The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix: * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF * kernel: FUSE filesystem low-privileged user privileges escalation * kernel: net: CPU soft lockup in TC mirred egress-to-ingress action For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Bug Fix: * kernel panic on reboot due to a bug in mei_wdt module * RHEL8: Practically limit Dummy wait workaround to old Intel systems * AMDSERVER 8.7: amdpstate driver incorrectly designed to load as default for Genoa * RHEL-8.8: Update RDMA core to Linux v6.0 * Kernel panic observed during VxFS module unload * Client not able to connect to rhel server: SYN is answered by chalange ACK and RST is ignored * RHEL8.4: s390/kexec: fix ipl report address for kdump * kvm-unit-test reports unhandled exception on AMD * Windows Server 2019 guest randomly pauses with KVM: entry failed, hardware error 0x80000021 * Unable to get QinQ working with ConnectX-4 Lx in SR-IOV scenario * panic in fib6_rule_suppress+0x22 with custom xdp prog involved in * net/mlx5e: Fix use-after-free when reverting termination table * RHEL 8.7: EEH injection failed to recover on Mellanox adapter. * mlx5: lag and sriov fixes * RHEL8.4: dasd: fix no record found for raw_track_access * GSS: Set of fixes in ceph kernel module to prevent OCS node kernel crash - - blocklist the kclient when receiving corrupted snap trace * Azure RHEL8 scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM * fast_isolate_freepages scans out of target zone * Backport Request for locking/rwsem commits * ipv6 traffic stop when an sriov vf have ipv6 address * Hyper-V RHEL8.8: Update MANA driver Enhancement: * Intel 8.8 FEAT SPR CPU: AMX: Improve the init_fpstate setup code