[5.14.0-427.16.1.el9_4.OL9] - Disable UKI signing [Orabug: 36571828] - Update Oracle Linux certificates - Disable signing for aarch64 - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 lt;= 15.3-1.0.5] - Remove upstream reference during boot [Orabug: 34729535] - Add Oracle Linux IMA certificates [5.14.0-427.16.1.el9_4] - memory: tegra: Skip SID programming if SID registers aren"t set [RHEL-32675 RHEL-23656] - memory: tegra: Add SID override programming for MC clients [RHEL-32675 RHEL-23656] - iommu: Don"t reserve 0-length IOVA region [RHEL-32675 RHEL-23656] [5.14.0-427.15.1.el9_4] - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 [RHEL-30110 RHEL-19000] - ice: avoid the PTP hardware semaphore in gettimex64 path [RHEL-30110 RHEL-19000] - ice: add ice_adapter for shared data across PFs on the same NIC [RHEL-30110 RHEL-19000] - crypto: iaa - mark tech preview [RHEL-32242 RHEL-29685] - crypto: iaa - Fix nr_cpus lt; nr_iaa case [RHEL-32242 RHEL-29685] - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags [RHEL-32242 RHEL-29685] - crypto: iaa - Fix comp/decomp delay statistics [RHEL-32242 RHEL-29685] - crypto: iaa - Fix async_disable descriptor leak [RHEL-32242 RHEL-29685] - crypto: iaa - Remove unnecessary debugfs_create_dir error check in iaa_crypto_debugfs_init [RHEL-32242 RHEL-29685] - crypto: iaa - Remove header table code [RHEL-32242 RHEL-29685] - cgroup: cgroup-v1: do not exclude cgrp_dfl_root [RHEL-32716 RHEL-31381] - x86/sev: Harden #VC instruction emulation somewhat [RHEL-30030 RHEL-30031] {CVE-2024-25743 CVE-2024-25742} [5.14.0-427.14.1.el9_4] - crypto: dh - implement FIPS PCT [RHEL-27009 RHEL-25845] - crypto: tcrypt - add ffdhe2048 test [RHEL-27009 RHEL-25845] - crypto: dh - Make public key test FIPS-only [RHEL-27009 RHEL-25845] - printk: allow disabling printk per-console device kthreads at boot [RHEL-30678 RHEL-17709] - mm, vmscan: remove ISOLATE_UNMAPPED [RHEL-29235 RHEL-28667] - trace-vmscan-postprocess: sync with tracepoints updates [RHEL-29235 RHEL-28667] - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate [RHEL-29235 RHEL-28667] - mm/mglru: skip special VMAs in lru_gen_look_around [RHEL-29235 RHEL-28667] - mm/mglru: reclaim offlined memcgs harder [RHEL-29235 RHEL-28667] - mm/mglru: try to stop at high watermarks [RHEL-29235 RHEL-28667] - mm/mglru: fix underprotected page cache [RHEL-29235 RHEL-28667] - mm: multi-gen LRU: reuse some legacy trace events [RHEL-29235 RHEL-28667] - mm: multi-gen LRU: improve design doc [RHEL-29235 RHEL-28667] - mm: multi-gen LRU: clean up sysfs code [RHEL-29235 RHEL-28667] - cpu/hotplug: Do not bail-out in DYING/STARTING sections [RHEL-29673 RHEL-19514] - crypto: akcipher - Disable signing and decryption [RHEL-29079 RHEL-17113] {CVE-2023-6240}