35535c66915995d12ed1
+ beef34cb1efc34b7fbee35535c66915995d12ed1 redhat: include resolve_btfids in kernel-devel
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/91a73e72d8975a38354fc52f809b99354da68768
- 91a73e72d8975a38354fc52f809b99354da68768 media: ov08x40: Get reset GPIO and regulators on ACPI platforms too
+https://gitlab.com/cki-project/kernel-ark/-/commit/1a1426b7a8df854c78385dd8ce8b74e9ee641477
+ 1a1426b7a8df854c78385dd8ce8b74e9ee641477 redhat: workaround CKI cross compilation for scripts
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/18c04c0b3cfa460371aa76b63207f35f869a62b6
- 18c04c0b3cfa460371aa76b63207f35f869a62b6 media: ov08x40: Move fwnode_graph_get_next_endpoint() call up
+https://gitlab.com/cki-project/kernel-ark/-/commit/2c83d6cfffe1f891bf024df81be6cd41c2073ad9
+ 2c83d6cfffe1f891bf024df81be6cd41c2073ad9 crypto: akcipher - Disable signing and decryption
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/70d40bb0a1abf65ca2c384859aaa385e9956ffdc
- 70d40bb0a1abf65ca2c384859aaa385e9956ffdc media: ov08x40: Properly turn sensor on/off when runtime-suspended
+https://gitlab.com/cki-project/kernel-ark/-/commit/af93553b8d335ccf5dd4f90ab9419e497aa36a80
+ af93553b8d335ccf5dd4f90ab9419e497aa36a80 crypto: dh - implement FIPS PCT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/f5d07781f06dafc7108274ddf996e39f6de4e062
- f5d07781f06dafc7108274ddf996e39f6de4e062 redhat: fix modules.order target
+https://gitlab.com/cki-project/kernel-ark/-/commit/f0540d9d32978dff227cbb930193e8dc2557b23b
+ f0540d9d32978dff227cbb930193e8dc2557b23b crypto: ecdh - disallow plain "ecdh" usage in FIPS mode
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b8920e37d1e4c5fdbe8b990b829f79dd84e2ccf8
- b8920e37d1e4c5fdbe8b990b829f79dd84e2ccf8 [redhat] rh_messages.h: driver and device updates
+https://gitlab.com/cki-project/kernel-ark/-/commit/243ef89ad354eea332d7bfb23fd4cf259240de91
+ 243ef89ad354eea332d7bfb23fd4cf259240de91 crypto: seqiv - flag instantiations as FIPS compliant
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d52a57389cb01afeb71384a89bdebd3a43f952da
- d52a57389cb01afeb71384a89bdebd3a43f952da crypto: rng - Fix extrng EFAULT handling
+https://gitlab.com/cki-project/kernel-ark/-/commit/6a23cbc588e9b9f7b2bc7250c6c6903d4d904eb1
+ 6a23cbc588e9b9f7b2bc7250c6c6903d4d904eb1 [kernel] bpf: set default value for bpf_jit_harden
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/85b580a6a31900ebf466ce80d6ea03ccf3f22ec3
- 85b580a6a31900ebf466ce80d6ea03ccf3f22ec3 crypto: sig - Disable signing
+https://gitlab.com/cki-project/kernel-ark/-/commit/bb84b630a172d0204c8d243c57a6a1d2eae7843c
+ bb84b630a172d0204c8d243c57a6a1d2eae7843c not upstream: Disable vdso getrandom when FIPS is enabled
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/61b64fc044b419925446117bad525dd3ac34c031
- 61b64fc044b419925446117bad525dd3ac34c031 crypto: rng - Ensure stdrng is tested before user-space starts
+https://gitlab.com/cki-project/kernel-ark/-/commit/b643998c61552fb5615268e7e529999d64d54175
+ b643998c61552fb5615268e7e529999d64d54175 Add support to rh_waived cmdline boot parameter
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c14c5ea26187fb03e4b56789b2f7804cbc46e2a1
- c14c5ea26187fb03e4b56789b2f7804cbc46e2a1 [redhat] rh_messages.h: Mark BlueField-4 as disabled
+https://gitlab.com/cki-project/kernel-ark/-/commit/a1e04b6f3580382a902256c7bf8b395b9a1be47f
+ a1e04b6f3580382a902256c7bf8b395b9a1be47f rh_flags: fix failed when register_sysctl_sz rh_flags_table to kernel
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/4c12dda9c5b909ad54018de3e708b50bc26db1e8
- 4c12dda9c5b909ad54018de3e708b50bc26db1e8 Update the RHEL_DIFFERENCES help string
+https://gitlab.com/cki-project/kernel-ark/-/commit/03cf1862c6221ee2a6de9a5ab25adaec6460b62e
+ 03cf1862c6221ee2a6de9a5ab25adaec6460b62e [redhat] rh_flags: constify the ctl_table argument of proc_handler
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/0958ba5f669812bed69f2d7c724894b3df629726
- 0958ba5f669812bed69f2d7c724894b3df629726 redhat: include resolve_btfids in kernel-devel
+https://gitlab.com/cki-project/kernel-ark/-/commit/e2708e55f9151652da80e388b4bf88c649288c0f
+ e2708e55f9151652da80e388b4bf88c649288c0f redhat: rh_flags: declare proper static methods when !CONFIG_RHEL_DIFFERENCES
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2007f4e00d6dabe28464721ba622b3509e074941
- 2007f4e00d6dabe28464721ba622b3509e074941 redhat: workaround CKI cross compilation for scripts
+https://gitlab.com/cki-project/kernel-ark/-/commit/6f593811cc1e5664f45fe2d09916eada1187e992
+ 6f593811cc1e5664f45fe2d09916eada1187e992 redhat: make bnx2xx drivers unmaintained in rhel-10
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/9efda0d8547bdf8f6607f09b21c97f16c001839d
- 9efda0d8547bdf8f6607f09b21c97f16c001839d crypto: akcipher - Disable signing and decryption
+https://gitlab.com/cki-project/kernel-ark/-/commit/5db8220bd67c719a20c1269233585b40f48837da
+ 5db8220bd67c719a20c1269233585b40f48837da rh_flags: Rename rh_features to rh_flags
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/498a6bffc7735009811df94be873160e73b85b31
- 498a6bffc7735009811df94be873160e73b85b31 crypto: dh - implement FIPS PCT
+https://gitlab.com/cki-project/kernel-ark/-/commit/19ca502a0087eed65a014c6271f9bfc207d8d7eb
+ 19ca502a0087eed65a014c6271f9bfc207d8d7eb kernel: rh_features: fix reading empty feature list from /proc
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/171a4b1636c432ed514ac6aa24494f629ed9b97a
- 171a4b1636c432ed514ac6aa24494f629ed9b97a crypto: ecdh - disallow plain "ecdh" usage in FIPS mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/ba24639032f00b47748a6f39a4eb33950df015c2
+ ba24639032f00b47748a6f39a4eb33950df015c2 rh_features: move rh_features entry to sys/kernel
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2136e176ffe4fed6d6fcc340e7d2d96d73bf7626
- 2136e176ffe4fed6d6fcc340e7d2d96d73bf7626 crypto: seqiv - flag instantiations as FIPS compliant
+https://gitlab.com/cki-project/kernel-ark/-/commit/883e43fe6a0da0d9ad90e7c997a95f11bab9b888
+ 883e43fe6a0da0d9ad90e7c997a95f11bab9b888 rh_features: convert to atomic allocation
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/47c22840dae1ea9576bc470771811a785aedd545
- 47c22840dae1ea9576bc470771811a785aedd545 [kernel] bpf: set default value for bpf_jit_harden
+https://gitlab.com/cki-project/kernel-ark/-/commit/c8daa2e832df14ee9174435a357b2ae0994a3ef3
+ c8daa2e832df14ee9174435a357b2ae0994a3ef3 add rh_features to /proc
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d9b92e8d6acde2744fa6547c5397689d68f33045
- d9b92e8d6acde2744fa6547c5397689d68f33045 not upstream: Disable vdso getrandom when FIPS is enabled
+https://gitlab.com/cki-project/kernel-ark/-/commit/4f33dbbe3ec578d49e12c07421b913bf480fccef
+ 4f33dbbe3ec578d49e12c07421b913bf480fccef add support for rh_features
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5e24b62aed9d355e1095140265fa51960fd821ca
- 5e24b62aed9d355e1095140265fa51960fd821ca Add support to rh_waived cmdline boot parameter
+https://gitlab.com/cki-project/kernel-ark/-/commit/53a5900b05260b81f13eb3b9d6a9419429f310ab
+ 53a5900b05260b81f13eb3b9d6a9419429f310ab [redhat] PCI: Fix pci_rh_check_status() call semantics
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/df7dd9b5faee48a9a69c88ac3efaacd6d3cda2c1
- df7dd9b5faee48a9a69c88ac3efaacd6d3cda2c1 rh_flags: fix failed when register_sysctl_sz rh_flags_table to kernel
+https://gitlab.com/cki-project/kernel-ark/-/commit/aeb9a237a0ec39b7bde89d8bb040cd5b267f6802
+ aeb9a237a0ec39b7bde89d8bb040cd5b267f6802 scsi: sd: condition probe_type under RHEL_DIFFERENCES
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2f09d5e69e09d4602b57766cc46b5ebe74da5318
- 2f09d5e69e09d4602b57766cc46b5ebe74da5318 [redhat] rh_flags: constify the ctl_table argument of proc_handler
+https://gitlab.com/cki-project/kernel-ark/-/commit/159e72af8b1631b720f4a7e0012fa624764cecde
+ 159e72af8b1631b720f4a7e0012fa624764cecde scsi: sd: remove unused sd_probe_types
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/cbf8e1ef61c2bf29d5dcee29162f137b1794c44f
- cbf8e1ef61c2bf29d5dcee29162f137b1794c44f redhat: rh_flags: declare proper static methods when !CONFIG_RHEL_DIFFERENCES
+https://gitlab.com/cki-project/kernel-ark/-/commit/d8c04860eb7bf29617ca1754f1076fd9f5992e77
+ d8c04860eb7bf29617ca1754f1076fd9f5992e77 [redhat] rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/818dbe23abf94cf5c28399e46d1f4e71b4a35d59
- 818dbe23abf94cf5c28399e46d1f4e71b4a35d59 redhat: make bnx2xx drivers unmaintained in rhel-10
+https://gitlab.com/cki-project/kernel-ark/-/commit/496c64b4afece4ab525467a6be71ffe60d0c564f
+ 496c64b4afece4ab525467a6be71ffe60d0c564f [redhat] rh_messages.h: initial driver and device lists
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/499928863a58e06e61fd1738ee6b9ce1d38042dd
- 499928863a58e06e61fd1738ee6b9ce1d38042dd rh_flags: Rename rh_features to rh_flags
+https://gitlab.com/cki-project/kernel-ark/-/commit/5cf456aaba6f5c9406421c04c65d43b2c71f5927
+ 5cf456aaba6f5c9406421c04c65d43b2c71f5927 arch/x86: Fix XSAVE check for x86_64-v2 check
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/da59ebd3d3c38ac820d0bf92671cadb73cfa5ec1
- da59ebd3d3c38ac820d0bf92671cadb73cfa5ec1 kernel: rh_features: fix reading empty feature list from /proc
+https://gitlab.com/cki-project/kernel-ark/-/commit/252bf9586fca6e57a51966c0294a9a0cb33ff4f5
+ 252bf9586fca6e57a51966c0294a9a0cb33ff4f5 arch/x86/kernel/setup.c: fixup rh_check_supported
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b860692bf4dbb4822569ee14ccfa42e6f10691fc
- b860692bf4dbb4822569ee14ccfa42e6f10691fc rh_features: move rh_features entry to sys/kernel
+https://gitlab.com/cki-project/kernel-ark/-/commit/30faf17591afbd4230d590355351044294ad43d2
+ 30faf17591afbd4230d590355351044294ad43d2 lsm: update security_lock_kernel_down
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2c02df0601d9e931b0c30dad52f145ab652de5e2
- 2c02df0601d9e931b0c30dad52f145ab652de5e2 rh_features: convert to atomic allocation
+https://gitlab.com/cki-project/kernel-ark/-/commit/e88ee9e2e869e7259faa5bf3ff6689becabb53cb
+ e88ee9e2e869e7259faa5bf3ff6689becabb53cb arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8ebacdcfda78e9a13973521c95211e61ddf5f47a
- 8ebacdcfda78e9a13973521c95211e61ddf5f47a add rh_features to /proc
+https://gitlab.com/cki-project/kernel-ark/-/commit/26ebc304df38a49ce7cc69b4bdf220298cff2460
