kernel-7.2.4-200

* Mon Sep 07 2026 Justin M. Forbes <jforbes@fedoraproject.org> [7.2.4-0]
- Remove unnecessary config file for Fedora (Justin M. Forbes)
- Add F43 and F44 to release_targets (Justin M. Forbes)
- Linux v7.2.4
Resolves:

Signed-off-by: Justin M. Forbes <jforbes@fedoraproject.org>

Makefile.rhelver

@@ -12,7 +12,7 @@ RHEL_MINOR = 99
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 59
+RHEL_RELEASE = 0
 
 #
 # RHEL_REBASE_NUM

Patchlist.changelog

@@ -1,474 +1,192 @@
-https://gitlab.com/cki-project/kernel-ark/-/commit/49bcc48074ba1f9c772b5c7ae11123a8ed3e0ac1
+https://gitlab.com/cki-project/kernel-ark/-/commit/0934168c639dca740c0f4fae084aade1f3542353
- 49bcc48074ba1f9c772b5c7ae11123a8ed3e0ac1 efi: Fix swapped arguments to bsearch() in efi_status_to_*()
+ 0934168c639dca740c0f4fae084aade1f3542353 Revert af_alg_restrict sysctl for F43/44
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/fe3e9e24af806d756edbda922103b1fa95d9b89b
+https://gitlab.com/cki-project/kernel-ark/-/commit/e8406125b1518ccea6da3a6d24c083d1266e86c2
- fe3e9e24af806d756edbda922103b1fa95d9b89b Revert "Removing Obsolete hba pci-ids from rhel8"
+ e8406125b1518ccea6da3a6d24c083d1266e86c2 Bluetooth: btusb: limit RTL8761B BROKEN_EXT_SCAN quirk to 0bda:a728
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c4a0a995da9df8732f688d09db5252173277589d
+https://gitlab.com/cki-project/kernel-ark/-/commit/6a286cd1edf4510f39fa76e9e9c74578dd6d066a
- c4a0a995da9df8732f688d09db5252173277589d rh_messages.h: add missing lpfc devices
+ 6a286cd1edf4510f39fa76e9e9c74578dd6d066a ACPI: scan: Do not combine resources that overlap completely
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/0ad9a88c3263fa8fa39437f69472588917255c99
+https://gitlab.com/cki-project/kernel-ark/-/commit/c83e3a20e2c864a3a262a68715b003e34cd83693
- 0ad9a88c3263fa8fa39437f69472588917255c99 kernel: extend rh_waived to cope better with the CVE mitigations case
+ c83e3a20e2c864a3a262a68715b003e34cd83693 ACPI: scan: Avoid registering platform devices with resource overlaps
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/cf18c49636f2583c85831f909699034026325242
+https://gitlab.com/cki-project/kernel-ark/-/commit/a3cf371d7ad3947bc73d6fb68226f2cb93b4e703
- cf18c49636f2583c85831f909699034026325242 rh_messages.h: add missing aacraid device
+ a3cf371d7ad3947bc73d6fb68226f2cb93b4e703 page_pool: keep frag_offset aligned for odd-sized requests
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/26ca931184edb2c3c7f7c1951f53fa3333d9c90e
+https://gitlab.com/cki-project/kernel-ark/-/commit/16fd65fad1784d16d1e38ca90bf672fe6dbd3703
- 26ca931184edb2c3c7f7c1951f53fa3333d9c90e rh_messages.h: update unmaintained drivers
+ 16fd65fad1784d16d1e38ca90bf672fe6dbd3703 media: i2c: cvs: Pass link frequency explicitly to csi_set_link_cfg()
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c1c1a1b7059900f4b9b657f5189285a287160e11
+https://gitlab.com/cki-project/kernel-ark/-/commit/dd40a4985ebc29b4d1e12960b4e7cf715128722b
- c1c1a1b7059900f4b9b657f5189285a287160e11 arm64: add early lockdown for secure boot
+ dd40a4985ebc29b4d1e12960b4e7cf715128722b media: i2c: cvs: Add NVL ACPI ID
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a613ae52a8d9378e6fa70f697b3ce0acee220491
+https://gitlab.com/cki-project/kernel-ark/-/commit/2aafb1ce0a15a4453bcb2b6501e2b759c6558a7d
- a613ae52a8d9378e6fa70f697b3ce0acee220491 efi: pass secure boot mode to kernel proper
+ 2aafb1ce0a15a4453bcb2b6501e2b759c6558a7d media: i2c: cvs: Add IPU8 PCI device ID
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/f869258b6b654d316e84325e46e431da4dfd04e7
+https://gitlab.com/cki-project/kernel-ark/-/commit/2efed24569953e88ce1f9a6ed579a71bafece833
- f869258b6b654d316e84325e46e431da4dfd04e7 selftests/bpf: Remove ksyms_weak_lskel test
+ 2efed24569953e88ce1f9a6ed579a71bafece833 random: Drop the extrng module reference when import_ubuf() fails
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8b69219fe6a11766cf1a2e07dc94e56448b47824
+https://gitlab.com/cki-project/kernel-ark/-/commit/e597dba8c0eb131768f5aa3498822d52c6cb356a
- 8b69219fe6a11766cf1a2e07dc94e56448b47824 Simplify include Makefile.rhelver
+ e597dba8c0eb131768f5aa3498822d52c6cb356a crypto: af_alg - Stop after finding name in allowlist
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c2621ac616e25a9a04fbcb8af0c1f8b2bdd8c099
+https://gitlab.com/cki-project/kernel-ark/-/commit/dfb9f20d58fe088049b7a4e5f7b0597fbe39a76d
- c2621ac616e25a9a04fbcb8af0c1f8b2bdd8c099 redhat: make ENABLE_WERROR also enable OBJTOOL_WERROR
+ dfb9f20d58fe088049b7a4e5f7b0597fbe39a76d crypto: af_alg - Replace 'bool privileged' with flags
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d28cbdeb89fe565e10fb4be8d8378153e86611f6
+https://gitlab.com/cki-project/kernel-ark/-/commit/9ce90cf073745eb142bfe1669e9b8f6625a763b6
- d28cbdeb89fe565e10fb4be8d8378153e86611f6 main.c: fix initcall blacklisted
+ 9ce90cf073745eb142bfe1669e9b8f6625a763b6 crypto: af_alg - Make cbc(paes) privileged-only
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b71ab57c8db44881edc32a124ddc2ebe536b6a4c
+https://gitlab.com/cki-project/kernel-ark/-/commit/76bcc03f09041646f7bdcf3020b756b5bd8e09db
- b71ab57c8db44881edc32a124ddc2ebe536b6a4c arch/x86/kernel/setup.c: fix rh_check_supported
+ 76bcc03f09041646f7bdcf3020b756b5bd8e09db crypto: af_alg - clean up kernel-doc warnings
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c4ea2384863e54e0c5582b3508518e659581ce69
+https://gitlab.com/cki-project/kernel-ark/-/commit/13d0095a68c6be26a179e14df996cab6be9ee9f1
- c4ea2384863e54e0c5582b3508518e659581ce69 efi,lockdown: fix kernel lockdown on Secure Boot
+ 13d0095a68c6be26a179e14df996cab6be9ee9f1 crypto: af_alg - Allow additional ciphers for cryptsetup
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/60b2ddeb0986e1c43a98b44a4ab414a7e2744701
+https://gitlab.com/cki-project/kernel-ark/-/commit/e5a7d83cf810d0227ce161a6b2a94a1897f843ce
- 60b2ddeb0986e1c43a98b44a4ab414a7e2744701 Revert "nvme: Return BLK_STS_TARGET if the DNR bit is set"
+ e5a7d83cf810d0227ce161a6b2a94a1897f843ce crypto: af_alg - Add af_alg_restrict sysctl, defaulting to 1
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/860632dd288c7aa7807959a79af9159482510cd1
+https://gitlab.com/cki-project/kernel-ark/-/commit/d088d8766e390303a72e82a86d2970f17e6846df
- 860632dd288c7aa7807959a79af9159482510cd1 Revert "nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT"
+ d088d8766e390303a72e82a86d2970f17e6846df redhat: Add DENYLIST.rhel to BPF selftests
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/aaef2c3ee081c8980bb60fd4b7a6ed9e187d9048
+https://gitlab.com/cki-project/kernel-ark/-/commit/fed2f9921bcc8274c579cabd6cf57bcd50de047d
- aaef2c3ee081c8980bb60fd4b7a6ed9e187d9048 Revert "nvme: decouple basic ANA log page re-read support from native multipathing"
+ fed2f9921bcc8274c579cabd6cf57bcd50de047d Fix up rebase typo in drivers/pci/quirks.c
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5cd4353dae0ee79d13f57b7ccee85cd0bcbe4b4f
+https://gitlab.com/cki-project/kernel-ark/-/commit/a329f36cee87f3fcdbbc616fde04c5bbe0adfb26
- 5cd4353dae0ee79d13f57b7ccee85cd0bcbe4b4f Revert "nvme: nvme_mpath_init remove multipath check"
+ a329f36cee87f3fcdbbc616fde04c5bbe0adfb26 efi: Fix swapped arguments to bsearch() in efi_status_to_*()
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/656a0565ffe54f99ac1390a68c5ee7050ab6fb25
+https://gitlab.com/cki-project/kernel-ark/-/commit/65dca4201450be071fee7b4cd7ab2320e7bb1885
- 656a0565ffe54f99ac1390a68c5ee7050ab6fb25 redhat: automotive: define CONFIG_RH_AUTOMOTIVE
+ 65dca4201450be071fee7b4cd7ab2320e7bb1885 arm64: add early lockdown for secure boot
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/f1025d6236c72b4fbd03940b6fa2178f2a84f418
+https://gitlab.com/cki-project/kernel-ark/-/commit/70c2cc6755d54b9a9de77d14818f48d49401c404
- f1025d6236c72b4fbd03940b6fa2178f2a84f418 redhat: fix modules.order target
+ 70c2cc6755d54b9a9de77d14818f48d49401c404 efi: pass secure boot mode to kernel proper
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/6e0fa997052c92d6085a50083e75dedc0160443f
+https://gitlab.com/cki-project/kernel-ark/-/commit/0dbdb3f2b9a360f64bcc0736afcf58f830e68502
- 6e0fa997052c92d6085a50083e75dedc0160443f [redhat] rh_messages.h: driver and device updates
+ 0dbdb3f2b9a360f64bcc0736afcf58f830e68502 selftests/bpf: Remove ksyms_weak_lskel test
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d8822fd0573e9f254f097c1743078e4e74ac70f5
+https://gitlab.com/cki-project/kernel-ark/-/commit/9dc8564d74c9bc7cd5eb634113c5b64c0a77d266
- d8822fd0573e9f254f097c1743078e4e74ac70f5 crypto: rng - Fix extrng EFAULT handling
+ 9dc8564d74c9bc7cd5eb634113c5b64c0a77d266 Simplify include Makefile.rhelver
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c224e4b6a61af08574bb0565755ed609bf08cacb
+https://gitlab.com/cki-project/kernel-ark/-/commit/a4a2f9f9e5061c723d24f419b70d2d89840e6d3a
- c224e4b6a61af08574bb0565755ed609bf08cacb crypto: sig - Disable signing
+ a4a2f9f9e5061c723d24f419b70d2d89840e6d3a redhat: make ENABLE_WERROR also enable OBJTOOL_WERROR
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/39417e970be7f6bc63f34d5ed5511f7e629802c2
+https://gitlab.com/cki-project/kernel-ark/-/commit/f49e14c2d5fc176eacc7f7911565a67f47aa2c71
- 39417e970be7f6bc63f34d5ed5511f7e629802c2 crypto: rng - Ensure stdrng is tested before user-space starts
+ f49e14c2d5fc176eacc7f7911565a67f47aa2c71 efi,lockdown: fix kernel lockdown on Secure Boot
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/52be246b6342ed5b1486729fd5c5893b10549a92
+https://gitlab.com/cki-project/kernel-ark/-/commit/40f0fa70effc108f71e4745f132c58034f6473ec
- 52be246b6342ed5b1486729fd5c5893b10549a92 [redhat] rh_messages.h: Mark BlueField-4 as disabled
+ 40f0fa70effc108f71e4745f132c58034f6473ec redhat: fix modules.order target
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2c9e64af9fa1f8599ce05877441afcac8ac91b04
+https://gitlab.com/cki-project/kernel-ark/-/commit/e855b8eee846e5923d9ced1d5279cbadb7a0494e
- 2c9e64af9fa1f8599ce05877441afcac8ac91b04 Update the RHEL_DIFFERENCES help string
+ e855b8eee846e5923d9ced1d5279cbadb7a0494e crypto: sig - Disable signing
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/beef34cb1efc34b7fbee35535c66915995d12ed1
+https://gitlab.com/cki-project/kernel-ark/-/commit/4e191a2588542aa36ecc96e0a78b435318ee6d2c
- beef34cb1efc34b7fbee35535c66915995d12ed1 redhat: include resolve_btfids in kernel-devel
+ 4e191a2588542aa36ecc96e0a78b435318ee6d2c redhat: include resolve_btfids in kernel-devel
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/1a1426b7a8df854c78385dd8ce8b74e9ee641477
+https://gitlab.com/cki-project/kernel-ark/-/commit/6e2c18aa543d2d14647ec184aa759813fb356b7b
- 1a1426b7a8df854c78385dd8ce8b74e9ee641477 redhat: workaround CKI cross compilation for scripts
+ 6e2c18aa543d2d14647ec184aa759813fb356b7b redhat: workaround CKI cross compilation for scripts
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/2c83d6cfffe1f891bf024df81be6cd41c2073ad9
+https://gitlab.com/cki-project/kernel-ark/-/commit/25b32a532a6004950851d9872562ab2700926548
- 2c83d6cfffe1f891bf024df81be6cd41c2073ad9 crypto: akcipher - Disable signing and decryption
+ 25b32a532a6004950851d9872562ab2700926548 crypto: akcipher - Disable signing and decryption
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/af93553b8d335ccf5dd4f90ab9419e497aa36a80
+https://gitlab.com/cki-project/kernel-ark/-/commit/0f7a4de55c51fca9d48f64874043dbdd3e09b39f
- af93553b8d335ccf5dd4f90ab9419e497aa36a80 crypto: dh - implement FIPS PCT
+ 0f7a4de55c51fca9d48f64874043dbdd3e09b39f crypto: dh - implement FIPS PCT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/f0540d9d32978dff227cbb930193e8dc2557b23b
+https://gitlab.com/cki-project/kernel-ark/-/commit/64dc741bc166a7b2584b0a9861f4fa65fb06a2a4
- f0540d9d32978dff227cbb930193e8dc2557b23b crypto: ecdh - disallow plain "ecdh" usage in FIPS mode
+ 64dc741bc166a7b2584b0a9861f4fa65fb06a2a4 crypto: ecdh - disallow plain "ecdh" usage in FIPS mode
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/243ef89ad354eea332d7bfb23fd4cf259240de91
+https://gitlab.com/cki-project/kernel-ark/-/commit/f7e0eaab7c8a9fef1e0e5a1a43d14ea02b6f39a6
- 243ef89ad354eea332d7bfb23fd4cf259240de91 crypto: seqiv - flag instantiations as FIPS compliant
+ f7e0eaab7c8a9fef1e0e5a1a43d14ea02b6f39a6 crypto: seqiv - flag instantiations as FIPS compliant
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/6a23cbc588e9b9f7b2bc7250c6c6903d4d904eb1
+https://gitlab.com/cki-project/kernel-ark/-/commit/660f8f5df5bda978c8013d9a396ceba2bd71685b
- 6a23cbc588e9b9f7b2bc7250c6c6903d4d904eb1 [kernel] bpf: set default value for bpf_jit_harden
+ 660f8f5df5bda978c8013d9a396ceba2bd71685b not upstream: Disable vdso getrandom when FIPS is enabled
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/bb84b630a172d0204c8d243c57a6a1d2eae7843c
+https://gitlab.com/cki-project/kernel-ark/-/commit/e96fe3a1ef7c3602e63e203bf8f0bd889517cfa0
- bb84b630a172d0204c8d243c57a6a1d2eae7843c not upstream: Disable vdso getrandom when FIPS is enabled
+ e96fe3a1ef7c3602e63e203bf8f0bd889517cfa0 lsm: update security_lock_kernel_down
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/b643998c61552fb5615268e7e529999d64d54175
+https://gitlab.com/cki-project/kernel-ark/-/commit/5f8601c159981ec503bee144435d8cb5a45b37aa
- b643998c61552fb5615268e7e529999d64d54175 Add support to rh_waived cmdline boot parameter
+ 5f8601c159981ec503bee144435d8cb5a45b37aa random: replace import_single_range() with import_ubuf()
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/a1e04b6f3580382a902256c7bf8b395b9a1be47f
+https://gitlab.com/cki-project/kernel-ark/-/commit/7e48802c62d2ac8b6f91f5d2aecc765e3c6a0548
- a1e04b6f3580382a902256c7bf8b395b9a1be47f rh_flags: fix failed when register_sysctl_sz rh_flags_table to kernel
+ 7e48802c62d2ac8b6f91f5d2aecc765e3c6a0548 random: Add hook to override device reads and getrandom(2)
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/03cf1862c6221ee2a6de9a5ab25adaec6460b62e
+https://gitlab.com/cki-project/kernel-ark/-/commit/554351f5ab026d86b7acc5b75a217999f8a1a08b
- 03cf1862c6221ee2a6de9a5ab25adaec6460b62e [redhat] rh_flags: constify the ctl_table argument of proc_handler
+ 554351f5ab026d86b7acc5b75a217999f8a1a08b Revert "Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64"
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/e2708e55f9151652da80e388b4bf88c649288c0f
+https://gitlab.com/cki-project/kernel-ark/-/commit/f5c8da20fa3ab6ea951610201e8d28fa074417b1
- e2708e55f9151652da80e388b4bf88c649288c0f redhat: rh_flags: declare proper static methods when !CONFIG_RHEL_DIFFERENCES
+ f5c8da20fa3ab6ea951610201e8d28fa074417b1 Enable IO_URING for RHEL
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/6f593811cc1e5664f45fe2d09916eada1187e992
+https://gitlab.com/cki-project/kernel-ark/-/commit/f0490bfc945265df269aaba29733ddb4524adc45
- 6f593811cc1e5664f45fe2d09916eada1187e992 redhat: make bnx2xx drivers unmaintained in rhel-10
+ f0490bfc945265df269aaba29733ddb4524adc45 Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5db8220bd67c719a20c1269233585b40f48837da
+https://gitlab.com/cki-project/kernel-ark/-/commit/be31e8fd804b1f65ac7b6315b3a7897ee5bb2288
- 5db8220bd67c719a20c1269233585b40f48837da rh_flags: Rename rh_features to rh_flags
+ be31e8fd804b1f65ac7b6315b3a7897ee5bb2288 redhat: version two of Makefile.rhelver tweaks
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/19ca502a0087eed65a014c6271f9bfc207d8d7eb
+https://gitlab.com/cki-project/kernel-ark/-/commit/078b697814f551723a3d1736caedcf607d465ef2
- 19ca502a0087eed65a014c6271f9bfc207d8d7eb kernel: rh_features: fix reading empty feature list from /proc
+ 078b697814f551723a3d1736caedcf607d465ef2 redhat:  adapt to upstream Makefile change
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/ba24639032f00b47748a6f39a4eb33950df015c2
+https://gitlab.com/cki-project/kernel-ark/-/commit/a0b408c739cdeb122d01e34691aec8c2bb24f777
- ba24639032f00b47748a6f39a4eb33950df015c2 rh_features: move rh_features entry to sys/kernel
+ a0b408c739cdeb122d01e34691aec8c2bb24f777 Change acpi_bus_get_acpi_device to acpi_get_acpi_dev
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/883e43fe6a0da0d9ad90e7c997a95f11bab9b888
+https://gitlab.com/cki-project/kernel-ark/-/commit/acc3464ce2308ad9807a80026d33babe60ffe49f
- 883e43fe6a0da0d9ad90e7c997a95f11bab9b888 rh_features: convert to atomic allocation
+ acc3464ce2308ad9807a80026d33babe60ffe49f RHEL: disable io_uring support
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/c8daa2e832df14ee9174435a357b2ae0994a3ef3
+https://gitlab.com/cki-project/kernel-ark/-/commit/69fbb76eaab8832507e8256b7ce8f1ae06fa7317
- c8daa2e832df14ee9174435a357b2ae0994a3ef3 add rh_features to /proc
+ 69fbb76eaab8832507e8256b7ce8f1ae06fa7317 REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/4f33dbbe3ec578d49e12c07421b913bf480fccef
+https://gitlab.com/cki-project/kernel-ark/-/commit/ccaf755201e6ae857ef48198dad07b58fb71805a
- 4f33dbbe3ec578d49e12c07421b913bf480fccef add support for rh_features
+ ccaf755201e6ae857ef48198dad07b58fb71805a KEYS: Make use of platform keyring for module signature verify
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/53a5900b05260b81f13eb3b9d6a9419429f310ab
+https://gitlab.com/cki-project/kernel-ark/-/commit/608f5efc2dfb17e3c94994d4c1f6b94b5a3fc7d5
- 53a5900b05260b81f13eb3b9d6a9419429f310ab [redhat] PCI: Fix pci_rh_check_status() call semantics
+ 608f5efc2dfb17e3c94994d4c1f6b94b5a3fc7d5 ARM: tegra: usb no reset
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/aeb9a237a0ec39b7bde89d8bb040cd5b267f6802
+https://gitlab.com/cki-project/kernel-ark/-/commit/f00a8ae12e22f22968128bf9a7f4a85a81563620
- aeb9a237a0ec39b7bde89d8bb040cd5b267f6802 scsi: sd: condition probe_type under RHEL_DIFFERENCES
+ f00a8ae12e22f22968128bf9a7f4a85a81563620 arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/159e72af8b1631b720f4a7e0012fa624764cecde
+https://gitlab.com/cki-project/kernel-ark/-/commit/0890bd0cd30e73b6781e34ffdb44602f61538ecd
- 159e72af8b1631b720f4a7e0012fa624764cecde scsi: sd: remove unused sd_probe_types
+ 0890bd0cd30e73b6781e34ffdb44602f61538ecd s390: Lock down the kernel when the IPL secure flag is set
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d8c04860eb7bf29617ca1754f1076fd9f5992e77
+https://gitlab.com/cki-project/kernel-ark/-/commit/bb7fe52293d333bd79d715b4b81626f2b664b4c8
- d8c04860eb7bf29617ca1754f1076fd9f5992e77 [redhat] rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained
+ bb7fe52293d333bd79d715b4b81626f2b664b4c8 efi: Lock down the kernel if booted in secure boot mode
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/496c64b4afece4ab525467a6be71ffe60d0c564f
+https://gitlab.com/cki-project/kernel-ark/-/commit/35e536a3a7970b59263f34e2031492a5af32c44d
- 496c64b4afece4ab525467a6be71ffe60d0c564f [redhat] rh_messages.h: initial driver and device lists
+ 35e536a3a7970b59263f34e2031492a5af32c44d efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5cf456aaba6f5c9406421c04c65d43b2c71f5927
+https://gitlab.com/cki-project/kernel-ark/-/commit/8b80b72d2ee13bff55f4fddda01a38534290b6a4
- 5cf456aaba6f5c9406421c04c65d43b2c71f5927 arch/x86: Fix XSAVE check for x86_64-v2 check
+ 8b80b72d2ee13bff55f4fddda01a38534290b6a4 security: lockdown: expose a hook to lock the kernel down
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/252bf9586fca6e57a51966c0294a9a0cb33ff4f5
+https://gitlab.com/cki-project/kernel-ark/-/commit/bb18dc1a4c7a4b9f117de383fd785c2489c5763a
- 252bf9586fca6e57a51966c0294a9a0cb33ff4f5 arch/x86/kernel/setup.c: fixup rh_check_supported
+ bb18dc1a4c7a4b9f117de383fd785c2489c5763a Make get_cert_list() use efi_status_to_str() to print error messages.
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/30faf17591afbd4230d590355351044294ad43d2
+https://gitlab.com/cki-project/kernel-ark/-/commit/3a70480a5e42324f2e05b1be7ce3206c7c15f43e
- 30faf17591afbd4230d590355351044294ad43d2 lsm: update security_lock_kernel_down
+ 3a70480a5e42324f2e05b1be7ce3206c7c15f43e Add efi_status_to_str() and rework efi_status_to_err().
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/e88ee9e2e869e7259faa5bf3ff6689becabb53cb
+https://gitlab.com/cki-project/kernel-ark/-/commit/fc9ca4ae3c482381c0c981f284e2a022350ee1f8
- e88ee9e2e869e7259faa5bf3ff6689becabb53cb arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated
+ fc9ca4ae3c482381c0c981f284e2a022350ee1f8 arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/26ebc304df38a49ce7cc69b4bdf220298cff2460
+https://gitlab.com/cki-project/kernel-ark/-/commit/045787bed9bed2725cf8aa911ea4809b326a0d4a
- 26ebc304df38a49ce7cc69b4bdf220298cff2460 redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option
+ 045787bed9bed2725cf8aa911ea4809b326a0d4a iommu/arm-smmu: workaround DMA mode issues
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/8c71392703448be8e8217592dd46ea1cc8b157e1
+https://gitlab.com/cki-project/kernel-ark/-/commit/798a41acca3d4e1802fbb7363475a47c45772fdd
- 8c71392703448be8e8217592dd46ea1cc8b157e1 redhat: rh_kabi: introduce RH_KABI_EXCLUDE_WITH_SIZE
+ 798a41acca3d4e1802fbb7363475a47c45772fdd ipmi: do not configure ipmi for HPE m400
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/d42afcb843fcc87e59ba39b5574c18d89fd07a91
+https://gitlab.com/cki-project/kernel-ark/-/commit/4feadfa31668ac3ec8e816be489013aaaa47e3e6
- d42afcb843fcc87e59ba39b5574c18d89fd07a91 redhat: rh_kabi: move semicolon inside __RH_KABI_CHECK_SIZE
+ 4feadfa31668ac3ec8e816be489013aaaa47e3e6 ahci: thunderx2: Fix for errata that affects stop engine
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/95a56955f9ba6ef1e1dd2d99d8f98254da274267
+https://gitlab.com/cki-project/kernel-ark/-/commit/b4d148f31a398f259f9e7861047651de123e10c0
- 95a56955f9ba6ef1e1dd2d99d8f98254da274267 random: replace import_single_range() with import_ubuf()
+ b4d148f31a398f259f9e7861047651de123e10c0 Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/92d6612578b79fd3a09e10504ed71209ba43c271
+https://gitlab.com/cki-project/kernel-ark/-/commit/4cb0584af56b1aa3dc42384756bfbadb94586a85
- 92d6612578b79fd3a09e10504ed71209ba43c271 ext4: Mark mounting fs-verity filesystems as tech-preview
+ 4cb0584af56b1aa3dc42384756bfbadb94586a85 tags.sh: Ignore redhat/rpm
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/5c51745b8aec113ff0605ab833c3e472d99c55c8
+https://gitlab.com/cki-project/kernel-ark/-/commit/fbf7ce33fab2f64614382562a2ccd93f35558c4b
- 5c51745b8aec113ff0605ab833c3e472d99c55c8 erofs: Add tech preview markers at mount
+ fbf7ce33fab2f64614382562a2ccd93f35558c4b aarch64: acpi scan: Fix regression related to X-Gene UARTs
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/6d687c70a7eda10eac0ddc6eedeaccc30eef5349
+https://gitlab.com/cki-project/kernel-ark/-/commit/39ad6f605e88f294e802afb8063c0fddf88352e9
- 6d687c70a7eda10eac0ddc6eedeaccc30eef5349 kernel/rh_messages.c: Mark functions as possibly unused
+ 39ad6f605e88f294e802afb8063c0fddf88352e9 ACPI / irq: Workaround firmware issue on X-Gene based m400
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/dfb09b1d833cad815ea2f5cb69505010de260c40
+https://gitlab.com/cki-project/kernel-ark/-/commit/99c6a509b61259f23b72d1b07ecf41a57e95df1d
- dfb09b1d833cad815ea2f5cb69505010de260c40 crypto: rng - Override drivers/char/random in FIPS mode
+ 99c6a509b61259f23b72d1b07ecf41a57e95df1d ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/ddbe3667f2462817f3f936141fff08604dde1564
+https://gitlab.com/cki-project/kernel-ark/-/commit/c5bbc3ffdff8034dccf68623b0715e9f98034ca5
- ddbe3667f2462817f3f936141fff08604dde1564 random: Add hook to override device reads and getrandom(2)
+ c5bbc3ffdff8034dccf68623b0715e9f98034ca5 Pull the RHEL version defines out of the Makefile
 
-https://gitlab.com/cki-project/kernel-ark/-/commit/92525a9129d85fa6400c9e653379862a67cb43b2
+https://gitlab.com/cki-project/kernel-ark/-/commit/d0cc5ae7a0d305c1e15a0a539faea9ea11af2868
- 92525a9129d85fa6400c9e653379862a67cb43b2 [redhat] kernel/rh_messages.c: move hardware tables to rh_messages.h
+ d0cc5ae7a0d305c1e15a0a539faea9ea11af2868 [initial commit] Add Red Hat variables in the top level makefile
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/eacd81fdaf31d456a82c553735faf64c8efad2eb
- eacd81fdaf31d456a82c553735faf64c8efad2eb [redhat] kernel/rh_messages.c: Wire up new calls
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/32af8640a651c642ee5706dda0cf35ff508bcdcb
- 32af8640a651c642ee5706dda0cf35ff508bcdcb [redhat] drivers/pci: Update rh_messages.c
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/db366977f9e13f903cc9b7f22936b581594a7731
- db366977f9e13f903cc9b7f22936b581594a7731 [redhat] drivers/pci: Remove RHEL-only pci_hw_*() functions
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/402504ff66e5d118b514253df5d55f8413e2e167
- 402504ff66e5d118b514253df5d55f8413e2e167 scsi: sd: Add "probe_type" module parameter to allow synchronous probing
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/5e96a345c6fb24e282ce1769223c1a339d0dbe94
- 5e96a345c6fb24e282ce1769223c1a339d0dbe94 Revert "Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64"
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/ce943989ae8cb2b8e0b4699c148584d3cd18ec9b
- ce943989ae8cb2b8e0b4699c148584d3cd18ec9b kernel/rh_messages.c: Another gcc12 warning on redundant NULL test
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/c0624b3913d8c3f262e20910a2f2c4d2f99ce61f
- c0624b3913d8c3f262e20910a2f2c4d2f99ce61f Enable IO_URING for RHEL
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/861f2d38d82cfb374799ec517f18cc021701068e
- 861f2d38d82cfb374799ec517f18cc021701068e Remove EXPERT from ARCH_FORCE_MAX_ORDER for aarch64
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/e02ec93117d6eea21e80baf69e6f9848cf1a9774
- e02ec93117d6eea21e80baf69e6f9848cf1a9774 redhat: version two of Makefile.rhelver tweaks
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/964e830b4fae678dec5b8b93dcd402c73fdf2912
- 964e830b4fae678dec5b8b93dcd402c73fdf2912 redhat:  adapt to upstream Makefile change
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/60a4025a3b1cdec1c7bbdabf1e30278f615bb493
- 60a4025a3b1cdec1c7bbdabf1e30278f615bb493 kernel/rh_messages.c: gcc12 warning on redundant NULL test
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/a5c9e3c6e3dcda60b5f753d1bae86a686f3ac087
- a5c9e3c6e3dcda60b5f753d1bae86a686f3ac087 Change acpi_bus_get_acpi_device to acpi_get_acpi_dev
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/092e751fe418623c5ad04e77fa6c993d48d96533
- 092e751fe418623c5ad04e77fa6c993d48d96533 ARK: Remove code marking devices unmaintained
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/c27fa327fb3de69773568d211fd2f8f13a72e342
- c27fa327fb3de69773568d211fd2f8f13a72e342 rh_message: Fix function name
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/c9b07fd3a141ad0283d7eaadf5a06aec9af2b8c9
- c9b07fd3a141ad0283d7eaadf5a06aec9af2b8c9 Add Partner Supported taint flag to kAFS
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/6b0e3a47ec436527a736c0e7159b41624d176dd9
- 6b0e3a47ec436527a736c0e7159b41624d176dd9 Add Partner Supported taint flag
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/3a4e2ad92c430d2f584f56ca686bc75a469d06c0
- 3a4e2ad92c430d2f584f56ca686bc75a469d06c0 kabi: Add kABI macros for enum type
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/04fbd46f834f3a012ca9d5bef91db377a3dbaed0
- 04fbd46f834f3a012ca9d5bef91db377a3dbaed0 kabi: expand and clarify documentation of aux structs
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/cf8df8ef88e094ebb049a7e1e6fec069aaf54faa
- cf8df8ef88e094ebb049a7e1e6fec069aaf54faa kabi: introduce RH_KABI_USE_AUX_PTR
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/31779ca0c6c9aab28184a42ac3f17ac219b37b2b
- 31779ca0c6c9aab28184a42ac3f17ac219b37b2b kabi: rename RH_KABI_SIZE_AND_EXTEND to AUX
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/2e12a05d339ed936b9cd59f420b161d70b4a130a
- 2e12a05d339ed936b9cd59f420b161d70b4a130a kabi: more consistent _RH_KABI_SIZE_AND_EXTEND
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/b83556eebdc2efdc2d2c22610b7cd7c5cafb2bae
- b83556eebdc2efdc2d2c22610b7cd7c5cafb2bae kabi: use fixed field name for extended part
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/4c9a3b306a34ed7017e35b0de26b2d98e1a04373
- 4c9a3b306a34ed7017e35b0de26b2d98e1a04373 kabi: fix dereference in RH_KABI_CHECK_EXT
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/a961660df0a73bcf2dcd8cb8855c2f5d5ded0ae9
- a961660df0a73bcf2dcd8cb8855c2f5d5ded0ae9 kabi: fix RH_KABI_SET_SIZE macro
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/9f9ef5e8b4694fa7fb6a8f941fb741121fe5aab3
- 9f9ef5e8b4694fa7fb6a8f941fb741121fe5aab3 kabi: expand and clarify documentation
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/308d17beeaa6cb4a514f77319b636c9a2c15f5eb
- 308d17beeaa6cb4a514f77319b636c9a2c15f5eb kabi: make RH_KABI_USE replace any number of reserved fields
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/f3d12dffffeee8d6692be46044b9fc8448901692
- f3d12dffffeee8d6692be46044b9fc8448901692 kabi: rename RH_KABI_USE2 to RH_KABI_USE_SPLIT
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/520e726b4e78101e73fa3d77cdcbc21d204a75a9
- 520e726b4e78101e73fa3d77cdcbc21d204a75a9 kabi: change RH_KABI_REPLACE2 to RH_KABI_REPLACE_SPLIT
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/7160868bd40d04e6d1a80f55d1bf9bb62ede0ba3
- 7160868bd40d04e6d1a80f55d1bf9bb62ede0ba3 kabi: change RH_KABI_REPLACE_UNSAFE to RH_KABI_BROKEN_REPLACE
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/0b83063cf6c57dc20a80c35396fa425ec1963d53
- 0b83063cf6c57dc20a80c35396fa425ec1963d53 kabi: introduce RH_KABI_ADD_MODIFIER
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/d276c2393792e3eec80a73a4fe964f9ec11145a7
- d276c2393792e3eec80a73a4fe964f9ec11145a7 kabi: Include kconfig.h
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/28c30de9c771ff91994c9f0a42bdcc260fa97c2d
- 28c30de9c771ff91994c9f0a42bdcc260fa97c2d kabi: macros for intentional kABI breakage
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/9b671c725ac69c47874321e5636e6541bb6d219d
- 9b671c725ac69c47874321e5636e6541bb6d219d kabi: fix the note about terminating semicolon
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/6443eef17fb53f62886ecce519b6e12dd310e7f5
- 6443eef17fb53f62886ecce519b6e12dd310e7f5 kabi: introduce RH_KABI_HIDE_INCLUDE and RH_KABI_FAKE_INCLUDE
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/47746fc3837b476ec265e2a0c2aaa86de0d3994e
- 47746fc3837b476ec265e2a0c2aaa86de0d3994e pci.h: Fix static include
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/67ce66385c6b619356c4030e6163c4fb18a50427
- 67ce66385c6b619356c4030e6163c4fb18a50427 drivers/pci/pci-driver.c: Fix if/ifdef typo
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/0dfd7feeadc964ef2a9d118218b54831381c8d7a
- 0dfd7feeadc964ef2a9d118218b54831381c8d7a kernel/rh_taint.c: Update to new messaging
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/35e5ee153637e59c9297c9cc8ba7f3960277ffc2
- 35e5ee153637e59c9297c9cc8ba7f3960277ffc2 redhat: Add mark_driver_deprecated()
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/ff7aa8cae4c7e3e7bbc1bb5612efc2157c81fa7d
- ff7aa8cae4c7e3e7bbc1bb5612efc2157c81fa7d RHEL: disable io_uring support
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/517351ed810bf2707e7fdb2ab22029aeb594db59
- 517351ed810bf2707e7fdb2ab22029aeb594db59 bpf: Fix unprivileged_bpf_disabled setup
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/48fe2e5f40c901e92d1f8c62bc97f58af4b0906a
- 48fe2e5f40c901e92d1f8c62bc97f58af4b0906a nvme: nvme_mpath_init remove multipath check
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/1c9bd09f303e2c9d2c67fdc46604d94e00cbf67c
- 1c9bd09f303e2c9d2c67fdc46604d94e00cbf67c wireguard: disable in FIPS mode
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/57872981891fe8f3f7205daa4b78c8c0d676b171
- 57872981891fe8f3f7205daa4b78c8c0d676b171 nvme: decouple basic ANA log page re-read support from native multipathing
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/0561f5953431ff471193611cd73af65dd394c8cd
- 0561f5953431ff471193611cd73af65dd394c8cd nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/f801483d711fa5f83a0f9d4c479eeba702d1d477
- f801483d711fa5f83a0f9d4c479eeba702d1d477 nvme: Return BLK_STS_TARGET if the DNR bit is set
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/4f2bc09956ad4829d139e9d69b86ba8b9ebc66e2
- 4f2bc09956ad4829d139e9d69b86ba8b9ebc66e2 REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/65a21d545cc43328ea00fdbd62e7b45f375adce8
- 65a21d545cc43328ea00fdbd62e7b45f375adce8 redhat: remove remaining references of CONFIG_RH_DISABLE_DEPRECATED
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/1c1b5380b0b56d3be978997b128f84aeb9906656
- 1c1b5380b0b56d3be978997b128f84aeb9906656 arch/x86: Remove vendor specific CPU ID checks
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/f7c032c856ba6379a77b76179d0352929d6039ec
- f7c032c856ba6379a77b76179d0352929d6039ec redhat: Replace hardware.redhat.com link in Unsupported message
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/9a6eb49603959cf0aab0198e13946eaee07801c3
- 9a6eb49603959cf0aab0198e13946eaee07801c3 x86: Fix compile issues with rh_check_supported()
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/8a605436efddfa7dbc6e007b2881fa81f17968a5
- 8a605436efddfa7dbc6e007b2881fa81f17968a5 KEYS: Make use of platform keyring for module signature verify
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/c7c191f662438423a23592db42838ff550c2bdda
- c7c191f662438423a23592db42838ff550c2bdda Input: rmi4 - remove the need for artificial IRQ in case of HID
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/4ae139284600cd6fef133ce7a981485ea73381ab
- 4ae139284600cd6fef133ce7a981485ea73381ab ARM: tegra: usb no reset
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/8156e2102f753bbe0f0dd222a5f232e7f3d99883
- 8156e2102f753bbe0f0dd222a5f232e7f3d99883 arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/823e733a88ddd21c735288dd3b08348e79872b91
- 823e733a88ddd21c735288dd3b08348e79872b91 redhat: rh_kabi: deduplication friendly structs
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/61d2a751fe1b1305684d6c1899f26fa9e38ac0a9
- 61d2a751fe1b1305684d6c1899f26fa9e38ac0a9 redhat: rh_kabi add a comment with warning about RH_KABI_EXCLUDE usage
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/7d09cb3ea3dd2f3cda5a6a31be429f259106ca61
- 7d09cb3ea3dd2f3cda5a6a31be429f259106ca61 redhat: rh_kabi: introduce RH_KABI_EXTEND_WITH_SIZE
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/c0c51c6f123df02948e11680d9b90324593ba547
- c0c51c6f123df02948e11680d9b90324593ba547 redhat: rh_kabi: Indirect EXTEND macros so nesting of other macros will resolve.
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/96b20c70b39cd28efcec2336417cb0db9ff7853c
- 96b20c70b39cd28efcec2336417cb0db9ff7853c redhat: rh_kabi: Fix RH_KABI_SET_SIZE to use dereference operator
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/198030a81d85dbac8f4030e69d3d376327433487
- 198030a81d85dbac8f4030e69d3d376327433487 redhat: rh_kabi: Add macros to size and extend structs
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/695af00ed9e393abe88d9ee4de3702c15ded186d
- 695af00ed9e393abe88d9ee4de3702c15ded186d Removing Obsolete hba pci-ids from rhel8
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/736038bd8039d1543468c1dc8925f20929645804
- 736038bd8039d1543468c1dc8925f20929645804 mptsas: pci-id table changes
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/83cdf2924bdcc90c433a58129b4501e10b1295dc
- 83cdf2924bdcc90c433a58129b4501e10b1295dc mptspi: pci-id table changes
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/0b634d81ed7f0730e13d720508dbaa6ab94e54d2
- 0b634d81ed7f0730e13d720508dbaa6ab94e54d2 qla2xxx: Remove PCI IDs of deprecated adapter
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/0d11491f9e7fe0c8c301db3256cb47c66ae8450f
- 0d11491f9e7fe0c8c301db3256cb47c66ae8450f hpsa: remove old cciss-based smartarray pci ids
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/75f69a4f7b8f9d38c5efb0231186ed8726e526f2
- 75f69a4f7b8f9d38c5efb0231186ed8726e526f2 kernel: add SUPPORT_REMOVED kernel taint
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/50081b0865239d853d77bc71e54d13fad8bac9f0
- 50081b0865239d853d77bc71e54d13fad8bac9f0 Rename RH_DISABLE_DEPRECATED to RHEL_DIFFERENCES
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/dc84f3cc1b19a0524e58a382c382f34081dc6c35
- dc84f3cc1b19a0524e58a382c382f34081dc6c35 s390: Lock down the kernel when the IPL secure flag is set
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/cb55378c04d6516f303e98061ec7ddd6563429a8
- cb55378c04d6516f303e98061ec7ddd6563429a8 efi: Lock down the kernel if booted in secure boot mode
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/9b06e1f07c3cc9e1d0533b8615426d4d5d9e4ebb
- 9b06e1f07c3cc9e1d0533b8615426d4d5d9e4ebb efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/db249925c6802b38d910927e4d032af1e00bee56
- db249925c6802b38d910927e4d032af1e00bee56 security: lockdown: expose a hook to lock the kernel down
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/f9604bcd305aba2a94e713ee758a51143687ae9f
- f9604bcd305aba2a94e713ee758a51143687ae9f Make get_cert_list() use efi_status_to_str() to print error messages.
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/b75eb3e922c93d78d4190a759f5725e856d35439
- b75eb3e922c93d78d4190a759f5725e856d35439 Add efi_status_to_str() and rework efi_status_to_err().
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/2f80042d6b8199fceadf3623243402066e0cd4ea
- 2f80042d6b8199fceadf3623243402066e0cd4ea Add support for deprecating processors
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/5a3b4f5754788e42db8ed550b359382b600f2b08
- 5a3b4f5754788e42db8ed550b359382b600f2b08 arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/36cd5d0a0aa0a3be8ac385ca8991563c9e58227f
- 36cd5d0a0aa0a3be8ac385ca8991563c9e58227f iommu/arm-smmu: workaround DMA mode issues
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/ca34010e072550c8d5ea57f9436bab254c3521cc
- ca34010e072550c8d5ea57f9436bab254c3521cc rh_kabi: introduce RH_KABI_EXCLUDE
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/26054e2c4e2253fe955a351971dc6b931cb68961
- 26054e2c4e2253fe955a351971dc6b931cb68961 ipmi: do not configure ipmi for HPE m400
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/9cb0f734492a21a7e506d7145caf143ccd927b2a
- 9cb0f734492a21a7e506d7145caf143ccd927b2a kABI: Add generic kABI macros to use for kABI workarounds
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/4960e5ee4a0e9bb28e512eb35cfa633ac4552049
- 4960e5ee4a0e9bb28e512eb35cfa633ac4552049 add pci_hw_vendor_status()
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/291c4e2878431fd6937c5b9248babe8ec8d4233e
- 291c4e2878431fd6937c5b9248babe8ec8d4233e ahci: thunderx2: Fix for errata that affects stop engine
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/996869cc0b3e78cb9182a4ebced2c46ee2774935
- 996869cc0b3e78cb9182a4ebced2c46ee2774935 Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/c1c7a887998ab12c5a1180c4bca3b41c31fe4aa6
- c1c7a887998ab12c5a1180c4bca3b41c31fe4aa6 bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/e40c9d10474d1a5b5f7f01175a72ba4a3c7f5e8e
- e40c9d10474d1a5b5f7f01175a72ba4a3c7f5e8e add Red Hat-specific taint flags
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/f23f446b724fbb79c1e09a278fcb427fc29c0c05
- f23f446b724fbb79c1e09a278fcb427fc29c0c05 tags.sh: Ignore redhat/rpm
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/a68aa65a20fba1908a7326e5321ce8bc39a9ae14
- a68aa65a20fba1908a7326e5321ce8bc39a9ae14 put RHEL info into generated headers
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/80937f1973d73fccdc75db4026fbed7cba16f489
- 80937f1973d73fccdc75db4026fbed7cba16f489 aarch64: acpi scan: Fix regression related to X-Gene UARTs
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/3362fd10fe075b48ff8af023da5643bc9477a4c6
- 3362fd10fe075b48ff8af023da5643bc9477a4c6 ACPI / irq: Workaround firmware issue on X-Gene based m400
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/ffc66b174954abecfb360dcc3b98c3139ef12d96
- ffc66b174954abecfb360dcc3b98c3139ef12d96 modules: add rhelversion MODULE_INFO tag
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/7e469c23b8f648d79e8a0e82ee41cda0e50b2f19
- 7e469c23b8f648d79e8a0e82ee41cda0e50b2f19 ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/a0f49117d038de2d4db4940f5f039addb2f7231d
- a0f49117d038de2d4db4940f5f039addb2f7231d Add Red Hat tainting
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/fa67c16e780ed355f9847da90e8055ad1175c238
- fa67c16e780ed355f9847da90e8055ad1175c238 Introduce CONFIG_RH_DISABLE_DEPRECATED
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/e7e1371803470a7840dc61da628cb912834ec149
- e7e1371803470a7840dc61da628cb912834ec149 Pull the RHEL version defines out of the Makefile
-
-https://gitlab.com/cki-project/kernel-ark/-/commit/84d1d3e3d0c2c7ed1f571c8495bad3b4d97cfa8e
- 84d1d3e3d0c2c7ed1f571c8495bad3b4d97cfa8e [initial commit] Add Red Hat variables in the top level makefile
 

