diff --git a/COPYING-6.12.0-124.35.1.el10_1 b/COPYING-6.12.0-124.38.1.el10_1
similarity index 100%
rename from COPYING-6.12.0-124.35.1.el10_1
rename to COPYING-6.12.0-124.38.1.el10_1
diff --git a/Makefile.rhelver b/Makefile.rhelver
index f4fc763e3bbd1..69a8a50466346 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 1
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 124.35.1
+RHEL_RELEASE = 124.38.1
 
 #
 # RHEL_REBASE_NUM
diff --git a/arch/x86/net/bpf_jit_comp.c b/arch/x86/net/bpf_jit_comp.c
index d12cd8fcc54b7..30d4538af7837 100644
--- a/arch/x86/net/bpf_jit_comp.c
+++ b/arch/x86/net/bpf_jit_comp.c
@@ -2515,7 +2515,7 @@ st:			if (is_imm8(insn->off))
 			/* Update cleanup_addr */
 			ctx->cleanup_addr = proglen;
 			if (bpf_prog_was_classic(bpf_prog) &&
-			    !capable(CAP_SYS_ADMIN)) {
+			    !ns_capable_noaudit(&init_user_ns, CAP_SYS_ADMIN)) {
 				u8 *ip = image + addrs[i - 1];
 
 				if (emit_spectre_bhb_barrier(&prog, ip, bpf_prog))
diff --git a/ciq/ciq_backports/kernel-6.12.0-124.38.1.el10_1/rebuild.details.txt b/ciq/ciq_backports/kernel-6.12.0-124.38.1.el10_1/rebuild.details.txt
new file mode 100644
index 0000000000000..2117599d7fe6d
--- /dev/null
+++ b/ciq/ciq_backports/kernel-6.12.0-124.38.1.el10_1/rebuild.details.txt
@@ -0,0 +1,21 @@
+Rebuild_History BUILDABLE
+Rebuilding Kernel from rpm changelog with Fuzz Limit: 87.50%
+Number of commits in upstream range v6.12~1..kernel-mainline: 93416
+Number of commits in rpm: 13
+Number of commits matched with upstream: 8 (61.54%)
+Number of commits in upstream but not in rpm: 93408
+Number of commits NOT found in upstream: 5 (38.46%)
+
+Rebuilding Kernel on Branch rocky10_1_rebuild_kernel-6.12.0-124.38.1.el10_1 for kernel-6.12.0-124.38.1.el10_1
+Clean Cherry Picks: 8 (100.00%)
+Empty Cherry Picks: 0 (0.00%)
+_______________________________
+
+__EMPTY COMMITS__________________________
+
+__CHANGES NOT IN UPSTREAM________________
+Add partial riscv64 support for build root'
+Provide basic VisionFive 2 support'
+Patch MMU for riscv64'
+scsi: storvsc: Process unsupported MODE_SENSE_10
+nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
diff --git a/configs/kernel-6.12.0-aarch64-64k-debug.config b/configs/kernel-6.12.0-aarch64-64k-debug.config
index 89c63ec931d57..c8a69da8830bf 100644
--- a/configs/kernel-6.12.0-aarch64-64k-debug.config
+++ b/configs/kernel-6.12.0-aarch64-64k-debug.config
@@ -8343,7 +8343,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-aarch64-64k.config b/configs/kernel-6.12.0-aarch64-64k.config
index 2c31913a36ffd..20f440bccae04 100644
--- a/configs/kernel-6.12.0-aarch64-64k.config
+++ b/configs/kernel-6.12.0-aarch64-64k.config
@@ -8320,7 +8320,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-aarch64-debug.config b/configs/kernel-6.12.0-aarch64-debug.config
index 897ec5ee1ca2a..7fa8b8fe3ab15 100644
--- a/configs/kernel-6.12.0-aarch64-debug.config
+++ b/configs/kernel-6.12.0-aarch64-debug.config
@@ -8350,7 +8350,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-aarch64-rt-64k-debug.config b/configs/kernel-6.12.0-aarch64-rt-64k-debug.config
index f9a446a620d3b..cd3cca38f32bd 100644
--- a/configs/kernel-6.12.0-aarch64-rt-64k-debug.config
+++ b/configs/kernel-6.12.0-aarch64-rt-64k-debug.config
@@ -8325,7 +8325,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-aarch64-rt-64k.config b/configs/kernel-6.12.0-aarch64-rt-64k.config
index da134a98df4b9..99ce3355c6ae9 100644
--- a/configs/kernel-6.12.0-aarch64-rt-64k.config
+++ b/configs/kernel-6.12.0-aarch64-rt-64k.config
@@ -8302,7 +8302,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-aarch64-rt-debug.config b/configs/kernel-6.12.0-aarch64-rt-debug.config
index a54e5e6e98e19..7338b135c4ffe 100644
--- a/configs/kernel-6.12.0-aarch64-rt-debug.config
+++ b/configs/kernel-6.12.0-aarch64-rt-debug.config
@@ -8331,7 +8331,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-aarch64-rt.config b/configs/kernel-6.12.0-aarch64-rt.config
index 1cd5fe06c54cf..05fd53241b7df 100644
--- a/configs/kernel-6.12.0-aarch64-rt.config
+++ b/configs/kernel-6.12.0-aarch64-rt.config
@@ -8308,7 +8308,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-aarch64.config b/configs/kernel-6.12.0-aarch64.config
index d128a41b44560..3077e8a17f0be 100644
--- a/configs/kernel-6.12.0-aarch64.config
+++ b/configs/kernel-6.12.0-aarch64.config
@@ -8327,7 +8327,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-ppc64le-debug.config b/configs/kernel-6.12.0-ppc64le-debug.config
index ccfa3eca8218d..479f66a704df5 100644
--- a/configs/kernel-6.12.0-ppc64le-debug.config
+++ b/configs/kernel-6.12.0-ppc64le-debug.config
@@ -6604,7 +6604,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-ppc64le.config b/configs/kernel-6.12.0-ppc64le.config
index bd9863680037a..b247bca03800c 100644
--- a/configs/kernel-6.12.0-ppc64le.config
+++ b/configs/kernel-6.12.0-ppc64le.config
@@ -6600,7 +6600,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-s390x-debug.config b/configs/kernel-6.12.0-s390x-debug.config
index f84080c298096..966fe68dba071 100644
--- a/configs/kernel-6.12.0-s390x-debug.config
+++ b/configs/kernel-6.12.0-s390x-debug.config
@@ -3758,7 +3758,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-s390x-zfcpdump.config b/configs/kernel-6.12.0-s390x-zfcpdump.config
index c65275e81257d..a06e1a49bd260 100644
--- a/configs/kernel-6.12.0-s390x-zfcpdump.config
+++ b/configs/kernel-6.12.0-s390x-zfcpdump.config
@@ -1605,7 +1605,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # end of Random number generation
 
diff --git a/configs/kernel-6.12.0-s390x.config b/configs/kernel-6.12.0-s390x.config
index d61c6b9108897..09571f50e9012 100644
--- a/configs/kernel-6.12.0-s390x.config
+++ b/configs/kernel-6.12.0-s390x.config
@@ -3783,7 +3783,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-x86_64-debug.config b/configs/kernel-6.12.0-x86_64-debug.config
index 94d09a557b775..b08ef88800255 100644
--- a/configs/kernel-6.12.0-x86_64-debug.config
+++ b/configs/kernel-6.12.0-x86_64-debug.config
@@ -9108,7 +9108,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-x86_64-rt-debug.config b/configs/kernel-6.12.0-x86_64-rt-debug.config
index ebf9dd7915a3b..93663804cc0cf 100644
--- a/configs/kernel-6.12.0-x86_64-rt-debug.config
+++ b/configs/kernel-6.12.0-x86_64-rt-debug.config
@@ -9089,7 +9089,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-x86_64-rt.config b/configs/kernel-6.12.0-x86_64-rt.config
index ce4a536a71663..bc526efab6aa4 100644
--- a/configs/kernel-6.12.0-x86_64-rt.config
+++ b/configs/kernel-6.12.0-x86_64-rt.config
@@ -9060,7 +9060,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-6.12.0-x86_64.config b/configs/kernel-6.12.0-x86_64.config
index 00afa86d9d1ea..8b65d83131b12 100644
--- a/configs/kernel-6.12.0-x86_64.config
+++ b/configs/kernel-6.12.0-x86_64.config
@@ -9079,7 +9079,7 @@ CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
 CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 CONFIG_CRYPTO_KDF800108_CTR=y
 # end of Random number generation
diff --git a/configs/kernel-aarch64-64k-debug-rhel.config b/configs/kernel-aarch64-64k-debug-rhel.config
index 66d4cde860a25..8102a74535237 100644
--- a/configs/kernel-aarch64-64k-debug-rhel.config
+++ b/configs/kernel-aarch64-64k-debug-rhel.config
@@ -1281,7 +1281,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-aarch64-64k-rhel.config b/configs/kernel-aarch64-64k-rhel.config
index d9c8093459ff3..624af66475982 100644
--- a/configs/kernel-aarch64-64k-rhel.config
+++ b/configs/kernel-aarch64-64k-rhel.config
@@ -1281,7 +1281,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-aarch64-debug-rhel.config b/configs/kernel-aarch64-debug-rhel.config
index 6f1501878857b..26f6efa033e7c 100644
--- a/configs/kernel-aarch64-debug-rhel.config
+++ b/configs/kernel-aarch64-debug-rhel.config
@@ -1279,7 +1279,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-aarch64-rhel.config b/configs/kernel-aarch64-rhel.config
index 342bdc049339c..98d952eee1e52 100644
--- a/configs/kernel-aarch64-rhel.config
+++ b/configs/kernel-aarch64-rhel.config
@@ -1279,7 +1279,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-aarch64-rt-64k-debug-rhel.config b/configs/kernel-aarch64-rt-64k-debug-rhel.config
index 011f04d13ca3a..ee576390ddb34 100644
--- a/configs/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/configs/kernel-aarch64-rt-64k-debug-rhel.config
@@ -1282,7 +1282,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-aarch64-rt-64k-rhel.config b/configs/kernel-aarch64-rt-64k-rhel.config
index 5354322b12432..98bf11bc2842f 100644
--- a/configs/kernel-aarch64-rt-64k-rhel.config
+++ b/configs/kernel-aarch64-rt-64k-rhel.config
@@ -1282,7 +1282,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-aarch64-rt-debug-rhel.config b/configs/kernel-aarch64-rt-debug-rhel.config
index 6900b1706f0e7..fe7be237e1a2d 100644
--- a/configs/kernel-aarch64-rt-debug-rhel.config
+++ b/configs/kernel-aarch64-rt-debug-rhel.config
@@ -1280,7 +1280,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-aarch64-rt-rhel.config b/configs/kernel-aarch64-rt-rhel.config