+ 26ebc304df38a49ce7cc69b4bdf220298cff2460 redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/67e3a4dae15a3e6b9569f8ad68d5beb117840fb2
- 67e3a4dae15a3e6b9569f8ad68d5beb117840fb2 add support for rh_features
+https://gitlab.com/cki-project/kernel-ark/-/commit/8c71392703448be8e8217592dd46ea1cc8b157e1
+ 8c71392703448be8e8217592dd46ea1cc8b157e1 redhat: rh_kabi: introduce RH_KABI_EXCLUDE_WITH_SIZE
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/6da62c6ea50321babd292aedacdf28e6ff81f41b
- 6da62c6ea50321babd292aedacdf28e6ff81f41b [redhat] PCI: Fix pci_rh_check_status() call semantics
+https://gitlab.com/cki-project/kernel-ark/-/commit/d42afcb843fcc87e59ba39b5574c18d89fd07a91
+ d42afcb843fcc87e59ba39b5574c18d89fd07a91 redhat: rh_kabi: move semicolon inside __RH_KABI_CHECK_SIZE
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/477adc5a78cf2545ea1948bfe2e434b91eccc631
- 477adc5a78cf2545ea1948bfe2e434b91eccc631 scsi: sd: condition probe_type under RHEL_DIFFERENCES
+https://gitlab.com/cki-project/kernel-ark/-/commit/95a56955f9ba6ef1e1dd2d99d8f98254da274267
+ 95a56955f9ba6ef1e1dd2d99d8f98254da274267 random: replace import_single_range() with import_ubuf()
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/13289763363ebea5eab290dbfc749c3ef7798ea1
- 13289763363ebea5eab290dbfc749c3ef7798ea1 scsi: sd: remove unused sd_probe_types
+https://gitlab.com/cki-project/kernel-ark/-/commit/92d6612578b79fd3a09e10504ed71209ba43c271
+ 92d6612578b79fd3a09e10504ed71209ba43c271 ext4: Mark mounting fs-verity filesystems as tech-preview
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/328c610b343a4c19b6f09506bb21a735cb93ee27
- 328c610b343a4c19b6f09506bb21a735cb93ee27 [redhat] rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained
+https://gitlab.com/cki-project/kernel-ark/-/commit/5c51745b8aec113ff0605ab833c3e472d99c55c8
+ 5c51745b8aec113ff0605ab833c3e472d99c55c8 erofs: Add tech preview markers at mount
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b2fe41c309fdc2e95546232efa53a3be260ce7a9
- b2fe41c309fdc2e95546232efa53a3be260ce7a9 [redhat] rh_messages.h: initial driver and device lists
+https://gitlab.com/cki-project/kernel-ark/-/commit/6d687c70a7eda10eac0ddc6eedeaccc30eef5349
+ 6d687c70a7eda10eac0ddc6eedeaccc30eef5349 kernel/rh_messages.c: Mark functions as possibly unused
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/652b6f180971c783a897bbf04761a2574663ef6f
- 652b6f180971c783a897bbf04761a2574663ef6f arch/x86: Fix XSAVE check for x86_64-v2 check
+https://gitlab.com/cki-project/kernel-ark/-/commit/dfb09b1d833cad815ea2f5cb69505010de260c40
+ dfb09b1d833cad815ea2f5cb69505010de260c40 crypto: rng - Override drivers/char/random in FIPS mode
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/bf581c239def8667984d432e59ccd9d1b6a80488
- bf581c239def8667984d432e59ccd9d1b6a80488 arch/x86/kernel/setup.c: fixup rh_check_supported
+https://gitlab.com/cki-project/kernel-ark/-/commit/ddbe3667f2462817f3f936141fff08604dde1564
+ ddbe3667f2462817f3f936141fff08604dde1564 random: Add hook to override device reads and getrandom(2)
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5716d3758fdb535cfb6c7379da5eb41544904a34
- 5716d3758fdb535cfb6c7379da5eb41544904a34 lsm: update security_lock_kernel_down
+https://gitlab.com/cki-project/kernel-ark/-/commit/92525a9129d85fa6400c9e653379862a67cb43b2
+ 92525a9129d85fa6400c9e653379862a67cb43b2 [redhat] kernel/rh_messages.c: move hardware tables to rh_messages.h
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/0df16497cb608e27b67534c57d9627c9c80d15a4
- 0df16497cb608e27b67534c57d9627c9c80d15a4 arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated
+https://gitlab.com/cki-project/kernel-ark/-/commit/eacd81fdaf31d456a82c553735faf64c8efad2eb
+ eacd81fdaf31d456a82c553735faf64c8efad2eb [redhat] kernel/rh_messages.c: Wire up new calls
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8cc92d68143f1d2baf0aa41f72ce32a921587b7a
- 8cc92d68143f1d2baf0aa41f72ce32a921587b7a redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option
+https://gitlab.com/cki-project/kernel-ark/-/commit/32af8640a651c642ee5706dda0cf35ff508bcdcb
+ 32af8640a651c642ee5706dda0cf35ff508bcdcb [redhat] drivers/pci: Update rh_messages.c
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/dca0c3c7553ffa9f86ac65de1cf8e8e471b8518f
- dca0c3c7553ffa9f86ac65de1cf8e8e471b8518f redhat: rh_kabi: introduce RH_KABI_EXCLUDE_WITH_SIZE
+https://gitlab.com/cki-project/kernel-ark/-/commit/db366977f9e13f903cc9b7f22936b581594a7731
+ db366977f9e13f903cc9b7f22936b581594a7731 [redhat] drivers/pci: Remove RHEL-only pci_hw_*() functions
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5520876d6b880379bfbd69c437b9a99f5d2e7870
- 5520876d6b880379bfbd69c437b9a99f5d2e7870 redhat: rh_kabi: move semicolon inside __RH_KABI_CHECK_SIZE
+https://gitlab.com/cki-project/kernel-ark/-/commit/402504ff66e5d118b514253df5d55f8413e2e167
+ 402504ff66e5d118b514253df5d55f8413e2e167 scsi: sd: Add "probe_type" module parameter to allow synchronous probing
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/0491ccb39fb7969edfdf4a8ff562557d0d7c6c36
- 0491ccb39fb7969edfdf4a8ff562557d0d7c6c36 random: replace import_single_range() with import_ubuf()
+https://gitlab.com/cki-project/kernel-ark/-/commit/5e96a345c6fb24e282ce1769223c1a339d0dbe94
+ 5e96a345c6fb24e282ce1769223c1a339d0dbe94 Revert "Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64"
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/dd0bb5b2e35a9b883f5eeca56b8bd9f1acd32693
- dd0bb5b2e35a9b883f5eeca56b8bd9f1acd32693 ext4: Mark mounting fs-verity filesystems as tech-preview
+https://gitlab.com/cki-project/kernel-ark/-/commit/ce943989ae8cb2b8e0b4699c148584d3cd18ec9b
+ ce943989ae8cb2b8e0b4699c148584d3cd18ec9b kernel/rh_messages.c: Another gcc12 warning on redundant NULL test
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/9ae20f12a88e5b2c561ae9cbf5ac7756c7b0c734
- 9ae20f12a88e5b2c561ae9cbf5ac7756c7b0c734 erofs: Add tech preview markers at mount
+https://gitlab.com/cki-project/kernel-ark/-/commit/c0624b3913d8c3f262e20910a2f2c4d2f99ce61f
+ c0624b3913d8c3f262e20910a2f2c4d2f99ce61f Enable IO_URING for RHEL
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/1593c781349505cf81e21849ef807639de36606d
- 1593c781349505cf81e21849ef807639de36606d kernel/rh_messages.c: Mark functions as possibly unused
+https://gitlab.com/cki-project/kernel-ark/-/commit/861f2d38d82cfb374799ec517f18cc021701068e
+ 861f2d38d82cfb374799ec517f18cc021701068e Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/286879d863c95cb7da234aec981ead9fd2c2bc94
- 286879d863c95cb7da234aec981ead9fd2c2bc94 crypto: rng - Override drivers/char/random in FIPS mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/e02ec93117d6eea21e80baf69e6f9848cf1a9774
+ e02ec93117d6eea21e80baf69e6f9848cf1a9774 redhat: version two of Makefile.rhelver tweaks
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2874508ee4b16aba454d8c5653b64fbc544b4315
- 2874508ee4b16aba454d8c5653b64fbc544b4315 random: Add hook to override device reads and getrandom(2)
+https://gitlab.com/cki-project/kernel-ark/-/commit/964e830b4fae678dec5b8b93dcd402c73fdf2912
+ 964e830b4fae678dec5b8b93dcd402c73fdf2912 redhat:  adapt to upstream Makefile change
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/120d291f3815045bcfa28ecc23b2575f11aacc4d
- 120d291f3815045bcfa28ecc23b2575f11aacc4d [redhat] kernel/rh_messages.c: move hardware tables to rh_messages.h
+https://gitlab.com/cki-project/kernel-ark/-/commit/60a4025a3b1cdec1c7bbdabf1e30278f615bb493
+ 60a4025a3b1cdec1c7bbdabf1e30278f615bb493 kernel/rh_messages.c: gcc12 warning on redundant NULL test
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8d76bd93736e365eb4862bd07ed503a09fecb03a
- 8d76bd93736e365eb4862bd07ed503a09fecb03a [redhat] kernel/rh_messages.c: Wire up new calls
+https://gitlab.com/cki-project/kernel-ark/-/commit/a5c9e3c6e3dcda60b5f753d1bae86a686f3ac087
+ a5c9e3c6e3dcda60b5f753d1bae86a686f3ac087 Change acpi_bus_get_acpi_device to acpi_get_acpi_dev
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/707a7fb32e5db86f9f0e48c1cad71bb75af887da
- 707a7fb32e5db86f9f0e48c1cad71bb75af887da [redhat] drivers/pci: Update rh_messages.c
+https://gitlab.com/cki-project/kernel-ark/-/commit/092e751fe418623c5ad04e77fa6c993d48d96533
+ 092e751fe418623c5ad04e77fa6c993d48d96533 ARK: Remove code marking devices unmaintained
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/18604b800e5ecaa32d7428e59d7670b207c7a379
- 18604b800e5ecaa32d7428e59d7670b207c7a379 [redhat] drivers/message/fusion/mptspi.c: Remove extra disabled warning
+https://gitlab.com/cki-project/kernel-ark/-/commit/c27fa327fb3de69773568d211fd2f8f13a72e342
+ c27fa327fb3de69773568d211fd2f8f13a72e342 rh_message: Fix function name
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/71ba020e2f1827663ed5b8f6209f38953c7cc3a0
- 71ba020e2f1827663ed5b8f6209f38953c7cc3a0 [redhat] mptsas: Remove add_taint()
+https://gitlab.com/cki-project/kernel-ark/-/commit/c9b07fd3a141ad0283d7eaadf5a06aec9af2b8c9
+ c9b07fd3a141ad0283d7eaadf5a06aec9af2b8c9 Add Partner Supported taint flag to kAFS
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/dada86fd164416c07fb43baaf33f2942cd171900
- dada86fd164416c07fb43baaf33f2942cd171900 [redhat] drivers/pci: Remove RHEL-only pci_hw_*() functions
+https://gitlab.com/cki-project/kernel-ark/-/commit/6b0e3a47ec436527a736c0e7159b41624d176dd9
+ 6b0e3a47ec436527a736c0e7159b41624d176dd9 Add Partner Supported taint flag
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/09489853c2c0b1bdd46473a316f834d7c9e39f0c
- 09489853c2c0b1bdd46473a316f834d7c9e39f0c scsi: sd: Add "probe_type" module parameter to allow synchronous probing
+https://gitlab.com/cki-project/kernel-ark/-/commit/3a4e2ad92c430d2f584f56ca686bc75a469d06c0
+ 3a4e2ad92c430d2f584f56ca686bc75a469d06c0 kabi: Add kABI macros for enum type
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/e71bbce674c336a9ecb0b579dff5293492cf2719
- e71bbce674c336a9ecb0b579dff5293492cf2719 Revert "Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64"
+https://gitlab.com/cki-project/kernel-ark/-/commit/04fbd46f834f3a012ca9d5bef91db377a3dbaed0
+ 04fbd46f834f3a012ca9d5bef91db377a3dbaed0 kabi: expand and clarify documentation of aux structs
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b277859cb2387e5575354f615ec79d0af6db8c57
