Important: Unbreakable Enterprise kernel security update (Oracle Linux 9)

[6.12.0-100.28.2]
- sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval)
- certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967533]
- Revert 'block: sysfs option to change ioticks granularity' (Gulam Mohamed) [Orabug: 37921776]
- RDS: use pin_user_pages_fast() (Stephen Brennan) [Orabug: 37968545]

[6.12.0-100.28.1]
- KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Michael Roth) [Orabug: 37894105]
- KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Michael Roth) [Orabug: 37894105]
- Revert 'KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching' (Liam Merwick) [Orabug: 37894105]
- uek-rpm: Enable SECURITY_DMESG_RESTRICT in UEK8 (Harshit Mogalapalli) [Orabug: 37867042]

[6.12.0-2.28.3]
- LTS version: v6.12.28 (Jack Vogel)
- dm: fix copying after src array boundaries (Tudor Ambarus)
- drm/amd/display: Fix slab-use-after-free in hdcp (Chris Bainbridge)
- drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp (Mario Limonciello)
- drivers: base: handle module_kobject creation (Shyam Saini)
- kernel: globalize lookup_or_create_module_kobject() (Shyam Saini)
- kernel: param: rename locate_module_kobject (Shyam Saini)
- Revert 'drm/meson: vclk: fix calculation of 59.94 fractional rates' (Christian Hewitt)
- arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs (Christian Bruel)
- arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs (Christian Bruel)
- ARM: dts: opos6ul: add ksz8081 phy properties (Sebastien Szymanski)
- arm64: dts: imx95: Correct the range of PCIe app-reg region (Richard Zhu)
- firmware: arm_ffa: Skip Rx buffer ownership release if not acquired (Sudeep Holla)
- firmware: arm_scmi: Balance device refcount when destroying devices (Cristian Marussi)
- drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change (Niranjana Vishwanathapura)
- sch_ets: make est_qlen_notify() idempotent (Cong Wang)
- sch_qfq: make qfq_qlen_notify() idempotent (Cong Wang)
- sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang)
- sch_drr: make drr_qlen_notify() idempotent (Cong Wang)
- sch_htb: make htb_qlen_notify() idempotent (Cong Wang)
- accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW (Karol Wachowski)
- accel/ivpu: Fix locking order in ivpu_job_submit (Karol Wachowski)
- accel/ivpu: Abort all jobs after command queue unregister (Karol Wachowski)
- accel/ivpu: Update VPU FW API headers (Andrzej Kacprowski)
- accel/ivpu: Fix a typo (Andrew Kreimer)
- accel/ivpu: Use xa_alloc_cyclic() instead of custom function (Karol Wachowski)
- accel/ivpu: Make DB_ID and JOB_ID allocations incremental (Tomasz Rusinowicz)
- net: Fix the devmem sock opts and msgs for parisc (Pranjal Shrivastava)
- bcachefs: Remove incorrect __counted_by annotation (Alan Huang)
- mm, slab: clean up slab->obj_exts always (Zhenhua Huang)
- net: vertexcom: mse102x: Fix RX error handling (Stefan Wahren)
- net: vertexcom: mse102x: Add range check for CMD_RTS (Stefan Wahren)
- net: vertexcom: mse102x: Fix LEN_MASK (Stefan Wahren)
- net: vertexcom: mse102x: Fix possible stuck of SPI interrupt (Stefan Wahren)
- net: hns3: defer calling ptp_clock_register() (Jian Shen)
- net: hns3: fixed debugfs tm_qset size (Hao Lan)
- net: hns3: fix an interrupt residual problem (Yonglong Liu)
- net: hns3: store rx VLAN tag offload state for VF (Jian Shen)
- octeon_ep: Fix host hang issue during device reboot (Sathesh B Edara)
- net: fec: ERR007885 Workaround for conventional TX (Mattias Barthel)
- net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan)
- ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations (Sagi Maimon)
- net: use sock_gen_put() when sk_state is TCP_TIME_WAIT (Jibin Zhang)
- bnxt_en: fix module unload sequence (Vadim Fedorenko)
- ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction (Alexander Stein)
- nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS (Alistair Francis)
- nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS (Alistair Francis)
- nvme-tcp: fix premature queue removal and I/O failover (Michael Liang)
- bnxt_en: Fix ethtool -d byte order for 32-bit values (Michael Chan)
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab)
- bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab)
- bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Kashyap Desai)
- bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Somnath Kotur)
- bnxt_en: Fix ethtool selftest output in one of the failure cases (Kalesh AP)
- bnxt_en: Fix error handling path in bnxt_init_chip() (Shravya KN)
- ALSA: hda/realtek: Fix built-mic regression on other ASUS models (Takashi Iwai)
- net: ipv6: fix UDPv6 GSO segmentation with NAT (Felix Fietkau)
- net: dsa: felix: fix broken taprio gate states after clock jump (Vladimir Oltean)
- net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM (Chad Monroe)
- igc: fix lock order in igc_ptp_reset (Jacob Keller)
- idpf: protect shutdown from reset (Larysa Zaremba)
- idpf: fix potential memory leak on kcalloc() failure (Michal Swiatkowski)
- net: mdio: mux-meson-gxl: set reversed bit when using internal phy (Da Xue)
- net: dlink: Correct endianness handling of led_mode (Simon Horman)
- drm/mipi-dbi: Fix blanking for non-16 bit formats (Russell Cloran)
- drm/tests: shmem: Fix memleak (Maxime Ripard)
- nvme-pci: fix queue unquiesce check on slot_reset (Keith Busch)
- ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (Takashi Iwai)
- scsi: ufs: core: Remove redundant query_complete trace (Keoseong Park)
- idpf: fix offloads support for encapsulated packets (Madhu Chittim)
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Xuanqiang Luo)
- net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira)
- net_sched: ets: Fix double list add in class with netem as child qdisc (Victor Nogueira)
- net_sched: