Important: kernel security, bug fix, and enhancement update (Oracle Linux 10)

[6.12.0-211.62.1]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985782]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
- Update module name for cryptographic module [Orabug: 37400433]
- Clean git history at setup stage

[6.12.0-211.62.1]
- dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257773] {CVE-2026-72099}
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CKI Backport Bot) [RHEL-230992] {CVE-2026-64034}
- gve: fix Rx queue stall on alloc failure (Michal Schmidt) [RHEL-219261]
- gve: fix header buffer corruption with header-split and HW-GRO (Michal Schmidt) [RHEL-219261]
- gve: Use generic power management (Michal Schmidt) [RHEL-219261]
- gve: add support for UDP GSO for DQO format (Michal Schmidt) [RHEL-219261]
- gve: Enable hw-gro by default if device supported (Michal Schmidt) [RHEL-219261]
- gve: pull network headers into skb linear part (Michal Schmidt) [RHEL-219261]
- gve: fix SW coalescing when hw-GRO is used (Michal Schmidt) [RHEL-219261]
- gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO (Michal Schmidt) [RHEL-219261]
- gve: Enable reading max ring size from the device in DQO-QPL mode (Michal Schmidt) [RHEL-219261]
- gve: Update QPL page registration logic (Michal Schmidt) [RHEL-219261]
- gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (Michal Schmidt) [RHEL-219261]
- gve: Correct ethtool rx_dropped calculation (Michal Schmidt) [RHEL-219261]
- gve: Fix stats report corruption on queue count change (Michal Schmidt) [RHEL-219261]
- gve: fix probe failure if clock read fails (Michal Schmidt) [RHEL-219261]
- net: gve: convert to use .get_rx_ring_count (Michal Schmidt) [RHEL-219261]
- gve: defer interrupt enabling until NAPI registration (Michal Schmidt) [RHEL-219261]
- gve: Move gve_init_clock to after AQ CONFIGURE_DEVICE_RESOURCES call (Michal Schmidt) [RHEL-219261]
- gve: Fix race condition on tx->dropped_pkt update (Michal Schmidt) [RHEL-219261]
- gve: Add Rx HWTS metadata to AF_XDP ZC mode (Michal Schmidt) [RHEL-219261]
- gve: Prepare bpf_xdp_metadata_rx_timestamp support (Michal Schmidt) [RHEL-219261]
- gve: Wrap struct xdp_buff (Michal Schmidt) [RHEL-219261]
- gve: Move ptp_schedule_worker to gve_init_clock (Michal Schmidt) [RHEL-219261]
- gve: Default to max_rx_buffer_size for DQO if device supported (Michal Schmidt) [RHEL-219261]
- gve: Allow ethtool to configure rx_buf_len (Michal Schmidt) [RHEL-219261]
- gve: Use extack to log xdp config verification errors (Michal Schmidt) [RHEL-219261]
- gve: Decouple header split from RX buffer length (Michal Schmidt) [RHEL-219261]
- gve: Implement settime64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261]
- gve: Implement gettimex64 with -EOPNOTSUPP (Michal Schmidt) [RHEL-219261]
- gve: Consolidate and persist ethtool ring changes (Michal Schmidt) [RHEL-219261]
- gve: Check valid ts bit on RX descriptor before hw timestamping (Michal Schmidt) [RHEL-219261]
- gve: prevent ethtool ops after shutdown (Michal Schmidt) [RHEL-219261]
- gve: implement DQO RX datapath and control path for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261]
- gve: implement DQO TX datapath for AF_XDP zero-copy (Michal Schmidt) [RHEL-219261]
- gve: keep registry of zc xsk pools in netdev_priv (Michal Schmidt) [RHEL-219261]
- gve: merge xdp and xsk registration (Michal Schmidt) [RHEL-219261]
- gve: deduplicate xdp info and xsk pool registration logic (Michal Schmidt) [RHEL-219261]
- gve: Fix stuck TX queue for DQ queue format (Michal Schmidt) [RHEL-219261]
- gve: make IRQ handlers and page allocation NUMA aware (Michal Schmidt) [RHEL-219261]
- gve: global: fix 'for a while' typo (Michal Schmidt) [RHEL-219261]
- gve: add XDP_TX and XDP_REDIRECT support for DQ RDA (Michal Schmidt) [RHEL-219261]
- gve: refactor DQO TX methods to be more generic for XDP (Michal Schmidt) [RHEL-219261]
- gve: rename gve_xdp_xmit to gve_xdp_xmit_gqi (Michal Schmidt) [RHEL-219261]
- gve: Return error for unknown admin queue command (Michal Schmidt) [RHEL-219261]
- gve: Fix various typos and improve code comments (Michal Schmidt) [RHEL-219261]
- gve: Advertise support for rx hardware timestamping (Michal Schmidt) [RHEL-219261]
- gve: Implement ndo_hwtstamp_get/set for RX timestamping (Michal Schmidt) [RHEL-219261]
- gve: Add rx hardware timestamp expansion (Michal Schmidt) [RHEL-219261]
- gve: Add support to query the nic clock (Michal Schmidt) [RHEL-219261]
- gve: Add adminq lock for queues creation and destruction (Michal Schmidt) [RHEL-219261]
- gve: Add initial PTP device support (Michal Schmidt) [RHEL-219261]
- gve: Add adminq command to report nic timestamp (Michal Schmidt) [RHEL-219261]
- gve: Add device option for nic clock synchronization (Michal Schmidt) [RHEL-219261]
- gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Michal Schmidt) [RHEL-219261]
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Michal Schmidt) [RHEL