- b277859cb2387e5575354f615ec79d0af6db8c57 kernel/rh_messages.c: Another gcc12 warning on redundant NULL test
+https://gitlab.com/cki-project/kernel-ark/-/commit/cf8df8ef88e094ebb049a7e1e6fec069aaf54faa
+ cf8df8ef88e094ebb049a7e1e6fec069aaf54faa kabi: introduce RH_KABI_USE_AUX_PTR
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/391ae5b91533ec34b422f5aa78dd67926729d2f1
- 391ae5b91533ec34b422f5aa78dd67926729d2f1 Enable IO_URING for RHEL
+https://gitlab.com/cki-project/kernel-ark/-/commit/31779ca0c6c9aab28184a42ac3f17ac219b37b2b
+ 31779ca0c6c9aab28184a42ac3f17ac219b37b2b kabi: rename RH_KABI_SIZE_AND_EXTEND to AUX
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/4b9cddff4d1dd6ee1784b587bc6d251392c00b31
- 4b9cddff4d1dd6ee1784b587bc6d251392c00b31 Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64
+https://gitlab.com/cki-project/kernel-ark/-/commit/2e12a05d339ed936b9cd59f420b161d70b4a130a
+ 2e12a05d339ed936b9cd59f420b161d70b4a130a kabi: more consistent _RH_KABI_SIZE_AND_EXTEND
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/3067a12531aae4965da5b94bfccf50a6468a6d7e
- 3067a12531aae4965da5b94bfccf50a6468a6d7e redhat: version two of Makefile.rhelver tweaks
+https://gitlab.com/cki-project/kernel-ark/-/commit/b83556eebdc2efdc2d2c22610b7cd7c5cafb2bae
+ b83556eebdc2efdc2d2c22610b7cd7c5cafb2bae kabi: use fixed field name for extended part
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/4384ff06507afaacadbcc15dfb61ad7120f6b235
- 4384ff06507afaacadbcc15dfb61ad7120f6b235 redhat:  adapt to upstream Makefile change
+https://gitlab.com/cki-project/kernel-ark/-/commit/4c9a3b306a34ed7017e35b0de26b2d98e1a04373
+ 4c9a3b306a34ed7017e35b0de26b2d98e1a04373 kabi: fix dereference in RH_KABI_CHECK_EXT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b6e29016d3bce1b048626c74eb34058f5aab7917
- b6e29016d3bce1b048626c74eb34058f5aab7917 kernel/rh_messages.c: gcc12 warning on redundant NULL test
+https://gitlab.com/cki-project/kernel-ark/-/commit/a961660df0a73bcf2dcd8cb8855c2f5d5ded0ae9
+ a961660df0a73bcf2dcd8cb8855c2f5d5ded0ae9 kabi: fix RH_KABI_SET_SIZE macro
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/42bbf6fac385e298bc0eb03b6e2918ea11697fb2
- 42bbf6fac385e298bc0eb03b6e2918ea11697fb2 Change acpi_bus_get_acpi_device to acpi_get_acpi_dev
+https://gitlab.com/cki-project/kernel-ark/-/commit/9f9ef5e8b4694fa7fb6a8f941fb741121fe5aab3
+ 9f9ef5e8b4694fa7fb6a8f941fb741121fe5aab3 kabi: expand and clarify documentation
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/35e4cad29f5b851a2ac033529d67b485e10bbc9a
- 35e4cad29f5b851a2ac033529d67b485e10bbc9a ARK: Remove code marking devices unmaintained
+https://gitlab.com/cki-project/kernel-ark/-/commit/308d17beeaa6cb4a514f77319b636c9a2c15f5eb
+ 308d17beeaa6cb4a514f77319b636c9a2c15f5eb kabi: make RH_KABI_USE replace any number of reserved fields
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/bb2a931cdf2559c926a356fb3d103b8c026fc176
- bb2a931cdf2559c926a356fb3d103b8c026fc176 rh_message: Fix function name
+https://gitlab.com/cki-project/kernel-ark/-/commit/f3d12dffffeee8d6692be46044b9fc8448901692
+ f3d12dffffeee8d6692be46044b9fc8448901692 kabi: rename RH_KABI_USE2 to RH_KABI_USE_SPLIT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2605f205e6f0ee81bc459364112fff56a1ae6b3b
- 2605f205e6f0ee81bc459364112fff56a1ae6b3b Add Partner Supported taint flag to kAFS
+https://gitlab.com/cki-project/kernel-ark/-/commit/520e726b4e78101e73fa3d77cdcbc21d204a75a9
+ 520e726b4e78101e73fa3d77cdcbc21d204a75a9 kabi: change RH_KABI_REPLACE2 to RH_KABI_REPLACE_SPLIT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8a291eb9655751d6defc8dcc0f04715887c7e710
- 8a291eb9655751d6defc8dcc0f04715887c7e710 Add Partner Supported taint flag
+https://gitlab.com/cki-project/kernel-ark/-/commit/7160868bd40d04e6d1a80f55d1bf9bb62ede0ba3
+ 7160868bd40d04e6d1a80f55d1bf9bb62ede0ba3 kabi: change RH_KABI_REPLACE_UNSAFE to RH_KABI_BROKEN_REPLACE
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/ce14e3b66de113746a5f3eae9688839eaee6a745
- ce14e3b66de113746a5f3eae9688839eaee6a745 kabi: Add kABI macros for enum type
+https://gitlab.com/cki-project/kernel-ark/-/commit/0b83063cf6c57dc20a80c35396fa425ec1963d53
+ 0b83063cf6c57dc20a80c35396fa425ec1963d53 kabi: introduce RH_KABI_ADD_MODIFIER
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/e77483520a3548e26637f9b94252998075c37c48
- e77483520a3548e26637f9b94252998075c37c48 kabi: expand and clarify documentation of aux structs
+https://gitlab.com/cki-project/kernel-ark/-/commit/d276c2393792e3eec80a73a4fe964f9ec11145a7
+ d276c2393792e3eec80a73a4fe964f9ec11145a7 kabi: Include kconfig.h
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/e41f6236beeea80dadf658b8965c7e5c5138c869
- e41f6236beeea80dadf658b8965c7e5c5138c869 kabi: introduce RH_KABI_USE_AUX_PTR
+https://gitlab.com/cki-project/kernel-ark/-/commit/28c30de9c771ff91994c9f0a42bdcc260fa97c2d
+ 28c30de9c771ff91994c9f0a42bdcc260fa97c2d kabi: macros for intentional kABI breakage
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/fc17934a9779bb20bd575b1cc05e8fba5352fbf4
- fc17934a9779bb20bd575b1cc05e8fba5352fbf4 kabi: rename RH_KABI_SIZE_AND_EXTEND to AUX
+https://gitlab.com/cki-project/kernel-ark/-/commit/9b671c725ac69c47874321e5636e6541bb6d219d
+ 9b671c725ac69c47874321e5636e6541bb6d219d kabi: fix the note about terminating semicolon
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/1109404d0c9c8a9c7e805a14cfdc9bc458e65e3d
- 1109404d0c9c8a9c7e805a14cfdc9bc458e65e3d kabi: more consistent _RH_KABI_SIZE_AND_EXTEND
+https://gitlab.com/cki-project/kernel-ark/-/commit/6443eef17fb53f62886ecce519b6e12dd310e7f5
+ 6443eef17fb53f62886ecce519b6e12dd310e7f5 kabi: introduce RH_KABI_HIDE_INCLUDE and RH_KABI_FAKE_INCLUDE
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/54039e0a572bf4665affab6d50b5e2ab6968fdaa
- 54039e0a572bf4665affab6d50b5e2ab6968fdaa kabi: use fixed field name for extended part
+https://gitlab.com/cki-project/kernel-ark/-/commit/47746fc3837b476ec265e2a0c2aaa86de0d3994e
+ 47746fc3837b476ec265e2a0c2aaa86de0d3994e pci.h: Fix static include
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d3801c842c3bc659f6c12f2cd267abf00ff782bc
- d3801c842c3bc659f6c12f2cd267abf00ff782bc kabi: fix dereference in RH_KABI_CHECK_EXT
+https://gitlab.com/cki-project/kernel-ark/-/commit/67ce66385c6b619356c4030e6163c4fb18a50427
+ 67ce66385c6b619356c4030e6163c4fb18a50427 drivers/pci/pci-driver.c: Fix if/ifdef typo
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c4dee57b07f12e0a3ef422cd0a5d998a99b1fe8c
- c4dee57b07f12e0a3ef422cd0a5d998a99b1fe8c kabi: fix RH_KABI_SET_SIZE macro
+https://gitlab.com/cki-project/kernel-ark/-/commit/0dfd7feeadc964ef2a9d118218b54831381c8d7a
+ 0dfd7feeadc964ef2a9d118218b54831381c8d7a kernel/rh_taint.c: Update to new messaging
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/ae574d08d31e1f66c52fed8efbb032fcf6d4b956
- ae574d08d31e1f66c52fed8efbb032fcf6d4b956 kabi: expand and clarify documentation
+https://gitlab.com/cki-project/kernel-ark/-/commit/35e5ee153637e59c9297c9cc8ba7f3960277ffc2
+ 35e5ee153637e59c9297c9cc8ba7f3960277ffc2 redhat: Add mark_driver_deprecated()
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d8befa30f3a7ace471b4d06a176e148e18de5946
- d8befa30f3a7ace471b4d06a176e148e18de5946 kabi: make RH_KABI_USE replace any number of reserved fields
+https://gitlab.com/cki-project/kernel-ark/-/commit/ff7aa8cae4c7e3e7bbc1bb5612efc2157c81fa7d
+ ff7aa8cae4c7e3e7bbc1bb5612efc2157c81fa7d RHEL: disable io_uring support
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/3069040972199ac45c3a1ffeeab4980aaac4f9e1
- 3069040972199ac45c3a1ffeeab4980aaac4f9e1 kabi: rename RH_KABI_USE2 to RH_KABI_USE_SPLIT
+https://gitlab.com/cki-project/kernel-ark/-/commit/517351ed810bf2707e7fdb2ab22029aeb594db59
+ 517351ed810bf2707e7fdb2ab22029aeb594db59 bpf: Fix unprivileged_bpf_disabled setup
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/f113002d846132302b610b3a059035e46471b4be
- f113002d846132302b610b3a059035e46471b4be kabi: change RH_KABI_REPLACE2 to RH_KABI_REPLACE_SPLIT
+https://gitlab.com/cki-project/kernel-ark/-/commit/48fe2e5f40c901e92d1f8c62bc97f58af4b0906a
+ 48fe2e5f40c901e92d1f8c62bc97f58af4b0906a nvme: nvme_mpath_init remove multipath check
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/48a552dbc1fd0d2c9128730ba42606cbc58c2700
- 48a552dbc1fd0d2c9128730ba42606cbc58c2700 kabi: change RH_KABI_REPLACE_UNSAFE to RH_KABI_BROKEN_REPLACE
+https://gitlab.com/cki-project/kernel-ark/-/commit/1c9bd09f303e2c9d2c67fdc46604d94e00cbf67c
+ 1c9bd09f303e2c9d2c67fdc46604d94e00cbf67c wireguard: disable in FIPS mode
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/6c556dcd367488bd2ccfca6e850fe5d7d0811c8e
- 6c556dcd367488bd2ccfca6e850fe5d7d0811c8e kabi: introduce RH_KABI_ADD_MODIFIER
+https://gitlab.com/cki-project/kernel-ark/-/commit/57872981891fe8f3f7205daa4b78c8c0d676b171
+ 57872981891fe8f3f7205daa4b78c8c0d676b171 nvme: decouple basic ANA log page re-read support from native multipathing
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2e075d729ca668014921c16c1b01756bfbac349d
- 2e075d729ca668014921c16c1b01756bfbac349d kabi: Include kconfig.h
+https://gitlab.com/cki-project/kernel-ark/-/commit/0561f5953431ff471193611cd73af65dd394c8cd
+ 0561f5953431ff471193611cd73af65dd394c8cd nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/424819bdd66178aba46f4579b4ca66800a59f806
- 424819bdd66178aba46f4579b4ca66800a59f806 kabi: macros for intentional kABI breakage
+https://gitlab.com/cki-project/kernel-ark/-/commit/f801483d711fa5f83a0f9d4c479eeba702d1d477
+ f801483d711fa5f83a0f9d4c479eeba702d1d477 nvme: Return BLK_STS_TARGET if the DNR bit is set
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b0b3a78b095e53e3ea9ab34cb8a4ca5bbf8ffb70
- b0b3a78b095e53e3ea9ab34cb8a4ca5bbf8ffb70 kabi: fix the note about terminating semicolon
+https://gitlab.com/cki-project/kernel-ark/-/commit/4f2bc09956ad4829d139e9d69b86ba8b9ebc66e2
+ 4f2bc09956ad4829d139e9d69b86ba8b9ebc66e2 REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/0abbd10ef55bf11dd7aa943261a488a1c5d2e571
- 0abbd10ef55bf11dd7aa943261a488a1c5d2e571 kabi: introduce RH_KABI_HIDE_INCLUDE and RH_KABI_FAKE_INCLUDE
+https://gitlab.com/cki-project/kernel-ark/-/commit/65a21d545cc43328ea00fdbd62e7b45f375adce8
+ 65a21d545cc43328ea00fdbd62e7b45f375adce8 redhat: remove remaining references of CONFIG_RH_DISABLE_DEPRECATED