index 89fa1e7420f7a..02ed4abae517e 100644
--- a/configs/kernel-aarch64-rt-rhel.config
+++ b/configs/kernel-aarch64-rt-rhel.config
@@ -1280,7 +1280,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-ppc64le-debug-rhel.config b/configs/kernel-ppc64le-debug-rhel.config
index 9d47362150fec..ee08f1b918b9c 100644
--- a/configs/kernel-ppc64le-debug-rhel.config
+++ b/configs/kernel-ppc64le-debug-rhel.config
@@ -1044,7 +1044,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-ppc64le-rhel.config b/configs/kernel-ppc64le-rhel.config
index e9cfa0da25ec5..0e621e5485dca 100644
--- a/configs/kernel-ppc64le-rhel.config
+++ b/configs/kernel-ppc64le-rhel.config
@@ -1044,7 +1044,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-s390x-debug-rhel.config b/configs/kernel-s390x-debug-rhel.config
index 990fdf4d84254..1372799094bb4 100644
--- a/configs/kernel-s390x-debug-rhel.config
+++ b/configs/kernel-s390x-debug-rhel.config
@@ -1040,7 +1040,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-s390x-rhel.config b/configs/kernel-s390x-rhel.config
index c1f48b25757a4..24050a6538059 100644
--- a/configs/kernel-s390x-rhel.config
+++ b/configs/kernel-s390x-rhel.config
@@ -1040,7 +1040,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-s390x-zfcpdump-rhel.config b/configs/kernel-s390x-zfcpdump-rhel.config
index 942dc2af1de29..77787d89b9ac6 100644
--- a/configs/kernel-s390x-zfcpdump-rhel.config
+++ b/configs/kernel-s390x-zfcpdump-rhel.config
@@ -1041,7 +1041,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-x86_64-debug-rhel.config b/configs/kernel-x86_64-debug-rhel.config
index 90aa81e1cf42b..bd2b7d10ac763 100644
--- a/configs/kernel-x86_64-debug-rhel.config
+++ b/configs/kernel-x86_64-debug-rhel.config
@@ -1098,7 +1098,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-x86_64-rhel.config b/configs/kernel-x86_64-rhel.config
index 9222b710f1a94..30a71006a92ae 100644
--- a/configs/kernel-x86_64-rhel.config
+++ b/configs/kernel-x86_64-rhel.config
@@ -1098,7 +1098,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-x86_64-rt-debug-rhel.config b/configs/kernel-x86_64-rt-debug-rhel.config
index f37673fe537c6..46b79632c28f0 100644
--- a/configs/kernel-x86_64-rt-debug-rhel.config
+++ b/configs/kernel-x86_64-rt-debug-rhel.config
@@ -1099,7 +1099,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/configs/kernel-x86_64-rt-rhel.config b/configs/kernel-x86_64-rt-rhel.config
index f9c6ef8459fe5..47e2c83df6a98 100644
--- a/configs/kernel-x86_64-rt-rhel.config
+++ b/configs/kernel-x86_64-rt-rhel.config
@@ -1099,7 +1099,7 @@ CONFIG_CRYPTO_HW=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_128 is not set
 CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_2=y
 # CONFIG_CRYPTO_JITTERENTROPY_MEMSIZE_8192 is not set
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
 # CONFIG_CRYPTO_JITTERENTROPY_TESTINTERFACE is not set
 # CONFIG_CRYPTO_KEYWRAP is not set
 CONFIG_CRYPTO_LIB_AESCFB=y
diff --git a/drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c b/drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
index 950549649995b..5d2c53b7e5b5b 100644
--- a/drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
+++ b/drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c
@@ -4803,6 +4803,7 @@ int i40e_ndo_set_vf_link_state(struct net_device *netdev, int vf_id, int link)
 	unsigned long q_map;
 	struct i40e_vf *vf;
 	int abs_vf_id;
+	int old_link;
 	int ret = 0;
 	int tmp;
 