def_variants.yaml.fedora

@@ -17,6 +17,7 @@ packages:
 rules:
   - .*kunit.*: modules-internal
     exact_pkg: True
+    ignore_deps: True
   - .*test[^/]*.ko: modules-internal
 
   - arch/.*: modules-core

def_variants.yaml.rhel

@@ -20,6 +20,7 @@ packages:
 rules:
   - .*kunit.*: modules-internal
     exact_pkg: True
+    ignore_deps: True
   - .*test[^/]*.ko: modules-internal
 
   - arch/.*: modules-core
@@ -371,6 +372,7 @@ rules:
   - fs/bcachefs/.*: modules-core
   - fs/befs/befs.*: modules-extra
   - fs/binfmt_misc.ko: modules-core
+  - fs/btrfs/.*: modules-internal
   - fs/cachefiles/.*: modules-core
   - fs/ceph/.*: modules-core
   - fs/coda/coda.*: modules-extra

dracut-virt.conf

@@ -14,7 +14,12 @@ omit_dracutmodules += " drm simpledrm "
 dracutmodules+=" dm lvm rootfs-block fs-lib "
 
 # modules: tpm and crypto
-dracutmodules+=" crypt crypt-loop tpm2-tss systemd-pcrphase "
+dracutmodules+=" crypt crypt-loop tpm2-tss "
+
+# dracut >= 111 renamed systemd-pcrphase to systemd-pcrextend
+PCRMODULE_OLD=`dracut --list-modules --no-kernel | grep '^systemd-pcrphase$'`
+PCRMODULE_NEW=`dracut --list-modules --no-kernel | grep '^systemd-pcrextend$'`
+dracutmodules+=" $PCRMODULE_OLD $PCRMODULE_NEW "
 
 # dracut >= 102 separated systemd-cryptsetup into its own module
 CSMODULE=`dracut --list-modules --no-kernel | grep '^systemd-cryptsetup$'`
@@ -31,8 +36,10 @@ dracutmodules+=" systemd-veritysetup "
 
 # modules: root creation and encryption
 dracutmodules+=" systemd-repart "
-# FIXME: remove this once RHEL-103385 is merged
+# FIXME: remove this once dracut-108+ is available everywhere
 install_items+=" /usr/sbin/mkfs.vfat /usr/sbin/mkfs.ext4 /usr/sbin/mkfs.xfs "
+# FIXME: remove this once dracut-112+ is available everywhere
+install_items+=" /usr/bin/fdisk "
 
 # modules: FIPS
 dracutmodules+=" fips "

dtbloader.sbat.template

@@ -0,0 +1,2 @@
+sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
+kernel-dtbloader.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt,@KVER,mailto:secalert@redhat.com

gating.yaml

@@ -12,3 +12,13 @@ rules:
   - !PassingTestCaseRule {test_case_name: s1-azure-ci_x86_64.brew-build.tier1.functional}
   - !PassingTestCaseRule {test_case_name: s1-azure-ci_aarch64.brew-build.tier1.functional}
   - !PassingTestCaseRule {test_case_name: s1-gcp-ci.brew-build.tier1.functional}
+--- !Policy
+product_versions:
+  - fedora-eln
+decision_context: bodhi_update_push_stable
+rules:
+  - !PassingTestCaseRule {test_case_name: update.install_default_update_netinst, scenario: "fedora.updates-baseos-boot-iso.aarch64.aarch64"}
+  - !PassingTestCaseRule {test_case_name: update.install_default_update_netinst, scenario: "fedora.updates-baseos-boot-iso.x86_64.64bit"}
+  - !PassingTestCaseRule {test_case_name: update.install_default_update_netinst, scenario: "fedora.updates-baseos-boot-iso.x86_64.bios"}
+  - !PassingTestCaseRule {test_case_name: update.installer_build, scenario: "fedora.updates-baseos-boot-iso.aarch64.aarch64"}
+  - !PassingTestCaseRule {test_case_name: update.installer_build, scenario: "fedora.updates-baseos-boot-iso.x86_64.64bit"}