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/185ad74921ba8ba29330df01adbd6f295e87c91b
- 185ad74921ba8ba29330df01adbd6f295e87c91b pci.h: Fix static include
+https://gitlab.com/cki-project/kernel-ark/-/commit/1c1b5380b0b56d3be978997b128f84aeb9906656
+ 1c1b5380b0b56d3be978997b128f84aeb9906656 arch/x86: Remove vendor specific CPU ID checks
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a8ef8d36fb8b27bf39d5c44f58b9819a40ec3261
- a8ef8d36fb8b27bf39d5c44f58b9819a40ec3261 drivers/pci/pci-driver.c: Fix if/ifdef typo
+https://gitlab.com/cki-project/kernel-ark/-/commit/f7c032c856ba6379a77b76179d0352929d6039ec
+ f7c032c856ba6379a77b76179d0352929d6039ec redhat: Replace hardware.redhat.com link in Unsupported message
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a06f0ac1f63f89cdf6955181b5bfc1f946eefa53
- a06f0ac1f63f89cdf6955181b5bfc1f946eefa53 kernel/rh_taint.c: Update to new messaging
+https://gitlab.com/cki-project/kernel-ark/-/commit/9a6eb49603959cf0aab0198e13946eaee07801c3
+ 9a6eb49603959cf0aab0198e13946eaee07801c3 x86: Fix compile issues with rh_check_supported()
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/3e8695baec1ad199f49d9cb8e288fa652fb9ed13
- 3e8695baec1ad199f49d9cb8e288fa652fb9ed13 redhat: Add mark_driver_deprecated()
+https://gitlab.com/cki-project/kernel-ark/-/commit/8a605436efddfa7dbc6e007b2881fa81f17968a5
+ 8a605436efddfa7dbc6e007b2881fa81f17968a5 KEYS: Make use of platform keyring for module signature verify
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/e73d68ce09274e1c2f7e5f87795f7c7914ef1500
- e73d68ce09274e1c2f7e5f87795f7c7914ef1500 [scsi] megaraid_sas: re-add certain pci-ids
+https://gitlab.com/cki-project/kernel-ark/-/commit/c7c191f662438423a23592db42838ff550c2bdda
+ c7c191f662438423a23592db42838ff550c2bdda Input: rmi4 - remove the need for artificial IRQ in case of HID
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5837bc73ba68a7f96d61b31240c5d8fcede69835
- 5837bc73ba68a7f96d61b31240c5d8fcede69835 RHEL: disable io_uring support
+https://gitlab.com/cki-project/kernel-ark/-/commit/4ae139284600cd6fef133ce7a981485ea73381ab
+ 4ae139284600cd6fef133ce7a981485ea73381ab ARM: tegra: usb no reset
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b9686128ab1f23a9e7e2d250eca2994df39791b4
- b9686128ab1f23a9e7e2d250eca2994df39791b4 bpf: Fix unprivileged_bpf_disabled setup
+https://gitlab.com/cki-project/kernel-ark/-/commit/8156e2102f753bbe0f0dd222a5f232e7f3d99883
+ 8156e2102f753bbe0f0dd222a5f232e7f3d99883 arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/47fba9626ae0597d1a6169fb8ece0bdd612286c7
- 47fba9626ae0597d1a6169fb8ece0bdd612286c7 nvme: nvme_mpath_init remove multipath check
+https://gitlab.com/cki-project/kernel-ark/-/commit/823e733a88ddd21c735288dd3b08348e79872b91
+ 823e733a88ddd21c735288dd3b08348e79872b91 redhat: rh_kabi: deduplication friendly structs
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/40db0143d167f368a7ab5ff4a5706d1f2ae57f89
- 40db0143d167f368a7ab5ff4a5706d1f2ae57f89 wireguard: disable in FIPS mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/61d2a751fe1b1305684d6c1899f26fa9e38ac0a9
+ 61d2a751fe1b1305684d6c1899f26fa9e38ac0a9 redhat: rh_kabi add a comment with warning about RH_KABI_EXCLUDE usage
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/7c3b072fb73423383a71443bb3157067e7d72d09
- 7c3b072fb73423383a71443bb3157067e7d72d09 nvme: decouple basic ANA log page re-read support from native multipathing
+https://gitlab.com/cki-project/kernel-ark/-/commit/7d09cb3ea3dd2f3cda5a6a31be429f259106ca61
+ 7d09cb3ea3dd2f3cda5a6a31be429f259106ca61 redhat: rh_kabi: introduce RH_KABI_EXTEND_WITH_SIZE
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/cc8eb42bd5823a6a776c8a65fff79125bb955bc3
- cc8eb42bd5823a6a776c8a65fff79125bb955bc3 nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT
+https://gitlab.com/cki-project/kernel-ark/-/commit/c0c51c6f123df02948e11680d9b90324593ba547
+ c0c51c6f123df02948e11680d9b90324593ba547 redhat: rh_kabi: Indirect EXTEND macros so nesting of other macros will resolve.
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/0137ae359000f3ee0f51db1e761345b3709b3743
- 0137ae359000f3ee0f51db1e761345b3709b3743 nvme: Return BLK_STS_TARGET if the DNR bit is set
+https://gitlab.com/cki-project/kernel-ark/-/commit/96b20c70b39cd28efcec2336417cb0db9ff7853c
+ 96b20c70b39cd28efcec2336417cb0db9ff7853c redhat: rh_kabi: Fix RH_KABI_SET_SIZE to use dereference operator
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c8eb6e75bbb4e4705218e8b59ea1583c0f4f6f2d
- c8eb6e75bbb4e4705218e8b59ea1583c0f4f6f2d REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70
+https://gitlab.com/cki-project/kernel-ark/-/commit/198030a81d85dbac8f4030e69d3d376327433487
+ 198030a81d85dbac8f4030e69d3d376327433487 redhat: rh_kabi: Add macros to size and extend structs
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/45d5033ab5f2a41b5418167e39d805365aeda5f6
- 45d5033ab5f2a41b5418167e39d805365aeda5f6 redhat: remove remaining references of CONFIG_RH_DISABLE_DEPRECATED
+https://gitlab.com/cki-project/kernel-ark/-/commit/695af00ed9e393abe88d9ee4de3702c15ded186d
+ 695af00ed9e393abe88d9ee4de3702c15ded186d Removing Obsolete hba pci-ids from rhel8
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/1221d6a958fd1949f7485a4e771a2be1d8fd5a14
- 1221d6a958fd1949f7485a4e771a2be1d8fd5a14 arch/x86: Remove vendor specific CPU ID checks
+https://gitlab.com/cki-project/kernel-ark/-/commit/736038bd8039d1543468c1dc8925f20929645804
+ 736038bd8039d1543468c1dc8925f20929645804 mptsas: pci-id table changes
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/9441152c092e3cda5aa3cca06bf46a9304634348
- 9441152c092e3cda5aa3cca06bf46a9304634348 redhat: Replace hardware.redhat.com link in Unsupported message
+https://gitlab.com/cki-project/kernel-ark/-/commit/83cdf2924bdcc90c433a58129b4501e10b1295dc
+ 83cdf2924bdcc90c433a58129b4501e10b1295dc mptspi: pci-id table changes
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/f6f245e692cf0e32b962d09c8d8dfb95dbd3b32c
- f6f245e692cf0e32b962d09c8d8dfb95dbd3b32c x86: Fix compile issues with rh_check_supported()
+https://gitlab.com/cki-project/kernel-ark/-/commit/0b634d81ed7f0730e13d720508dbaa6ab94e54d2
+ 0b634d81ed7f0730e13d720508dbaa6ab94e54d2 qla2xxx: Remove PCI IDs of deprecated adapter
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/f9c64975adfabe3e6f8f96eccc2626daa467544c
- f9c64975adfabe3e6f8f96eccc2626daa467544c KEYS: Make use of platform keyring for module signature verify
+https://gitlab.com/cki-project/kernel-ark/-/commit/0d11491f9e7fe0c8c301db3256cb47c66ae8450f
+ 0d11491f9e7fe0c8c301db3256cb47c66ae8450f hpsa: remove old cciss-based smartarray pci ids
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/1c9fba1926622a1cdffdb06497a4ad36cb2f6e2a
- 1c9fba1926622a1cdffdb06497a4ad36cb2f6e2a Input: rmi4 - remove the need for artificial IRQ in case of HID
+https://gitlab.com/cki-project/kernel-ark/-/commit/75f69a4f7b8f9d38c5efb0231186ed8726e526f2
+ 75f69a4f7b8f9d38c5efb0231186ed8726e526f2 kernel: add SUPPORT_REMOVED kernel taint
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/7e254e97f3c76533fa49b4d54596f7daf6483e03
- 7e254e97f3c76533fa49b4d54596f7daf6483e03 ARM: tegra: usb no reset
+https://gitlab.com/cki-project/kernel-ark/-/commit/50081b0865239d853d77bc71e54d13fad8bac9f0
+ 50081b0865239d853d77bc71e54d13fad8bac9f0 Rename RH_DISABLE_DEPRECATED to RHEL_DIFFERENCES
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/78e0a585caebf3fd21507760325e1dd0878afd69
- 78e0a585caebf3fd21507760325e1dd0878afd69 arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT
+https://gitlab.com/cki-project/kernel-ark/-/commit/dc84f3cc1b19a0524e58a382c382f34081dc6c35
+ dc84f3cc1b19a0524e58a382c382f34081dc6c35 s390: Lock down the kernel when the IPL secure flag is set
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a68a89360e2ebcccff9398eca0b8894661f3e732
- a68a89360e2ebcccff9398eca0b8894661f3e732 redhat: rh_kabi: deduplication friendly structs
+https://gitlab.com/cki-project/kernel-ark/-/commit/cb55378c04d6516f303e98061ec7ddd6563429a8
+ cb55378c04d6516f303e98061ec7ddd6563429a8 efi: Lock down the kernel if booted in secure boot mode
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a1925f7121d95e5b369f46f39173f94e07c1b3e1
- a1925f7121d95e5b369f46f39173f94e07c1b3e1 redhat: rh_kabi add a comment with warning about RH_KABI_EXCLUDE usage
+https://gitlab.com/cki-project/kernel-ark/-/commit/9b06e1f07c3cc9e1d0533b8615426d4d5d9e4ebb
+ 9b06e1f07c3cc9e1d0533b8615426d4d5d9e4ebb efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/7ea4ef48dd6f80b157734701bc3a758f6641aa23
- 7ea4ef48dd6f80b157734701bc3a758f6641aa23 redhat: rh_kabi: introduce RH_KABI_EXTEND_WITH_SIZE
+https://gitlab.com/cki-project/kernel-ark/-/commit/db249925c6802b38d910927e4d032af1e00bee56
+ db249925c6802b38d910927e4d032af1e00bee56 security: lockdown: expose a hook to lock the kernel down
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/08b02238f283cd7c79e330aa2bb95f54a2b6d0d3
- 08b02238f283cd7c79e330aa2bb95f54a2b6d0d3 redhat: rh_kabi: Indirect EXTEND macros so nesting of other macros will resolve.
+https://gitlab.com/cki-project/kernel-ark/-/commit/f9604bcd305aba2a94e713ee758a51143687ae9f
+ f9604bcd305aba2a94e713ee758a51143687ae9f Make get_cert_list() use efi_status_to_str() to print error messages.
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/4c2b3ec5d985f9005f1b9a4c3533b39b6988f25a
- 4c2b3ec5d985f9005f1b9a4c3533b39b6988f25a redhat: rh_kabi: Fix RH_KABI_SET_SIZE to use dereference operator
+https://gitlab.com/cki-project/kernel-ark/-/commit/b75eb3e922c93d78d4190a759f5725e856d35439
+ b75eb3e922c93d78d4190a759f5725e856d35439 Add efi_status_to_str() and rework efi_status_to_err().
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8132b8885fb3e0a3a72a263c95c98444180fe4dc
- 8132b8885fb3e0a3a72a263c95c98444180fe4dc redhat: rh_kabi: Add macros to size and extend structs
+https://gitlab.com/cki-project/kernel-ark/-/commit/2f80042d6b8199fceadf3623243402066e0cd4ea
+ 2f80042d6b8199fceadf3623243402066e0cd4ea Add support for deprecating processors
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/cc565f9c69596943e6d6359fb6029865848a21f7
- cc565f9c69596943e6d6359fb6029865848a21f7 Removing Obsolete hba pci-ids from rhel8
+https://gitlab.com/cki-project/kernel-ark/-/commit/5a3b4f5754788e42db8ed550b359382b600f2b08
+ 5a3b4f5754788e42db8ed550b359382b600f2b08 arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/64c4b7cfe7f2b2c2b0a3d989c5298f60db8399f0