@@ -4821,6 +4822,17 @@ int i40e_ndo_set_vf_link_state(struct net_device *netdev, int vf_id, int link)
 	vf = &pf->vf[vf_id];
 	abs_vf_id = vf->vf_id + hw->func_caps.vf_base_id;
 
+	/* skip VF link state change if requested state is already set */
+	if (!vf->link_forced)
+		old_link = IFLA_VF_LINK_STATE_AUTO;
+	else if (vf->link_up)
+		old_link = IFLA_VF_LINK_STATE_ENABLE;
+	else
+		old_link = IFLA_VF_LINK_STATE_DISABLE;
+
+	if (link == old_link)
+		goto error_out;
+
 	pfe.event = VIRTCHNL_EVENT_LINK_CHANGE;
 	pfe.severity = PF_EVENT_SEVERITY_INFO;
 
diff --git a/drivers/ntb/hw/mscc/ntb_hw_switchtec.c b/drivers/ntb/hw/mscc/ntb_hw_switchtec.c
index ad1786be2554b..f851397b65d6e 100644
--- a/drivers/ntb/hw/mscc/ntb_hw_switchtec.c
+++ b/drivers/ntb/hw/mscc/ntb_hw_switchtec.c
@@ -288,7 +288,7 @@ static int switchtec_ntb_mw_set_trans(struct ntb_dev *ntb, int pidx, int widx,
 	if (size != 0 && xlate_pos < 12)
 		return -EINVAL;
 