kmap.py

@@ -0,0 +1,874 @@
+#!/usr/bin/env python3
+
+"""
+kmap.py - Kernel Source-to-Binary Mapping Tool
+
+DESCRIPTION
+    This tool parses Linux kernel build artifacts (.cmd files, archives) to
+    create a JSON mapping of which source files contribute to which kernel
+    binaries (modules and vmlinux). It supports merging data from multiple
+    kernel build variants (e.g., stock, debug, rt) into a single output
+    file using variant indices to track per-variant mappings.
+
+    Supported RHEL versions: 7, 8, 9, upstream
+
+FEATURES
+    - Parses .cmd files generated by kbuild to extract compilation commands
+    - Supports C (gcc/clang) and Rust (rustc) source files
+    - Handles built-in objects via built-in.o.cmd (RHEL 7), built-in.a
+      (RHEL 8/9), or vmlinux.a (upstream)
+    - Merges multiple kernel variants into single output with variant indices
+    - Maps modules to their containing RPM packages
+
+OUTPUT FORMAT
+    The output is a JSON file with the following structure:
+
+    {
+      "variants": ["stock", "rt", ...],
+      "source-map": {
+        "obj-src": {<object>: {<source>: [<variant_indices>]}},
+        "src-obj": {<source>: {<object>: [<variant_indices>]}}
+      },
+      "module-map": {
+        "module-rpm": {<module>: {<rpm_name>: [<variant_indices>]}},
+        "rpm-modules": {<rpm_name>: {<module>: [<variant_indices>]}}
+      }
+    }
+
+PARSING THE OUTPUT
+    import json
+
+    with open('kernel-map.json') as f:
+        data = json.load(f)
+
+    variants = data['variants']
+    obj_src = data['source-map']['obj-src']
+    src_obj = data['source-map']['src-obj']
+    module_rpm = data['module-map']['module-rpm']
+    rpm_modules = data['module-map']['rpm-modules']
+
+    # Get sources for vmlinux in variant "stock" (index 0)
+    vmlinux_sources = [src for src, indices in obj_src['vmlinux'].items()
+                       if 0 in indices]
+
+    # Find which object a source contributes to
+    fork_objects = [obj for obj, indices in src_obj['kernel/fork.c'].items()
+                    if 0 in indices]
+
+    # Get RPM for a module
+    def get_rpm(module, variant_idx):
+        for rpm, indices in module_rpm.get(module, {}).items():
+            if variant_idx in indices:
+                return rpm
+        return None
+
+USAGE
+    # Single variant
+    ./kmap.py -d /build/stock -r upstream -v stock -o /output
+
+    # Merge multiple variants
+    ./kmap.py -d /build/stock -r upstream -v stock -o /output
+    ./kmap.py -d /build/debug -r upstream -v debug -o /output -i kernel-map.json
+    ./kmap.py -d /build/rt -r upstream -v rt -o /output -i kernel-map.json
+
+    # With module-to-RPM mapping
+    ./kmap.py -d /build -r upstream -v stock -o /output \\
+        --vmlinux-rpm kernel-core-5.14.0.rpm \\
+        --module-list kernel-modules-5.14.0.rpm:modules.list
+
+CREDITS
+    Inspired by gen_compile_commands.py and Joe Lawrence.
+    Time measurement option added for Jan Stancek.
+"""
+
+import re
+import os
+import pathlib
+import json
+import argparse
+import subprocess
+import time
+
+
+# =============================================================================
+# Constants
+# =============================================================================
+
+VMLINUX = 'vmlinux'
+KERNEL_PREFIX = 'kernel/'
+
+# Supported compilers and linkers
+COMPILERS = ('gcc', 'clang')
+LINKER = 'ld'
+RUST_COMPILER = 'rustc'
+
+
+# =============================================================================
+# Regex Patterns
+#
+# These patterns parse the kernel build .cmd files to extract:
+# - What compiler/linker was used
+# - What source files were compiled
+# - What object files were linked
+# =============================================================================
+
+# Pattern for .ko.cmd files (module linking)
+# Matches: cmd_path/to/module.ko := ld <params> -o <ko_name> <input_files>
+# Note: upstream kernels use 'savedcmd_' prefix instead of 'cmd_'
+_KO_CMD_PATTERN = (
+    r'^(saved)?cmd_[^ ]*\.ko\s*:=\s*ld\s+'
+    r'(?P<params>.*) -o (?P<ko_name>\S+) (?P<input_files>[^;]+?)\s*(?:;|$)'
+)
+
+# Pattern for .o.cmd files (object compilation)
+# Matches multiple formats:
+# - C/asm: cmd_*.o := gcc/clang <params> -o <output> <input>
+# - Rust:  cmd_*.o := rustc <params> --emit=obj=<output> <input.rs>
+# - Rust source mapping: source_*.o := <file.rs>
+_O_CMD_PATTERN = (
+    r'^(saved)?(?:cmd_|source_)[^ ]*\.o\s+:=\s+'
+    r'(?:'
+        r'(?P<prefix>(?:\S+=\S+\s+)*)?'
+        r'(?P<command>gcc|clang|ld|rustc)\s+'
+        r'(?P<params>.*?)'
+        r'(?:'
+            r'\s+-o\s+(?P<obj_out>\S+)\s+(?P<input_files>[^;]+?)'
+            r'|'
+            r'\s+--emit=obj=(?P<rust_obj_out>\S+).*?\s+(?P<rust_input_file>\S+\.rs)'
+        r')'
+        r'|'
+        r'(?P<source_file>\S+\.rs)'
+    r')\s*(?:;|$)'
+)
+
+ko_matcher = re.compile(_KO_CMD_PATTERN)
+o_matcher = re.compile(_O_CMD_PATTERN)
+
+
+# =============================================================================
+# Utility Functions
+# =============================================================================
+
+def parse_args():
+    """
+    Parse command line arguments
+    """
+    parser = argparse.ArgumentParser(
+            prog='Kernel Build Mapper',
+            description='Scrape Linux Kernel .cmd files to map contribution '
+                        'of individual source files to kernel binaries.',
+            )
+
+    parser.add_argument('-d', '--directory',
+            help='Directory with kernel build artifacts.',
+            default='',
+            type=str)
+
+    parser.add_argument('-o', '--outputdir',
+            help='Directory where to put generated files.',
+            default='',
+            type=str)
+
+    parser.add_argument('-p', '--prefix',
+            help='Name prefix to the generated files.',
+            default='',
+            type=str)
+
+    parser.add_argument('-r', '--rhel',
+            help='Specify to what version of RHEL artifacts belong (upstream for RHEL 10+/kernel-ark)',
+            choices=['7', '8', '9', 'upstream'],
+            required=True)
+
+    parser.add_argument('-m', '--no-modules',
+            help='*SKIP* collecting information about modules',
+            action='store_true')
+
+    parser.add_argument('-b', '--no-builtin',
+            help='*SKIP* collecting information about built-in',
+            action='store_true')
+
+    parser.add_argument('-t', '--time',
+            help='Print elapsed time at the end',
+            action='store_true')
+
+    parser.add_argument('-v', '--variant',
+            help='Name of this kernel variant (e.g., stock, debug, rt)',
+            required=True,
+            type=str)
+
+    parser.add_argument('-i', '--input',
+            help='Existing JSON file to merge with (from previous variant runs)',
+            default='',
+            type=str)
+
+    parser.add_argument('--module-list',
+            help='Module list in format <rpm-name>:<path> (can be specified multiple times)',
+            action='append',
+            default=[],
+            metavar='RPM:PATH')
+
+    parser.add_argument('--vmlinux-rpm',
+            help='RPM package name for vmlinux (e.g., "kernel-5.14.0.rpm")',
+            default='',
+            type=str)
+
+    return parser.parse_args()
+
+
+def load_file(filename, build_dir=''):
+    """
+    Load a text file and return non-empty lines as a list
+    """
+    full_path = os.path.join(build_dir, filename)
+
+    try:
+        with open(full_path, 'rt', encoding='utf-8') as file:
+            return [line.rstrip() for line in file if line.rstrip()]
+    except FileNotFoundError:
+        print(f'File "{full_path}" not found.')
+        return []
+
+
+def name_to_cmd(filename, suffix):
+    """
+    Convert object filename to corresponding .cmd script filename
+
+    Example: kernel/fork.o -> kernel/.fork.o.cmd
+    """
+    path, _ = os.path.splitext(filename)
+    dirname = os.path.dirname(path)
+    basename = os.path.basename(path)
+
+    return os.path.join(dirname, '.' + basename + suffix)
+
+
+def strip_path_prefixes(path, build_dir):
+    """
+    Normalize path by removing build directory prefix and other artifacts
+    """
+    path = pathlib.Path(path)
+
+    if build_dir:
+        try:
+            return str(path.resolve().relative_to(pathlib.Path(build_dir).resolve()))
+        except ValueError:
+            pass
+
+    if path.is_absolute():
+        path = pathlib.Path(*path.parts[1:])
+
+    while path.parts and path.parts[0] == 'repos':
+        path = pathlib.Path(*path.parts[1:])
+
+    return str(path)
+
+
+def is_external_source(path):
+    """
+    Check if path should be excluded from source mapping
+
+    Filters out:
+    - Rust toolchain sources (not part of kernel source)
+    - Generated assembly files (e.g., initramfs_data.S)
+    """
+    if 'rustlib' in path:
+        return True
+    if path.endswith('_data.S'):
+        return True
+    return False
+
+
+def is_mod_file_reference(ld_input):
+    """
+    Check if linker input is a .mod file reference (RHEL 9+ module linking)
+
+    In RHEL 9+, module linking uses @path/to/module.mod files that contain
+    the list of object files to link.
+    """
+    files = ld_input.split()
+    return len(files) == 1 and files[0].startswith('@') and files[0].endswith('.mod')
+
+
+# =============================================================================
+# SourceMap Class
+# =============================================================================
+
+class SourceMap:
+    """
+    Collects and manages kernel source-to-binary mappings.
+
+    This class parses kernel build artifacts (.cmd files, archives) to determine
+    which source files contribute to which kernel binaries (modules and vmlinux).
+
+    Data structures:
+        obj_to_src: {object_name: {source_file: [variant_indices]}}
+        src_to_obj: {source_file: {object_name: [variant_indices]}}
+        module_rpm: {module_name: {rpm_name: [variant_indices]}}
+        rpm_to_modules: {rpm_name: {module_name: [variant_indices]}}
+
+    Variant indices correspond to positions in the 'variants' list.
+    """
+
+    # Dispatch table for RHEL-specific builtin collection methods
+    BUILTIN_COLLECTORS = {
+        '7': '_collect_builtin_rhel7',
+        '8': '_collect_builtin_archive',
+        '9': '_collect_builtin_archive',
+        'upstream': '_collect_builtin_vmlinux_archive',
+    }
+
+    def __init__(self, build_dir='', output_dir='', outprefix='', rhel='7', variant=''):
+        # Source mappings
+        self.obj_to_src = {}
+        self.src_to_obj = {}
+        # Module-to-RPM mappings
+        self.module_rpm = {}
+        self.rpm_to_modules = {}
+
+        # Configuration
+        self.build_dir = build_dir
+        self.output_dir = output_dir
+        self.outprefix = outprefix
+        self.rhel = rhel
+
+        # Module list
+        self.modlist = set()
+
+        # Variant tracking for multi-variant merging
+        self.variants = []
+        self.variant = variant
+        self.variant_idx = 0
+
+    # -------------------------------------------------------------------------
+    # Variant Management
+    # -------------------------------------------------------------------------
+
+    def load_existing(self, filename):
+        """
+        Load existing merged data from previous variant runs
+        """
+        if not filename:
+            return
+
+        full_path = os.path.join(self.output_dir, filename) if self.output_dir else filename
+
+        if not os.path.exists(full_path):
+            return
+
+        with open(full_path, 'rt', encoding='utf-8') as f:
+            data = json.load(f)
+
+        self.variants = data.get('variants', [])
+
+        module_map = data.get('module-map', {})
+        self.module_rpm = module_map.get('module-rpm', {})
+        self.rpm_to_modules = module_map.get('rpm-modules', {})
+
+        source_map = data.get('source-map', {})
+        self.obj_to_src = source_map.get('obj-src', {})
+        self.src_to_obj = source_map.get('src-obj', {})
+
+    def add_variant(self):
+        """
+        Register current variant and store its index
+        """
+        if self.variant in self.variants:
+            self.variant_idx = self.variants.index(self.variant)
+        else:
+            self.variant_idx = len(self.variants)
+            self.variants.append(self.variant)
+
+    # -------------------------------------------------------------------------
+    # Source Merging Helpers
+    # -------------------------------------------------------------------------
+
+    def _merge_sources(self, target, source):
+        """
+        Merge source dict into target dict by combining variant index lists
+        """
+        for src, indices in source.items():
+            if src not in target:
+                target[src] = []
+            for idx in indices:
+                if idx not in target[src]:
+                    target[src].append(idx)
+
+    def _add_source(self, sources, source_path):
+        """
+        Add a source file to the sources dict with current variant index
+
+        Returns True if source was added, False if filtered out
+        """
+        source_path = os.path.normpath(source_path)
+        source_path = strip_path_prefixes(source_path, self.build_dir)
+
+        if is_external_source(source_path):
+            return False
+
+        sources[source_path] = [self.variant_idx]
+        return True
+
+    # -------------------------------------------------------------------------
+    # .cmd File Parsing
+    # -------------------------------------------------------------------------
+
+    def _parse_ko_cmd(self, ko_name):
+        """
+        Parse .ko.cmd file to find the primary object file linked into the module
+        """
+        ko_script = name_to_cmd(ko_name, '.ko.cmd')
+        lines = load_file(ko_script, build_dir=self.build_dir)
+
+        for line in lines:
+            result = ko_matcher.match(line)
+            if result:
+                input_files = result.group('input_files').split()
+                return input_files[0]
+
+        return None
+
+    def _parse_o_cmd(self, o_name, translate=True):
+        """
+        Parse .o.cmd file to extract source files that contribute to the object
+
+        Handles:
+        - C/assembly compilation (gcc, clang)
+        - Linking (ld) - recursively parses linked objects
+        - Rust compilation (rustc)
+        - Rust source file mappings
+
+        Args:
+            o_name: Object file name or .cmd file path
+            translate: If True, convert object name to .cmd path (e.g., kernel/fork.o
+                       becomes kernel/.fork.o.cmd). If False, use o_name as-is.
+                       This parameter exists to handle different kbuild behaviors
+                       across RHEL versions - some code paths may already have .cmd
+                       paths while others have object names that need translation.
+        """
+        sources = {}
+
+        o_script = name_to_cmd(o_name, '.o.cmd') if translate else o_name
+        lines = load_file(o_script, build_dir=self.build_dir)
+
+        for line in lines:
+            result = o_matcher.match(line)
+            if not result:
+                continue
+
+            command = result.group('command')