- 64c4b7cfe7f2b2c2b0a3d989c5298f60db8399f0 mptsas: pci-id table changes
+https://gitlab.com/cki-project/kernel-ark/-/commit/36cd5d0a0aa0a3be8ac385ca8991563c9e58227f
+ 36cd5d0a0aa0a3be8ac385ca8991563c9e58227f iommu/arm-smmu: workaround DMA mode issues
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/29fc79295bf5eefe1bd62ed31c2d6b8e2883d0a0
- 29fc79295bf5eefe1bd62ed31c2d6b8e2883d0a0 mptsas: Taint kernel if mptsas is loaded
+https://gitlab.com/cki-project/kernel-ark/-/commit/ca34010e072550c8d5ea57f9436bab254c3521cc
+ ca34010e072550c8d5ea57f9436bab254c3521cc rh_kabi: introduce RH_KABI_EXCLUDE
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/9410845319b2350980af59ba2e02eea6f3ce61b6
- 9410845319b2350980af59ba2e02eea6f3ce61b6 mptspi: pci-id table changes
+https://gitlab.com/cki-project/kernel-ark/-/commit/26054e2c4e2253fe955a351971dc6b931cb68961
+ 26054e2c4e2253fe955a351971dc6b931cb68961 ipmi: do not configure ipmi for HPE m400
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d228858987e5502eb2ea8dba21fc75a7fd11a036
- d228858987e5502eb2ea8dba21fc75a7fd11a036 qla2xxx: Remove PCI IDs of deprecated adapter
+https://gitlab.com/cki-project/kernel-ark/-/commit/9cb0f734492a21a7e506d7145caf143ccd927b2a
+ 9cb0f734492a21a7e506d7145caf143ccd927b2a kABI: Add generic kABI macros to use for kABI workarounds
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d48bf0c8d771afdaa5e3f9aa5737a484a7241423
- d48bf0c8d771afdaa5e3f9aa5737a484a7241423 be2iscsi: remove unsupported device IDs
+https://gitlab.com/cki-project/kernel-ark/-/commit/4960e5ee4a0e9bb28e512eb35cfa633ac4552049
+ 4960e5ee4a0e9bb28e512eb35cfa633ac4552049 add pci_hw_vendor_status()
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5acb6bae87df12f48f812c7f98640a8c4f3664bc
- 5acb6bae87df12f48f812c7f98640a8c4f3664bc mptspi: Taint kernel if mptspi is loaded
+https://gitlab.com/cki-project/kernel-ark/-/commit/291c4e2878431fd6937c5b9248babe8ec8d4233e
+ 291c4e2878431fd6937c5b9248babe8ec8d4233e ahci: thunderx2: Fix for errata that affects stop engine
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/ba6253f7e48352b107f4be1a6dcd6d5f05e7086c
- ba6253f7e48352b107f4be1a6dcd6d5f05e7086c hpsa: remove old cciss-based smartarray pci ids
+https://gitlab.com/cki-project/kernel-ark/-/commit/996869cc0b3e78cb9182a4ebced2c46ee2774935
+ 996869cc0b3e78cb9182a4ebced2c46ee2774935 Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/206a4711d24782bd86eda06a49babe2d41a99e70
- 206a4711d24782bd86eda06a49babe2d41a99e70 qla4xxx: Remove deprecated PCI IDs from RHEL 8
+https://gitlab.com/cki-project/kernel-ark/-/commit/c1c7a887998ab12c5a1180c4bca3b41c31fe4aa6
+ c1c7a887998ab12c5a1180c4bca3b41c31fe4aa6 bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/952162be12431bdda0b24cfd6fb3f05325235c87
- 952162be12431bdda0b24cfd6fb3f05325235c87 aacraid: Remove depreciated device and vendor PCI id's
+https://gitlab.com/cki-project/kernel-ark/-/commit/e40c9d10474d1a5b5f7f01175a72ba4a3c7f5e8e
+ e40c9d10474d1a5b5f7f01175a72ba4a3c7f5e8e add Red Hat-specific taint flags
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/10824914e18892d57ffc8c9590ddeb1ccf5797db
- 10824914e18892d57ffc8c9590ddeb1ccf5797db megaraid_sas: remove deprecated pci-ids
+https://gitlab.com/cki-project/kernel-ark/-/commit/f23f446b724fbb79c1e09a278fcb427fc29c0c05
+ f23f446b724fbb79c1e09a278fcb427fc29c0c05 tags.sh: Ignore redhat/rpm
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/4c2fa845bbc12c904534f2089b62c0fc2512be6d
- 4c2fa845bbc12c904534f2089b62c0fc2512be6d mpt*: remove certain deprecated pci-ids
+https://gitlab.com/cki-project/kernel-ark/-/commit/a68aa65a20fba1908a7326e5321ce8bc39a9ae14
+ a68aa65a20fba1908a7326e5321ce8bc39a9ae14 put RHEL info into generated headers
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/35549c56c463bb5e24bb4d5a59425f1392787c07
- 35549c56c463bb5e24bb4d5a59425f1392787c07 kernel: add SUPPORT_REMOVED kernel taint
+https://gitlab.com/cki-project/kernel-ark/-/commit/80937f1973d73fccdc75db4026fbed7cba16f489
+ 80937f1973d73fccdc75db4026fbed7cba16f489 aarch64: acpi scan: Fix regression related to X-Gene UARTs
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b3a3dc4359db46e1285dce72ec30cc8f5931a9a7
- b3a3dc4359db46e1285dce72ec30cc8f5931a9a7 Rename RH_DISABLE_DEPRECATED to RHEL_DIFFERENCES
+https://gitlab.com/cki-project/kernel-ark/-/commit/3362fd10fe075b48ff8af023da5643bc9477a4c6
+ 3362fd10fe075b48ff8af023da5643bc9477a4c6 ACPI / irq: Workaround firmware issue on X-Gene based m400
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/1f05bf488a1c50586eda1cc069d8cc09c3cb27e8
- 1f05bf488a1c50586eda1cc069d8cc09c3cb27e8 s390: Lock down the kernel when the IPL secure flag is set
+https://gitlab.com/cki-project/kernel-ark/-/commit/ffc66b174954abecfb360dcc3b98c3139ef12d96
+ ffc66b174954abecfb360dcc3b98c3139ef12d96 modules: add rhelversion MODULE_INFO tag
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b2020ad96f0c8d6683c2f84c3a158dbf2266310e
- b2020ad96f0c8d6683c2f84c3a158dbf2266310e efi: Lock down the kernel if booted in secure boot mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/7e469c23b8f648d79e8a0e82ee41cda0e50b2f19
+ 7e469c23b8f648d79e8a0e82ee41cda0e50b2f19 ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/385533da5cd63e15bbab882a59007c5e5382b766
- 385533da5cd63e15bbab882a59007c5e5382b766 efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
+https://gitlab.com/cki-project/kernel-ark/-/commit/a0f49117d038de2d4db4940f5f039addb2f7231d
+ a0f49117d038de2d4db4940f5f039addb2f7231d Add Red Hat tainting
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/3b28631082cf22458d6a4ceb84aa73c3fef67e7b
- 3b28631082cf22458d6a4ceb84aa73c3fef67e7b security: lockdown: expose a hook to lock the kernel down
+https://gitlab.com/cki-project/kernel-ark/-/commit/fa67c16e780ed355f9847da90e8055ad1175c238
+ fa67c16e780ed355f9847da90e8055ad1175c238 Introduce CONFIG_RH_DISABLE_DEPRECATED
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/3327ad6fd7ddf542cbb4ff99ac4c8b99a420a4a0
- 3327ad6fd7ddf542cbb4ff99ac4c8b99a420a4a0 Make get_cert_list() use efi_status_to_str() to print error messages.
+https://gitlab.com/cki-project/kernel-ark/-/commit/e7e1371803470a7840dc61da628cb912834ec149
+ e7e1371803470a7840dc61da628cb912834ec149 Pull the RHEL version defines out of the Makefile
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/551e908d2a9573e1ece3b03d5ca6757f33bea8d2
- 551e908d2a9573e1ece3b03d5ca6757f33bea8d2 Add efi_status_to_str() and rework efi_status_to_err().
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/14302fe3be5d6caff93aaa25fcbf605961d16cb1
- 14302fe3be5d6caff93aaa25fcbf605961d16cb1 Add support for deprecating processors
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/d373fb2c1df0685d2cb956a0e8adaec22d315184
- d373fb2c1df0685d2cb956a0e8adaec22d315184 arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/5e78bdc20af7e8fd9b3bedeffa393856d8603cb1
- 5e78bdc20af7e8fd9b3bedeffa393856d8603cb1 iommu/arm-smmu: workaround DMA mode issues
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/f1d02bdb26a8e604ecea2af6ccf2f63e79af3795
- f1d02bdb26a8e604ecea2af6ccf2f63e79af3795 rh_kabi: introduce RH_KABI_EXCLUDE
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/6ae539773ce2eff627b2e900fbe61e9ab8042845
- 6ae539773ce2eff627b2e900fbe61e9ab8042845 ipmi: do not configure ipmi for HPE m400
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/10807fb931e21416f38dc152fb76bf6cd9e4269c
- 10807fb931e21416f38dc152fb76bf6cd9e4269c kABI: Add generic kABI macros to use for kABI workarounds
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/df7ae4ac4f5124335b682a733373daef346eb356
- df7ae4ac4f5124335b682a733373daef346eb356 add pci_hw_vendor_status()
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/c23cb92fd9a481f9a9b8022159e1cd299a0f78e2
- c23cb92fd9a481f9a9b8022159e1cd299a0f78e2 ahci: thunderx2: Fix for errata that affects stop engine
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/f64aee45429d18c04b35f033ea1df3a9c50775e1
- f64aee45429d18c04b35f033ea1df3a9c50775e1 Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/677c8684efa24a399aec6bebb8ca9a63a01b3765
- 677c8684efa24a399aec6bebb8ca9a63a01b3765 bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/1c018592fa8ce557518df0368c8ce961c473f25b
- 1c018592fa8ce557518df0368c8ce961c473f25b add Red Hat-specific taint flags
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/a5c07c4fedf77ba27df3030acc175af492af543e
- a5c07c4fedf77ba27df3030acc175af492af543e tags.sh: Ignore redhat/rpm
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/dc25e898f99f0ff54e4dc4895b0d1b3f480e09df
- dc25e898f99f0ff54e4dc4895b0d1b3f480e09df put RHEL info into generated headers
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/121f2bae0cedcb7a88a1ee2cce56c159d06ebcba
- 121f2bae0cedcb7a88a1ee2cce56c159d06ebcba aarch64: acpi scan: Fix regression related to X-Gene UARTs
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/5485d3e95cfb5fe030c6ac5cce2acb32e215e0cb
- 5485d3e95cfb5fe030c6ac5cce2acb32e215e0cb ACPI / irq: Workaround firmware issue on X-Gene based m400
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/1d443627f0e431ca232ab7c5cea94b7c40f6bb01
- 1d443627f0e431ca232ab7c5cea94b7c40f6bb01 modules: add rhelversion MODULE_INFO tag
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/af20b891f8f2762f7fc47dc5d5eda64408d0e116
- af20b891f8f2762f7fc47dc5d5eda64408d0e116 ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/6eadfebda9c4b3b817380ce6dfd5208665f21ae3
- 6eadfebda9c4b3b817380ce6dfd5208665f21ae3 Add Red Hat tainting
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/1e7abef11f155c6fda7cd8646ea97d0661a18252
- 1e7abef11f155c6fda7cd8646ea97d0661a18252 Introduce CONFIG_RH_DISABLE_DEPRECATED
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/81800e80941d222bfee5486858f3fc4afea74c67
- 81800e80941d222bfee5486858f3fc4afea74c67 Pull the RHEL version defines out of the Makefile
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/e61c4f523aa83f7edb75a65b10de4c7c1ad90272
- e61c4f523aa83f7edb75a65b10de4c7c1ad90272 [initial commit] Add Red Hat variables in the top level makefile
+https://gitlab.com/cki-project/kernel-ark/-/commit/84d1d3e3d0c2c7ed1f571c8495bad3b4d97cfa8e
+ 84d1d3e3d0c2c7ed1f571c8495bad3b4d97cfa8e [initial commit] Add Red Hat variables in the top level makefile
 

