fix: remove AzureLinux 3.0 modprobe LPE blacklist (CSE-time + VHD bake-in) — kernel 6.6.139.1-1.azl3+ fixes upstream#8546

Open

djsly wants to merge 9 commits into

mainfrom

djsly/38070527-remove-azl3-lpe-mitigation

Commits on May 21, 2026

fix: skip CSE-time CVE modprobe blacklist on AzureLinux 3.0

djsly
and
Copilot
committed
fix: also remove modprobe-CIS.conf bake-in from AzureLinux 3.0 VHDs

djsly
and
Copilot
committed
fix: simplify CSE gate to isUbuntu-only and refresh validator doc

djsly
and
Copilot
committed
fix: restore shellspec shebang on cse_main_disable_modules_spec

djsly
and
Copilot
committed
fix: keep Mariner + OSGuard in scope; strengthen absence checks

djsly
and
Copilot
committed
fix: drop dead Mariner branch from CVE modprobe gate

djsly
and
Copilot
committed
docs: clarify both module lists must be kept in sync

djsly
and
Copilot
committed
Apply suggestions from code review

djsly
and
Copilot
authored

Commits on May 22, 2026

Apply suggestions from code review

djsly
and
Copilot
authored