+
+            if command in COMPILERS:
+                self._handle_compiler(result, sources)
+                break
+
+            elif command == LINKER:
+                self._handle_linker(result, sources)
+                break
+
+            elif command == RUST_COMPILER:
+                self._handle_rustc(result, sources)
+                break
+
+            else:
+                self._handle_rust_source_mapping(result, sources)
+                break
+
+        return sources
+
+    def _handle_compiler(self, match_result, sources):
+        """
+        Handle gcc/clang compilation - extract the input source file
+        """
+        obj_input = match_result.group('input_files')
+        if obj_input:
+            self._add_source(sources, obj_input)
+
+    def _handle_linker(self, match_result, sources):
+        """
+        Handle ld linking - recursively parse linked objects
+        """
+        obj_input = match_result.group('input_files')
+        if not obj_input:
+            return
+
+        if is_mod_file_reference(obj_input):
+            self._merge_sources(sources, self._parse_mod_cmd(obj_input))
+        else:
+            for obj_file in obj_input.split():
+                self._merge_sources(sources, self._parse_o_cmd(obj_file))
+
+    def _handle_rustc(self, match_result, sources):
+        """
+        Handle rustc compilation - extract the Rust source file
+        """
+        rust_input = match_result.group('rust_input_file')
+        if rust_input:
+            self._add_source(sources, rust_input)
+
+    def _handle_rust_source_mapping(self, match_result, sources):
+        """
+        Handle Rust source file mapping (source_*.o := *.rs)
+        """
+        source_file = match_result.group('source_file')
+        if source_file and source_file.endswith('.rs'):
+            self._add_source(sources, source_file)
+
+    def _parse_mod_cmd(self, mod_name):
+        """
+        Parse .mod file used by RHEL 9+ for linking modules
+
+        These files contain a list of object files to link into the module.
+        """
+        sources = {}
+        mod_name = mod_name.strip('@')
+        lines = load_file(mod_name, build_dir=self.build_dir)
+
+        for line in lines:
+            self._merge_sources(sources, self._parse_o_cmd(line))
+
+        return sources
+
+    def _parse_a_cmd(self, a_name):
+        """
+        Parse archive .cmd file (RHEL 7 built-in.o.cmd files)
+        """
+        sources = {}
+        lines = load_file(a_name, build_dir=self.build_dir)
+
+        for line in lines:
+            result = o_matcher.match(line)
+            if not result:
+                continue
+
+            ar_input = result.group('input_files')
+            for filename in ar_input.rsplit():
+                if filename.endswith('.o'):
+                    self._merge_sources(sources, self._parse_o_cmd(filename))
+                elif filename.endswith('.a'):
+                    self._merge_sources(sources, self._parse_a_cmd(filename))
+
+        return sources
+
+    # -------------------------------------------------------------------------
+    # Module Collection
+    # -------------------------------------------------------------------------
+
+    def _load_module_list(self, modorder='modules.order'):
+        """
+        Load modules.order file and normalize paths
+
+        RHEL 7, 8: modules.order has 'kernel/' prefix that needs to be stripped
+        RHEL 9, upstream: modules.order paths are used as-is
+        """
+        lines = load_file(modorder, build_dir=self.build_dir)
+
+        if not lines:
+            print(f'Warning: modules.order is empty or not found')
+            self.modlist = set()
+            return
+
+        if self.rhel in ['9', 'upstream']:
+            self.modlist = set(lines)
+        else:
+            # RHEL 7, 8: strip fake 'kernel/' prefix added by kbuild
+            self.modlist = {
+                path[len(KERNEL_PREFIX):] if path.startswith(KERNEL_PREFIX) else path
+                for path in lines
+            }
+
+    def _parse_module_objects(self):
+        """
+        Parse all module .cmd files and extract source mappings.
+
+        Note on RHEL version differences:
+        - RHEL 7/8/9: modules.order contains .ko paths (e.g., fs/exfat/exfat.ko)
+        - upstream: modules.order contains .o paths (e.g., fs/exfat/exfat.o)
+
+        The normalization below ensures consistent .ko keys in output regardless
+        of the modules.order format.
+        """
+        for kobj in self.modlist:
+            # Normalize to .ko - upstream has .o paths in modules.order
+            if self.rhel == 'upstream' and kobj.endswith('.o'):
+                module_name = kobj[:-2] + '.ko'
+            else:
+                module_name = kobj
+
+            obj_name = self._parse_ko_cmd(module_name)
+            if obj_name is None:
+                print(f'Warning: Could not parse .ko.cmd for "{module_name}", skipping.')
+                continue
+
+            obj_source = self._parse_o_cmd(obj_name)
+            if module_name not in self.obj_to_src:
+                self.obj_to_src[module_name] = {}
+            self._merge_sources(self.obj_to_src[module_name], obj_source)
+
+    def collect_modules(self, no_modules=False, modorder='modules.order'):
+        """
+        Collect source files for kernel modules
+        """
+        if no_modules:
+            return
+
+        self._load_module_list(modorder)
+        self._parse_module_objects()
+
+    # -------------------------------------------------------------------------
+    # Builtin Collection (RHEL version-specific)
+    # -------------------------------------------------------------------------
+
+    def _collect_builtin_rhel7(self):
+        """
+        Collect built-in objects for RHEL 7 using *built-in.o.cmd files
+        """
+        pattern = '*built-in.o.cmd'
+        cmd_list = {
+            strip_path_prefixes(path, self.build_dir)
+            for path in pathlib.Path(self.build_dir).rglob(pattern)
+        }
+
+        for entry in cmd_list:
+            sources = self._parse_a_cmd(entry)
+            self._merge_sources(self.obj_to_src[VMLINUX], sources)
+
+    def _collect_builtin_archive(self):
+        """
+        Collect built-in objects for RHEL 8/9 using *built-in.a archives
+        """
+        pattern = '*built-in.a'
+        archive_list = {
+            strip_path_prefixes(path, self.build_dir)
+            for path in pathlib.Path(self.build_dir).rglob(pattern)
+        }
+
+        for entry in archive_list:
+            path = os.path.join(self.build_dir, entry)
+            objects = subprocess.check_output(['ar', 't', path]).decode().split()
+
+            for obj in objects:
+                obj_path = strip_path_prefixes(obj, build_dir=self.build_dir)
+                sources = self._parse_o_cmd(obj_path)
+                self._merge_sources(self.obj_to_src[VMLINUX], sources)
+
+    def _collect_builtin_vmlinux_archive(self):
+        """
+        Collect built-in objects for upstream kernels using single vmlinux.a archive
+        """
+        path = os.path.join(self.build_dir, 'vmlinux.a')
+        objects = subprocess.check_output(['ar', 't', path]).decode().split()
+
+        for obj in objects:
+            obj_path = strip_path_prefixes(obj, build_dir=self.build_dir)
+            sources = self._parse_o_cmd(obj_path)
+            self._merge_sources(self.obj_to_src[VMLINUX], sources)
+
+    def collect_builtin(self, no_builtin=False):
+        """
+        Collect source files for vmlinux built-in objects
+
+        Uses RHEL version-specific collection method via dispatch table.
+        """
+        if VMLINUX not in self.obj_to_src:
+            self.obj_to_src[VMLINUX] = {}
+
+        if no_builtin:
+            return
+
+        collector_name = self.BUILTIN_COLLECTORS.get(self.rhel, '_collect_builtin_archive')
+        collector = getattr(self, collector_name)
+        collector()
+
+    # -------------------------------------------------------------------------
+    # Module-to-RPM Mapping
+    # -------------------------------------------------------------------------
+
+    def _parse_module_list_file(self, filename, rpm_name):
+        """
+        Parse a module list file and add entries to module_rpm mapping
+
+        Handles various formats:
+        - Absolute paths: /lib/modules/5.14.0/kernel/drivers/net/e1000.ko.xz
+        - Relative paths: kernel/drivers/net/e1000.ko
+        - Skips RPM spec directives (%dir, %defattr, etc.)
+
+        Args:
+            filename: Path to the module list file
+            rpm_name: Literal RPM package name (e.g., "kernel-modules-5.14.0.rpm")
+        """
+        if not filename or not os.path.exists(filename):
+            return
+
+        with open(filename, 'rt', encoding='utf-8') as f:
+            for line in f:
+                line = line.strip()
+
+                # Skip empty lines, comments, and RPM spec directives
+                if not line or line.startswith('#') or line.startswith('%'):
+                    continue
+
+                # Skip non-module files
+                if '.ko' not in line:
+                    continue
+
+                # Extract module name from path
+                module = os.path.basename(line)
+                # Remove .ko and any compression suffix
+                module = re.sub(r'\.ko(\.[^.]+)?$', '', module)
+
+                if not module:
+                    continue
+
+                if module not in self.module_rpm:
+                    self.module_rpm[module] = {}
+
+                if rpm_name not in self.module_rpm[module]:
+                    self.module_rpm[module][rpm_name] = []
+                if self.variant_idx not in self.module_rpm[module][rpm_name]:
+                    self.module_rpm[module][rpm_name].append(self.variant_idx)
+
+    def collect_module_rpm(self, module_lists, vmlinux_rpm=''):
+        """
+        Collect module-to-RPM name mappings from module list files
+
+        Args:
+            module_lists: List of "rpm_name:path" strings
+            vmlinux_rpm: RPM package name for vmlinux
+        """
+        if not module_lists and not vmlinux_rpm:
+            return
+
+        # Add vmlinux to specified RPM
+        if vmlinux_rpm:
+            if VMLINUX not in self.module_rpm:
+                self.module_rpm[VMLINUX] = {}
+            if vmlinux_rpm not in self.module_rpm[VMLINUX]:
+                self.module_rpm[VMLINUX][vmlinux_rpm] = []
+            if self.variant_idx not in self.module_rpm[VMLINUX][vmlinux_rpm]:
+                self.module_rpm[VMLINUX][vmlinux_rpm].append(self.variant_idx)
+
+        # Process module list files
+        for entry in module_lists:
+            if ':' not in entry:
+                print(f'Warning: Invalid --module-list format "{entry}", expected RPM:PATH')
+                continue
+
+            rpm_name, path = entry.split(':', 1)
+            self._parse_module_list_file(path, rpm_name)
+
+    # -------------------------------------------------------------------------
+    # Output
+    # -------------------------------------------------------------------------
+
+    def _build_reverse_map(self):
+        """
+        Create reverse mapping (source -> {obj: [indices]}) from obj_to_src
+        """
+        for obj, sources in self.obj_to_src.items():
+            for source, indices in sources.items():
+                if source not in self.src_to_obj:
+                    self.src_to_obj[source] = {}
+                if obj not in self.src_to_obj[source]:
+                    self.src_to_obj[source][obj] = []
+                for idx in indices:
+                    if idx not in self.src_to_obj[source][obj]:
+                        self.src_to_obj[source][obj].append(idx)
+
+    def _build_rpm_reverse_map(self):
+        """
+        Create reverse mapping (rpm -> {module: [indices]}) from module_rpm
+        """
+        for module, rpms in self.module_rpm.items():
+            for rpm, indices in rpms.items():
+                if rpm not in self.rpm_to_modules:
+                    self.rpm_to_modules[rpm] = {}
+                if module not in self.rpm_to_modules[rpm]:
+                    self.rpm_to_modules[rpm][module] = []
+                for idx in indices:
+                    if idx not in self.rpm_to_modules[rpm][module]:
+                        self.rpm_to_modules[rpm][module].append(idx)
+
+    def save_data(self):
+        """
+        Save collected data to JSON file
+
+        Output structure:
+          - variants: list of variant names
+          - source-map: source file mappings
+            - obj-src: object/module -> {source: [variant_indices]}
+            - src-obj: source -> {object/module: [variant_indices]}
+          - module-map: module to RPM mappings
+            - module-rpm: module name -> {rpm-name: [variant_indices]}
+            - rpm-modules: rpm-name -> {module name: [variant_indices]}
+
+        Variant indices correspond to positions in the 'variants' list.
+        """
+        output = {
+            'variants': self.variants,
+            'source-map': {
+                'obj-src': self.obj_to_src,
+                'src-obj': self.src_to_obj
+            },
+            'module-map': {
+                'module-rpm': self.module_rpm,
+                'rpm-modules': self.rpm_to_modules
+            }
+        }
+
+        filename = self.outprefix + 'kernel-map.json'
+        with open(os.path.join(self.output_dir, filename), 'wt', encoding='utf-8') as f:
+            json.dump(output, f, indent=2, sort_keys=True)
+
+    # -------------------------------------------------------------------------
+    # Main Entry Point
+    # -------------------------------------------------------------------------
+
+    def collect_data(self, no_modules=False, no_builtin=False, modorder='modules.order',
+                     input_file='', module_lists=None, vmlinux_rpm=''):
+        """
+        Main entry point - collect all data and save to JSON
+        """
+        self.load_existing(input_file)
+        self.add_variant()
+        self.collect_modules(no_modules, modorder)
+        self.collect_builtin(no_builtin)
+        self.collect_module_rpm(module_lists or [], vmlinux_rpm)
+        self._build_reverse_map()
+        self._build_rpm_reverse_map()
+        self.save_data()
+
+
+# =============================================================================
+# Main
+# =============================================================================
+
+def main():
+    """
+    Main entry point
+    """
+    args = parse_args()
+
+    start = time.monotonic()
+
+    source_map = SourceMap(
+            build_dir=args.directory,
+            output_dir=args.outputdir,
+            outprefix=args.prefix,
+            rhel=args.rhel,
+            variant=args.variant)
+
+    source_map.collect_data(
+            no_modules=args.no_modules,
+            no_builtin=args.no_builtin,
+            input_file=args.input,
+            module_lists=args.module_list,
+            vmlinux_rpm=args.vmlinux_rpm)
+
+    if args.time:
+        elapsed = time.monotonic() - start
+        minutes, seconds = divmod(int(elapsed), 60)
+        print(f'Elapsed time: {minutes:02d}:{seconds:02d}')
+
+
+if __name__ == '__main__':
+    main()