def_variants.yaml.fedora

@@ -12,10 +12,6 @@ packages:
     depends-on:
     - modules-core
     - modules
-  - name: modules-rt-kvm
-    if_variant_in: ["rt"]
-    depends-on:
-    - modules-core
 
 
 rules:
@@ -23,9 +19,6 @@ rules:
     exact_pkg: True
   - .*test[^/]*.ko: modules-internal
 
-  - arch/x86/kvm/kvm(-amd|-intel|\.).*: modules-rt-kvm
-    if_variant_in: ["rt"]
-
   - arch/.*: modules-core
   - crypto/.*: modules-core
 
@@ -72,8 +65,6 @@ rules:
   - drivers/gpio/gpio-dln2.*: modules-extra
   - drivers/gpio/gpio-ljca.*: modules
   - drivers/gpio/.*: modules-core
-  - drivers/gpu/drm/i915/kvmgt.*: modules-rt-kvm
-    if_variant_in: ["rt"]
   - drivers/gpu/drm/display/drm_.*: modules-core
   - drivers/gpu/drm/drm.*: modules-core
   - drivers/gpu/drm/etnaviv/.*: modules-core
@@ -252,8 +243,6 @@ rules:
   - drivers/powercap/intel_rapl_tpmi.*: modules
   - drivers/powercap/.*: modules-core
   - drivers/pps/.*: modules-core
-  - drivers/ptp/ptp_kvm.*: modules-rt-kvm
-    if_variant_in: ["rt"]
   - drivers/ptp/ptp_mock.*: modules-internal
   - drivers/ptp/ptp_dfl_tod.*: modules
   - drivers/ptp/.*: modules-core

def_variants.yaml.rhel

@@ -12,10 +12,6 @@ packages:
     depends-on:
     - modules-core
     - modules
-  - name: modules-rt-kvm
-    if_variant_in: ["rt"]
-    depends-on:
-    - modules-core
   - name: modules-partner
     depends-on:
     - modules-core
@@ -26,9 +22,6 @@ rules:
     exact_pkg: True
   - .*test[^/]*.ko: modules-internal
 
-  - arch/x86/kvm/kvm(-amd|-intel|\.).*: modules-rt-kvm
-    if_variant_in: ["rt"]
-
   - arch/.*: modules-core
   - block/t10-pi.ko: modules-core
   - crypto/.*: modules-core
@@ -78,8 +71,6 @@ rules:
   - drivers/gpio/gpio-dln2.*: modules-extra
   - drivers/gpio/gpio-ljca.*: modules
   - drivers/gpio/.*: modules-core
-  - drivers/gpu/drm/i915/kvmgt.*: modules-rt-kvm
-    if_variant_in: ["rt"]
   - drivers/gpu/drm/display/drm_.*: modules-core
   - drivers/gpu/drm/drm.*: modules-core
   - drivers/gpu/drm/etnaviv/.*: modules-core
@@ -256,8 +247,6 @@ rules:
   - drivers/powercap/intel_rapl_tpmi.*: modules
   - drivers/powercap/.*: modules-core
   - drivers/pps/.*: modules-core
-  - drivers/ptp/ptp_kvm.*: modules-rt-kvm
-    if_variant_in: ["rt"]
   - drivers/ptp/ptp_mock.*: modules-internal
   - drivers/ptp/ptp_dfl_tod.*: modules
   - drivers/ptp/.*: modules-core

dracut-virt.conf

@@ -27,6 +27,16 @@ dracutmodules+=" systemd-sysext "
 # modules: root disk integrity protection
 dracutmodules+=" systemd-veritysetup "
 