-	if (!IS_ALIGNED(addr, BIT_ULL(xlate_pos))) {
+	if (xlate_pos >= 0 && !IS_ALIGNED(addr, BIT_ULL(xlate_pos))) {
 		/*
 		 * In certain circumstances we can get a buffer that is
 		 * not aligned to its size. (Most of the time
diff --git a/drivers/nvme/target/tcp.c b/drivers/nvme/target/tcp.c
index 259ad77c03c50..09634957f3741 100644
--- a/drivers/nvme/target/tcp.c
+++ b/drivers/nvme/target/tcp.c
@@ -1021,6 +1021,18 @@ static int nvmet_tcp_handle_h2c_data_pdu(struct nvmet_tcp_queue *queue)
 		pr_err("H2CData PDU len %u is invalid\n", cmd->pdu_len);
 		goto err_proto;
 	}
+       /*
+	* Ensure command data structures are initialized. We must check both
+	* cmd->req.sg and cmd->iov because they can have different NULL states:
+	* - Uninitialized commands: both NULL
+	* - READ commands: cmd->req.sg allocated, cmd->iov NULL
+	* - WRITE commands: both allocated
+	*/
+	if (unlikely(!cmd->req.sg || !cmd->iov)) {
+		pr_err("queue %d: H2CData PDU received for invalid command state (ttag %u)\n",
+			queue->idx, data->ttag);
+		goto err_proto;
+	}
 	cmd->pdu_recv = 0;
 	nvmet_tcp_build_pdu_iovec(cmd);
 	queue->cmd = cmd;
diff --git a/drivers/scsi/storvsc_drv.c b/drivers/scsi/storvsc_drv.c
index 3284f52ab1fec..f772753a391b4 100644
--- a/drivers/scsi/storvsc_drv.c
+++ b/drivers/scsi/storvsc_drv.c
@@ -1144,7 +1144,7 @@ static void storvsc_on_io_completion(struct storvsc_device *stor_device,
 	 * The current SCSI handling on the host side does
 	 * not correctly handle:
 	 * INQUIRY command with page code parameter set to 0x80
-	 * MODE_SENSE command with cmd[2] == 0x1c
+	 * MODE_SENSE and MODE_SENSE_10 command with cmd[2] == 0x1c
 	 * MAINTENANCE_IN is not supported by HyperV FC passthrough
 	 *
 	 * Setup srb and scsi status so this won't be fatal.
@@ -1154,6 +1154,7 @@ static void storvsc_on_io_completion(struct storvsc_device *stor_device,
 
 	if ((stor_pkt->vm_srb.cdb[0] == INQUIRY) ||
 	   (stor_pkt->vm_srb.cdb[0] == MODE_SENSE) ||
+	   (stor_pkt->vm_srb.cdb[0] == MODE_SENSE_10) ||
 	   (stor_pkt->vm_srb.cdb[0] == MAINTENANCE_IN &&
 	   hv_dev_is_fc(device))) {
 		vstor_packet->vm_srb.scsi_status = 0;
diff --git a/fs/erofs/super.c b/fs/erofs/super.c
index 2dd7d819572f4..c36a0eb70cddd 100644
--- a/fs/erofs/super.c
+++ b/fs/erofs/super.c
@@ -188,8 +188,11 @@ static int erofs_init_device(struct erofs_buf *buf, struct super_block *sb,
 				filp_open(dif->path, O_RDONLY | O_LARGEFILE, 0) :
 				bdev_file_open_by_path(dif->path,
 						BLK_OPEN_READ, sb->s_type, NULL);
-		if (IS_ERR(file))
+		if (IS_ERR(file)) {
+			if (file == ERR_PTR(-ENOTBLK))
+				return -EINVAL;
 			return PTR_ERR(file);
+		}
 
 		if (!erofs_is_fileio_mode(sbi)) {
 			dif->dax_dev = fs_dax_get_by_bdev(file_bdev(file),
diff --git a/fs/nfs/pnfs.c b/fs/nfs/pnfs.c
index 1a7ec68bde153..2599ebe19c4d1 100644
--- a/fs/nfs/pnfs.c
+++ b/fs/nfs/pnfs.c
@@ -466,6 +466,7 @@ pnfs_mark_layout_stateid_invalid(struct pnfs_layout_hdr *lo,
 	struct pnfs_layout_segment *lseg, *next;
 
 	set_bit(NFS_LAYOUT_INVALID_STID, &lo->plh_flags);
+	clear_bit(NFS_INO_LAYOUTCOMMIT, &NFS_I(lo->plh_inode)->flags);
 	list_for_each_entry_safe(lseg, next, &lo->plh_segs, pls_list)
 		pnfs_clear_lseg_state(lseg, lseg_list);
 	pnfs_clear_layoutreturn_info(lo);
diff --git a/net/bluetooth/iso.c b/net/bluetooth/iso.c
index 2819cda616bce..5987f8ad95ac2 100644
--- a/net/bluetooth/iso.c
+++ b/net/bluetooth/iso.c
@@ -746,6 +746,13 @@ static void iso_sock_kill(struct sock *sk)
 