mod-sign.sh

@@ -13,6 +13,9 @@ MODSECKEY=$1
 MODPUBKEY=$2
 moddir=$3
 
+MODULE_SIG_HASH=$(grep -s '^CONFIG_MODULE_SIG_HASH=' .config | cut -d= -f2 | tr -d '"')
+MODULE_SIG_HASH=${MODULE_SIG_HASH:-sha512}
+
 modules=$(find "$moddir" -type f -name '*.ko')
 
 NPROC=$(nproc)
@@ -21,7 +24,7 @@ NPROC=$(nproc)
 # NB: this loop runs 2000+ iterations. Try to be fast.
 echo "$modules" | xargs -r -n16 -P "$NPROC" sh -c "
 for mod; do
-    ./scripts/sign-file sha256 $MODSECKEY $MODPUBKEY \$mod
+    ./scripts/sign-file $MODULE_SIG_HASH $MODSECKEY $MODPUBKEY \$mod
     rm -f \$mod.sig \$mod.dig
 done
 " DUMMYARG0   # xargs appends ARG1 ARG2..., which go into $mod in for loop.

partial-clang-s390x-debug-snip.config

@@ -0,0 +1,6 @@
+# clang
+# CONFIG_ANDROID_BINDER_IPC_RUST is not set
+# CONFIG_DRM_WERROR is not set
+CONFIG_KASAN_STACK=y
+# CONFIG_KMSAN is not set
+# CONFIG_SAMPLES_RUST is not set

partial-clang-s390x-snip.config

@@ -0,0 +1,6 @@
+# clang
+# CONFIG_ANDROID_BINDER_IPC_RUST is not set
+# CONFIG_DRM_WERROR is not set
+# CONFIG_KASAN_STACK is not set
+# CONFIG_KMSAN is not set
+# CONFIG_SAMPLES_RUST is not set

partial-clang_lto-aarch64-snip.config

@@ -1,5 +1,7 @@
 # clang_lto
 # CONFIG_DRM_WERROR is not set
+# CONFIG_GENDWARFKSYMS is not set
+CONFIG_GENKSYMS=y
 # CONFIG_KASAN_STACK is not set
 # CONFIG_KMSAN is not set
 CONFIG_LTO_CLANG_THIN=y

partial-clang_lto-x86_64-snip.config

@@ -1,6 +1,8 @@
 # clang_lto
 # CONFIG_AUTOFDO_CLANG is not set
 # CONFIG_DRM_WERROR is not set
+# CONFIG_GENDWARFKSYMS is not set
+CONFIG_GENKSYMS=y
 # CONFIG_KASAN_STACK is not set
 # CONFIG_KMSAN is not set
 CONFIG_LTO_CLANG_THIN=y

rpminspect.yaml

@@ -39,7 +39,7 @@ emptyrpm:
 patches:
     ignore_list:
         - linux-kernel-test.patch
-        - patch-6.19-redhat.patch
+        - patch-7.2-redhat.patch
 
 runpath:
     ignore:
@@ -53,3 +53,4 @@ annocheck:
         - /lib/modules/*/vmlinuz
         - /lib/modules/*/vdso/*
         - /usr/libexec/ksamples/*
+        - /usr/sbin/intel_sdsi

sources

@@ -1,3 +1,3 @@
-SHA512 (linux-6.19.tar.xz) = 58991ba2c44887efb92b0a2f7194033f25f5204b3f571558f1709f75651d6f0273f6f9e2949a16d6db119259f0733314c827421babb164a851ee3a5b64c7a896
+SHA512 (linux-7.2.4.tar.xz) = 0db5bf76c0332b29d50d8b4ae584975e2d29d2d29f7f09d429ab3fd90e3ac8b3f0247dc6e4d391cf7b965a432b6ca624d4cd9a6584d9e74872d6e9b15b8f36d2
-SHA512 (kernel-abi-stablelists-6.19.0.tar.xz) = 0f7671ff5385175ba09f7d825764cc1dbed9f3688578b004ad4d61ec9c3b6f5a8692f09ece2fe414494b78c20e1d233d1d63d6514d430a63d26f92eeda68b45f
+SHA512 (kernel-abi-stablelists-7.2.4.tar.xz) = 9d7c89994439c905570be2cb5f3d9d30ab74b7332b034a1348b65598eb20084587e520627e4c88dd3e2b65aa7a4738ef225b8e7d2f9b709c47e910317c65fb84
-SHA512 (kernel-kabi-dw-6.19.0.tar.xz) = 852786824dbfb83f2875fd0581117d3df749b2b6a1ad013136ec6ec49841ee051090e91303ccc84656bae04448b3ca682c70c4be36e362663530456a55d40447
+SHA512 (kernel-kabi-dw-7.2.4.tar.xz) = 5c097f5d8909f4d612f605a12fa25fcbc4d62b643a9266386e3987141b2b0dd9401a9984307ad8b344302408f405697c3a016ad65116668ecc7f56185b6f1999