+# modules: root creation and encryption
+dracutmodules+=" systemd-repart "
+# FIXME: remove this once RHEL-103385 is merged
+install_items+=" /usr/sbin/mkfs.vfat /usr/sbin/mkfs.ext4 /usr/sbin/mkfs.xfs "
+
+# modules: FIPS
+dracutmodules+=" fips "
+# FIPS mode requires early crypto drivers test
+drivers+=" =crypto "
+
 # drivers: virtual buses, pci
 drivers+=" virtio-pci virtio-mmio "      # qemu-kvm
 drivers+=" hv-vmbus pci-hyperv "         # hyperv

filtermods.py

@@ -823,11 +823,12 @@ class FiltermodTests(unittest.TestCase):
                                                    do_pictures=FiltermodTests.do_pictures,
                                                    variants=['rt'])
 
-        self.assertIsNotNone(self.pkg_list.get('rt-kvm'))
+        self.assertIsNotNone(self.pkg_list.get('modules-other'))
         self._is_kmod_pkg('kmod1', 'modules-core')
         self._is_kmod_pkg('kmod2', 'modules-core')
         self._is_kmod_pkg('kmod3', 'modules')
-        self._is_kmod_pkg('kmod4', 'rt-kvm')
+        self._is_kmod_pkg('kmod4', 'modules-other')
+
 
     def test2(self):
         self.pkg_list, self.kmod_list = sort_kmods(get_td('test2.dep'), get_td('test2.yaml'),

kernel.sbat.template

@@ -0,0 +1,2 @@
+sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
+kernel.@SBAT_SUFFIX,1,Red Hat,kernel-core,@KVER,mailto:secalert@redhat.com

process_configs.sh

@@ -1,20 +1,24 @@
 #!/bin/bash
 #
-# This script takes the merged config files and processes them through oldconfig
-# and listnewconfig
+# This script takes the merged config files and processes them through olddefconfig
+# and listnewconfig to ensure kernel configurations are valid and complete.
 #
 # Globally disable suggestion of appending '|| exit' or '|| return' to cd/pushd/popd commands
 # shellcheck disable=SC2164
 
+# Exit if this is a test environment
 test -n "$RHTEST" && exit 0
 
+# Display usage information and available command line options
 usage()
 {
 	# alphabetical order please
 	echo "process_configs.sh [ options ] package_name kernel_version"
 	echo "     -a: report all errors, equivalent to [-c -n -w -i]"
 	echo "     -c: error on mismatched config options"
-	echo "     -i: continue on error"
+	echo "     -i: ignore any errors, but print them"
+	echo "     -m: specify make options (e.g., -m CC=clang, -m LLVM=1)"
+	echo "     -M: commit mismatched configs to pending directory"
 	echo "     -n: error on unset config options"
 	echo "     -t: test run, do not overwrite original config"
 	echo "     -w: error on misconfigured config options"
@@ -33,6 +37,9 @@ die()
 	exit 1
 }
 
+# Determine the correct cross-compiler prefix based on compiler type
+# For clang builds, return the architecture directly
+# For GCC builds, use the dummy-tools directory
 get_cross_compile()
 {
 	arch=$1
@@ -43,7 +50,8 @@ get_cross_compile()
 	fi
 }
 
-# stupid function to find top of tree to do kernel make configs
+# Find the top-level kernel source directory
+# (identified by MAINTAINERS file and drivers directory)
 switch_to_toplevel()
 {
 	path="$(pwd)"
@@ -60,11 +68,124 @@ switch_to_toplevel()
 	echo "$path"
 }
 
+# Determine the correct config path based on architecture and variant
+# This function maps arch/variant combinations to the proper pending directory
+determine_config_path()
+{
+	local arch="$1"
+	local variant="$2"
+	local config_path=""
+
+	# Identify the variant - they have their own top-level directories
+	if [[ "$variant" == *"rt"* ]]; then
+		# RT variant - goes under rt/
+		if [[ "$variant" == *"debug"* ]]; then
+			config_path="rt/debug"
+		else
+			config_path="rt/generic"
+		fi
+	elif [[ "$variant" == *"automotive"* ]]; then
+		# Automotive variant - goes under automotive/
+		if [[ "$variant" == *"debug"* ]]; then
+			config_path="automotive/debug"
+		else
+			config_path="automotive/generic"
+		fi
+	else
+		# Stock kernel - goes under top-level debug or generic
+		if [[ "$variant" == *"debug"* ]]; then
+			config_path="debug"
+		else
+			config_path="generic"
+		fi
+	fi
+
+	# Add architecture-specific subdirectories
+	case "$arch" in
+		arm64)
+			config_path="$config_path/arm/aarch64"
+			;;
+		powerpc)
+			config_path="$config_path/powerpc"
+			;;
+		riscv)
+			config_path="$config_path/riscv/riscv64"
+			;;
+		s390)
+			if [[ "$variant" == *"zfcpdump"* ]]; then
+				config_path="$config_path/s390x/zfcpdump"
+			else
+				config_path="$config_path/s390x"
+			fi
+			;;
+		x86_64)
+			config_path="$config_path/x86"
+			;;
+		*)
+			# For unknown architectures, don't add arch subdirectory
+			;;
+	esac
+
+	echo "$config_path"
+}
+
+# Parse mismatched configs found during processing and create
+# individual CONFIG files in the pending directory for each
+parse_mismatched_configs()
+{
+	local tmpdir
+	local count=$1    # Counter for unique filenames
+	local arch=$2
+	local variant=$3
+
+	tmpdir=$(mktemp -d)
+
+	# Parse the mismatches file and create individual CONFIG files
+	tail -n +2 .mismatches"${count}" | while read -r LINE
+	do
+		if echo "$LINE" | grep -q "Found # .* is not set, after generation"; then
+			# Handle case where we found "# CONFIG_FOO is not set" after generation
+			config_name="${LINE#*Found # }"
+			config_name="${config_name% is not set, after generation*}"
+			if [ -n "$config_name" ]; then
+				echo "# Mismatch found in $arch $variant config" > "$tmpdir/$config_name"
+				echo "# $config_name is not set" >> "$tmpdir/$config_name"
+			fi
+		elif echo "$LINE" | grep -q "Found .* after generation"; then
+			# Handle case where we found "CONFIG_FOO=value" after generation
+			config_name="${LINE#*Found }"
+			config_name="${config_name% after generation*}"
+			config_name="${config_name%=*}"
+			config_value="${LINE#*Found }"
+			config_value="${config_value#*=}"
+			config_value="${config_value% after generation*}"
+			if [ -n "$config_name" ] && [ -n "$config_value" ]; then
+				echo "# Mismatch found in $arch $variant config" > "$tmpdir/$config_name"
+				echo "$config_name=$config_value" >> "$tmpdir/$config_name"
+			fi
+		fi
+	done
+
+	# Copy the CONFIG files to the pending directory
+	config_path=$(determine_config_path "$arch" "$variant")
+	mkdir -p "$SCRIPT_DIR/pending-$FLAVOR/$config_path/"
+	for f in "$tmpdir"/*; do
+		[[ -e "$f" ]] || break
+		cp "$f" "$SCRIPT_DIR/pending-$FLAVOR/$config_path/"
+	done
+
+	rm -rf "$tmpdir"
+}
+
+# Check for configuration mismatches between the original and generated configs
 checkoptions()
 {
-	count=$3
-	variant=$4
+	cfg=$1      # Original config file
+	cfgtmp=$2   # Generated config file
+	count=$3    # Counter for unique filenames
+	variant=$4  # Config variant (e.g., debug, rt)
 
+	# This awk script compares configuration files for mismatches
 	/usr/bin/awk '
 
 		/is not set/ {
@@ -87,7 +208,7 @@ checkoptions()
 					 print "Found "a[1]"="a[2]" after generation, had " a[1]"="configs[a[1]]" in Source tree";
 			}
 		}
-	' "$1" "$2" > .mismatches"${count}"
+	' "$cfg" "$cfgtmp" > .mismatches"${count}"
 
 	checkoptions_error=false
 	if test -s .mismatches"${count}"
@@ -107,11 +228,18 @@ checkoptions()
 		! $checkoptions_error && return
 
 		sed -i "1s/^/Error: Mismatches found in configuration files for ${arch} ${variant}\n/" .mismatches"${count}"
+
+		# Add mismatched configs to the pending directory
+		if test -n "$COMMITMISMATCHES"; then
+			parse_mismatched_configs "$count" "$arch" "$variant"
+		fi
 	else
 		rm -f .mismatches"${count}"
 	fi
 }
 
+# Parse the output of 'make listnewconfig' and 'make helpnewconfig'
+# to create properly formatted configuration files for new configs
 parsenewconfigs()
 {
 	tmpdir=$(mktemp -d)
@@ -154,12 +282,14 @@ parsenewconfigs()
                         split($0, a, " ");
                         symbol="CONFIG_"a[2];
                         outfile=BASE "/fake_"symbol
+                        print "# ~~~" >> outfile;
                 }
                 /-----/ {
 			if (inpatch == 0) {
 				inpatch = 1;
 			}
                         else {
+                                print "# ~~~" >> outfile;
                                 if (symbol != "none") {
                                     print "# Commit: "commit >> outfile
                                     system("cat " outfile " " BASE "/" symbol " > " BASE "/tmpf");
@@ -194,12 +324,32 @@ parsenewconfigs()
 	popd &> /dev/null
 	for f in "$tmpdir"/*; do
 		[[ -e "$f" ]] || break
-		cp "$f" "$SCRIPT_DIR/pending$FLAVOR/generic/"
+		cp "$f" "$SCRIPT_DIR/pending-$FLAVOR/generic/"
 	done
 
 	rm -rf "$tmpdir"
 }
 
+# Commit any mismatched configs that were saved to the pending directory
+commit_mismatched_configs()
+{
+	# assume we are in $source_tree/configs, need to get to top level
+	pushd "$(switch_to_toplevel)" &>/dev/null
+
+	# Check if there are any modified or untracked mismatched configs to commit
+	if git status --porcelain "$SCRIPT_DIR/pending-$FLAVOR/" | grep -q .; then
+		echo "Committing mismatched configuration files..."
+		git add "$SCRIPT_DIR/pending-$FLAVOR"
+		git commit -m "[redhat] AUTOMATIC: Mismatched $FLAVOR configs"
+		echo "Mismatched configs committed to pending-$FLAVOR directory"
+	else
+		echo "No mismatched configs found to commit"
+	fi
+
+	popd &>/dev/null
+}
+
+# Processes all config files, finds new/unset configs, and commits them
 function commit_new_configs()
 {
 	# assume we are in $source_tree/configs, need to get to top level
@@ -232,10 +382,13 @@ function commit_new_configs()
 		echo "done"
 	done
 
-	git add "$SCRIPT_DIR/pending$FLAVOR"
+	# Commit the new configuration files to git
+	git add "$SCRIPT_DIR/pending-$FLAVOR"
+	# DO NOT CHANGE THIS MESSAGE! gen_config_patches.sh looks for this commit message.
 	git commit -m "[redhat] AUTOMATIC: New configs"
 }
 
+# Process a single configuration file
 function process_config()
 {
 	local cfg
@@ -305,16 +458,13 @@ function process_config()
 	echo "Processing $cfg complete"
 }
 