 	BT_DBG("sk %p state %d", sk, sk->sk_state);
 
+	/* Sock is dead, so set conn->sk to NULL to avoid possible UAF */
+	if (iso_pi(sk)->conn) {
+		iso_conn_lock(iso_pi(sk)->conn);
+		iso_pi(sk)->conn->sk = NULL;
+		iso_conn_unlock(iso_pi(sk)->conn);
+	}
+
 	/* Kill poor orphan */
 	bt_sock_unlink(&iso_sk_list, sk);
 	sock_set_flag(sk, SOCK_DEAD);
diff --git a/net/smc/smc_pnet.c b/net/smc/smc_pnet.c
index 716808f374a8d..b1a35ffb7dcc7 100644
--- a/net/smc/smc_pnet.c
+++ b/net/smc/smc_pnet.c
@@ -1124,37 +1124,38 @@ static void smc_pnet_find_ism_by_pnetid(struct net_device *ndev,
  */
 void smc_pnet_find_roce_resource(struct sock *sk, struct smc_init_info *ini)
 {
-	struct dst_entry *dst = sk_dst_get(sk);
-
-	if (!dst)
-		goto out;
-	if (!dst->dev)
-		goto out_rel;
+	struct net_device *dev;
+	struct dst_entry *dst;
 
-	smc_pnet_find_roce_by_pnetid(dst->dev, ini);
+	rcu_read_lock();
+	dst = __sk_dst_get(sk);
+	dev = dst ? dst_dev_rcu(dst) : NULL;
+	dev_hold(dev);
+	rcu_read_unlock();
 
-out_rel:
-	dst_release(dst);
-out:
-	return;
+	if (dev) {
+		smc_pnet_find_roce_by_pnetid(dev, ini);
+		dev_put(dev);
+	}
 }
 
 void smc_pnet_find_ism_resource(struct sock *sk, struct smc_init_info *ini)
 {
-	struct dst_entry *dst = sk_dst_get(sk);
+	struct net_device *dev;
+	struct dst_entry *dst;
 
 	ini->ism_dev[0] = NULL;
-	if (!dst)
-		goto out;
-	if (!dst->dev)
-		goto out_rel;
 
-	smc_pnet_find_ism_by_pnetid(dst->dev, ini);
+	rcu_read_lock();
+	dst = __sk_dst_get(sk);
+	dev = dst ? dst_dev_rcu(dst) : NULL;
+	dev_hold(dev);
+	rcu_read_unlock();
 
-out_rel:
-	dst_release(dst);
-out:
-	return;
+	if (dev) {
+		smc_pnet_find_ism_by_pnetid(dev, ini);
+		dev_put(dev);
+	}
 }
 