+# Process all configuration files
+# Handles parallel processing and error reporting
 function process_configs()
 {
 	# assume we are in $source_tree/configs, need to get to top level
 	pushd "$(switch_to_toplevel)" &>/dev/null
 
-	# The next line is throwaway code for transition to parallel
-	# processing.  Leaving this line in place is harmless, but it can be
-	# removed the next time anyone updates this function.
-	[ -f .mismatches ] && rm -f .mismatches
-
 	count=0
 	for cfg in "$SCRIPT_DIR/${SPECPACKAGE_NAME}${KVERREL}"*.config
 	do
@@ -340,7 +490,13 @@ function process_configs()
 		cat .errors*
 		rm .errors* -f
 	fi
-	if ls .mismatches* 1> /dev/null 2>&1; then
+
+	# Commit any mismatched configs found during processing
+	if [ $RETURNCODE -eq 0 ] && test -n "$COMMITMISMATCHES"; then
+		rm .mismatches* -f
+		commit_mismatched_configs
+	# Otherwise, display any mismatched configs
+	elif ls .mismatches* 1> /dev/null 2>&1; then
 		RETURNCODE=1
 		cat .mismatches*
 		rm .mismatches* -f
@@ -352,11 +508,13 @@ function process_configs()
 }
 
 CHECKOPTIONS=""
+IGNOREERRORS=""
 NEWOPTIONS=""
 TESTRUN=""
 CHECKWARNINGS=""
 MAKEOPTS=""
 CC_IS_CLANG=0
+COMMITMISMATCHES=""
 
 RETURNCODE=0
 
@@ -365,7 +523,9 @@ do
 	key="$1"
 	case $key in
 		-a)
+			# Enable all error checking options
 			CHECKOPTIONS="x"
+			IGNOREERRORS="x"
 			NEWOPTIONS="x"
 			CHECKWARNINGS="x"
 			;;
@@ -375,6 +535,9 @@ do
 		-h)
 			usage
 			;;
+		-i)
+			IGNOREERRORS="x"
+			;;
 		-n)
 			NEWOPTIONS="x"
 			;;
@@ -389,11 +552,16 @@ do
 			;;
 		-m)
 			shift
+			# Handle clang compiler options
 			if [ "$1" = "CC=clang" ] || [ "$1" = "LLVM=1" ]; then
 				CC_IS_CLANG=1
 			fi
 			MAKEOPTS="$MAKEOPTS $1"
 			;;
+		-M)
+			COMMITMISMATCHES="x"
+			CHECKOPTIONS="x"
+			;;
 		*)
 			break;;
 	esac
@@ -401,17 +569,11 @@ do
 done
 
 KVERREL="$(test -n "$1" && echo "-$1" || echo "")"
-FLAVOR="$(test -n "$2" && echo "-$2" || echo "-rhel")"
+FLAVOR="$(test -n "$2" && echo "$2" || echo "rhel")"
 # shellcheck disable=SC2015
 SCRIPT=$(readlink -f "$0")
 SCRIPT_DIR=$(dirname "$SCRIPT")
 
-# Config options for RHEL should target the pending-rhel directory, not pending-common.
-if [ "$FLAVOR" = "-rhel" ]
-then
-	FLAVOR="-rhel"
-fi
-
 # to handle this script being a symlink
 cd "$SCRIPT_DIR"
 
@@ -421,4 +583,8 @@ else
 	process_configs
 fi
 
-exit $RETURNCODE
+if test -n "$IGNOREERRORS"; then
+	exit 0
+else
+	exit $RETURNCODE
+fi

rpminspect.yaml

@@ -15,15 +15,31 @@ emptyrpm:
         - kernel-debug
         - kernel-debug-devel-matched
         - kernel-devel-matched
-        - kernel-lpae
+        - kernel-modules-extra-matched
         - kernel-zfcpdump
         - kernel-zfcpdump-devel-matched
         - kernel-zfcpdump-modules
+        - kernel-zfcpdump-modules-partner
+        - kernel-rt
+        - kernel-rt-debug
+        - kernel-rt-debug-devel-matched
+        - kernel-rt-devel-matched
+        - kernel-rt-modules-extra-matched
+        - kernel-64k
+        - kernel-64k-debug
+        - kernel-64k-debug-devel-matched
+        - kernel-64k-devel-matched
+        - kernel-64k-modules-extra-matched
+        - kernel-rt-64k
+        - kernel-rt-64k-debug
+        - kernel-rt-64k-debug-devel-matched
+        - kernel-rt-64k-devel-matched
+        - kernel-rt-64k-modules-extra-matched
 
 patches:
     ignore_list:
         - linux-kernel-test.patch
-        - patch-6.14-redhat.patch
+        - patch-6.19-redhat.patch
 
 runpath:
     ignore:

sources

@@ -1,3 +1,3 @@
-SHA512 (linux-6.14.tar.xz) = d15c33c9ae3c1b621f50a42c53d0dc0e473469c908ad243447318aec25c760dcae088c89755b96e33bfc39db5ed0ad4aa01659042788c2372063155c74eaae07
-SHA512 (kernel-abi-stablelists-6.14.0.tar.xz) = 38438b0c5cadc5dcb33f1aae852b08660020da6af9799f320ea226ba09d9fd48645b8ab76f57af25935fd95f1ec691cc6df04438575e001b7553c1c9fb41b07d
-SHA512 (kernel-kabi-dw-6.14.0.tar.xz) = 07cb6e8d327ef5dfd7c9598fc593a7a882f1ca074614a31ec552493ac7150b4dca029d3015ff5a9da7072b0560ebfd119616030fb0334349b890409028c42d4f
+SHA512 (linux-6.19-rc5.tar.xz) = d61ec1e68ee22b58a0e335e8a349e8c8a3d59219264d6f769d36c50f9a013e4bdf8b39481aa6dee575df62e60841ba687fccb7a82f99b9b005a09008927cb57e
+SHA512 (kernel-abi-stablelists-6.19.0.tar.xz) = 467b85c3bb413e713a2e1500060fe4f4ba6934cc5a28294a5952e4452baecf997e246317b09a34f7bece1daf26a4d4f40a95557ac843ec30d218c854f576516b
+SHA512 (kernel-kabi-dw-6.19.0.tar.xz) = 7a698cf2b133314dcbe1452a16859aa0af35d486af939b6c72b6d3e88692718900c61b79e31052342075fb74ee61581f19a5f8f1bac3e1813737f6336b84efe4

uki-addons.sbat.template

@@ -0,0 +1,2 @@
+sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
+kernel-uki-virt-addons.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt-addons,@KVER,mailto:secalert@redhat.com

uki.sbat.template

@@ -0,0 +1,2 @@
+sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
+kernel-uki-virt.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt,@KVER,mailto:secalert@redhat.com

uki_addons.json

@@ -23,6 +23,9 @@
         ],
         "debug.addon": [
             "debug"
+        ],
+        "systemd-volatile-overlay.addon": [
+            "systemd.volatile=overlay"
         ]
     },
     "virt": {

uki_create_addons.py

@@ -4,7 +4,7 @@
 # creates an addon for each key/value pair matching the given uki, distro and
 # arch provided in input.
 #
-# Usage: python uki_create_addons.py input_json out_dir uki distro arch
+# Usage: python uki_create_addons.py input_json out_dir uki distro arch [sbat]
 #
 # This tool requires the systemd-ukify and systemd-boot packages.
 #
@@ -26,14 +26,6 @@
 # json['virt']['common']['test.addon'] = ['test2'], any other uki except virt
 # will have a test.addon.efi with text "test1", and virt will have a
 # test.addon.efi with "test2"
-#
-# sbat.conf
-#----------
-# This dict is containing the sbat string for *all* addons being created.
-# This dict is optional, but when used has to be put in a sub-dict with
-# { 'sbat' : { 'sbat.conf' : ['your text here'] }}
-# It follows the same syntax as the addon files, meaning '#' is comment and
-# the rest is taken as sbat string and feed to ukify.
 
 import os
 import sys
@@ -45,7 +37,7 @@ import subprocess
 UKIFY_PATH = '/usr/lib/systemd/ukify'
 
 def usage(err):
-    print(f'Usage: {os.path.basename(__file__)} input_json output_dir uki distro arch')
+    print(f'Usage: {os.path.basename(__file__)} input_json output_dir uki distro arch [sbat]')
     print(f'Error:{err}')
     sys.exit(1)
 
@@ -62,9 +54,8 @@ def check_clean_arguments(input_json, out_dir):
 UKICmdlineAddon = collections.namedtuple('UKICmdlineAddon', ['name', 'cmdline'])
 uki_addons_list = []
 uki_addons = {}
-addon_sbat_string = None
 
-def parse_lines(lines, rstrip=True):
+def parse_lines(lines):
     cmdline = ''
     for l in lines:
         l = l.lstrip()
@@ -72,27 +63,17 @@ def parse_lines(lines, rstrip=True):
             continue
         if l[0] == '#':
             continue
-        # rstrip is used only for addons cmdline, not sbat.conf, as it replaces
-        # return lines with spaces.
-        if rstrip:
-            l = l.rstrip() + ' '
-        cmdline += l
+        cmdline += l.rstrip() + ' '
     if cmdline == '':
         return ''
     return cmdline
 
 def parse_all_addons(in_obj):
-    global addon_sbat_string
-
     for el in in_obj.keys():
         # addon found: copy it in our global dict uki_addons
         if el.endswith('.addon'):
             uki_addons[el] = in_obj[el]
 
-    if 'sbat' in in_obj and 'sbat.conf' in in_obj['sbat']:
-        # sbat.conf found: override sbat with the most specific one found
-        addon_sbat_string = parse_lines(in_obj['sbat']['sbat.conf'], rstrip=False)
-
 def recursively_find_addons(in_obj, folder_list):
     # end of recursion, leaf directory. Search all addons here
     if len(folder_list) == 0:
@@ -121,21 +102,21 @@ def parse_in_json(in_json, uki_name, distro, arch):
         if cmdline:
             uki_addons_list.append(UKICmdlineAddon(addon_full_name, cmdline))
 
-def create_addons(out_dir):
+def create_addons(out_dir, sbat):
     for uki_addon in uki_addons_list:
         out_path = os.path.join(out_dir, uki_addon.name)
         cmd = [
             f'{UKIFY_PATH}', 'build',
             '--cmdline', uki_addon.cmdline,
             '--output', out_path]
-        if addon_sbat_string:
-            cmd.extend(['--sbat', addon_sbat_string.rstrip()])
+        if sbat:
+            cmd.extend(['--sbat', sbat.rstrip()])
 
         subprocess.check_call(cmd, text=True)
 
 if __name__ == "__main__":
     argc = len(sys.argv) - 1
-    if argc != 5:
+    if argc < 5 or argc > 6:
         usage('too few or too many parameters!')
 
     input_json = sys.argv[1]
@@ -144,8 +125,12 @@ if __name__ == "__main__":
     distro = sys.argv[4]
     arch = sys.argv[5]
 
+    custom_sbat = None
+    if argc == 6:
+        custom_sbat = sys.argv[6]
+
     out_dir = check_clean_arguments(input_json, out_dir)
     parse_in_json(input_json, uki_name, distro, arch)
-    create_addons(out_dir)
+    create_addons(out_dir, custom_sbat)