 /* Lookup and apply a pnet table entry to the given ib device.
diff --git a/redhat/configs/rhel/automotive/generic/CONFIG_CRYPTO_JITTERENTROPY_OSR b/redhat/configs/rhel/automotive/generic/CONFIG_CRYPTO_JITTERENTROPY_OSR
new file mode 100644
index 0000000000000..b413a5719d7a6
--- /dev/null
+++ b/redhat/configs/rhel/automotive/generic/CONFIG_CRYPTO_JITTERENTROPY_OSR
@@ -0,0 +1 @@
+CONFIG_CRYPTO_JITTERENTROPY_OSR=1
diff --git a/redhat/configs/rhel/generic/CONFIG_CRYPTO_JITTERENTROPY_OSR b/redhat/configs/rhel/generic/CONFIG_CRYPTO_JITTERENTROPY_OSR
index b413a5719d7a6..f89858c2a1d9c 100644
--- a/redhat/configs/rhel/generic/CONFIG_CRYPTO_JITTERENTROPY_OSR
+++ b/redhat/configs/rhel/generic/CONFIG_CRYPTO_JITTERENTROPY_OSR
@@ -1 +1 @@
-CONFIG_CRYPTO_JITTERENTROPY_OSR=1
+CONFIG_CRYPTO_JITTERENTROPY_OSR=3
diff --git a/redhat/kernel.changelog-10.1 b/redhat/kernel.changelog-10.1
index 0fdd00f5a88cf..5c75ebdd76d7a 100644
--- a/redhat/kernel.changelog-10.1
+++ b/redhat/kernel.changelog-10.1
@@ -1,3 +1,22 @@
+* Sat Feb 07 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.38.1.el10_1]
+- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
+- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}
+Resolves: RHEL-144335, RHEL-147288
+
+* Thu Feb 05 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.37.1.el10_1]
+- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
+- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
+- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}
+Resolves: RHEL-126896, RHEL-135138, RHEL-140874, RHEL-141876
+
+* Tue Feb 03 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.36.1.el10_1]
+- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
+- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
+- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
+- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
+- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}
+Resolves: RHEL-128899, RHEL-132908, RHEL-136912, RHEL-137977, RHEL-140263
+
 * Sat Jan 31 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.35.1.el10_1]
 - ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
 - mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
diff --git a/sound/usb/endpoint.c b/sound/usb/endpoint.c
index f36ec98da4601..7238f65cbcfff 100644
--- a/sound/usb/endpoint.c
+++ b/sound/usb/endpoint.c
@@ -1386,6 +1386,11 @@ int snd_usb_endpoint_set_params(struct snd_usb_audio *chip,
 	ep->sample_rem = ep->cur_rate % ep->pps;
 	ep->packsize[0] = ep->cur_rate / ep->pps;
 	ep->packsize[1] = (ep->cur_rate + (ep->pps - 1)) / ep->pps;
+	if (ep->packsize[1] > ep->maxpacksize) {
+		usb_audio_dbg(chip, "Too small maxpacksize %u for rate %u / pps %u\n",
+			      ep->maxpacksize, ep->cur_rate, ep->pps);
+		return -EINVAL;
+	}
 
 	/* calculate the frequency in 16.16 format */
 	ep->freqm = ep->freqn;
diff --git a/uki-addons.sbat b/uki-addons.sbat
index 165fbe9806569..e99647fd39482 100644
--- a/uki-addons.sbat
+++ b/uki-addons.sbat
@@ -1,3 +1,3 @@
 sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
-kernel-uki-virt-addons.rhel,1,Red Hat,kernel-uki-virt-addons,6.12.0-124.35.1.el10_1.x86_64,mailto:secalert@redhat.com
-kernel-uki-virt-addons.rocky,1,RESF,kernel-uki-virt-addons,6.12.0-124.35.1.el10_1.x86_64,mailto:security@rockylinux.org
+kernel-uki-virt-addons.rhel,1,Red Hat,kernel-uki-virt-addons,6.12.0-124.38.1.el10_1.x86_64,mailto:secalert@redhat.com
+kernel-uki-virt-addons.rocky,1,RESF,kernel-uki-virt-addons,6.12.0-124.38.1.el10_1.x86_64,mailto:security@rockylinux.org
diff --git a/uki.sbat b/uki.sbat
index 250adf363dc7c..1031a5d630b74 100644
--- a/uki.sbat
+++ b/uki.sbat
@@ -1,3 +1,3 @@
 sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
-kernel-uki-virt.rhel,1,Red Hat,kernel-uki-virt,6.12.0-124.35.1.el10_1.x86_64,mailto:secalert@redhat.com
-kernel-uki-virt.rocky,1,RESF,kernel-uki-virt,6.12.0-124.35.1.el10_1.x86_64,mailto:security@rockylinux.org
+kernel-uki-virt.rhel,1,Red Hat,kernel-uki-virt,6.12.0-124.38.1.el10_1.x86_64,mailto:secalert@redhat.com
+kernel-uki-virt.rocky,1,RESF,kernel-uki-virt,6.12.0-124.38.1.el10_1.x86_64,mailto:security@rockylinux.org