[16.0-stable] Kernel update - [amd64-rt, amd64-generic, amd64-generic, arm64-generic, arm64-generic, arm64-nvidia-jp7, riscv64-generic]

[christoph-zededa]

Description

Backport of #6180

Stable-branch counterpart of #6180 for 16.0-stable. This is not a cherry-pick: kernel-commits.mk was re-generated with tools/update_kernel_commits.py against the kernel set used by this branch, and amd64 moves to the new eve-kernel-amd64-v6.12.96-generic branch (kernel-version.mk bumped from v6.12.49 to v6.12.96).

Updated pins used by builds from this branch:

eve-kernel branch	old	new	notable changes
eve-kernel-amd64-v6.12.49-generic → eve-kernel-amd64-v6.12.96-generic	465d242734dc	bfc617435842	upstream stable Linux 6.12.49 → 6.12.96, which already contains both KVM shadow-paging use-after-free fixes and the af_alg CVE-2026-31431 fix this branch carried as backports; the EVE patch stack was rebased onto 6.12.96 and keeps KVM emulation of guest access to disabled passthrough BARs (instead of -EFAULT) and the vfio BAR-resource setup change; the linuxkit tmpdir tooling fix is not on the new branch
eve-kernel-arm64-v6.1.155-generic	da7d6950689c	417a12ac3d50	2x KVM shadow-paging use-after-free fixes; Raspberry Pi 5 enablement (NVMe configs, RP1 PWM driver, SPI, bcm2712-mip irqchip/PCI); linuxkit tmpdir tooling fix
eve-kernel-riscv64-v6.1.112-generic	30aa75d58cdd	bd5816893ca9	2x KVM shadow-paging use-after-free fixes, linuxkit tmpdir tooling fix

amd64-next (used for the evaluation platform HWE/LTS image), nvidia-jp5 and nvidia-jp6 pins are unchanged. A second commit then drops the four pins that no supported ZARCH/PLATFORM combination on this branch can select — amd64-v6.1.111-rt (rt is a config flavor here, not a branch flavor), amd64-v6.1.177-generic (amd64 builds v6.12.96), arm64-v6.1.112-generic (arm64 generic is v6.1.155) and arm64-v6.8.12-nvidia-jp7 (no jp7 platform on this branch) — leaving kernel-commits.mk with only the six kernels this branch actually builds. Every supported ZARCH/PLATFORM combination still resolves to a defined pin. Full per-branch changelogs are in the commit message.

Docker Hub images for the new pins were verified to exist, including the amd64 core, rt and hwe config flavors.

How to test and validate this PR

• The PR gate builds the supported ZARCH/PLATFORM combinations against the new pins, which validates that the pinned kernel images are pullable and usable.
• Local validation: make live && make run-live; the device should boot normally and uname -r inside EVE reports a kernel version string containing the new short commit hash of the pinned kernel.
• The KVM shadow-paging fixes are exercised by deploying/booting any VM app instance; make eden TEST_SMOKE=1 covers app-instance deployment end to end. The disabled-BAR emulation fix matters for PCI passthrough of devices with disabled BARs (previously surfaced as guest crashes / -EFAULT).

Changelog notes

Kernel update for amd64, arm64 and riscv64: the amd64 kernel moves to upstream stable Linux 6.12.96 (from 6.12.49), two KVM x86 shadow-paging use-after-free fixes, KVM now emulates guest access to disabled passthrough PCI BARs instead of failing, and Raspberry Pi 5 hardware enablement on arm64.

PR Backports

Not applicable — this PR targets the 16.0-stable branch (stable-branch counterpart of #6180).

Checklist

• I've provided a proper description
• I've added the proper documentation
• I've tested my PR on amd64 device
• I've tested my PR on arm64 device
• I've written the test verification instructions
• I've set the proper labels to this PR

For backport PRs (remove it if it's not a backport):

• I've added a reference link to the original PR
• PR's title follows the template

And the last but not least:

• I've checked the boxes above, or I've provided a good reason why I didn't
  check them: no documentation changes are needed for a kernel pin bump; device testing is pending while this PR is in draft (CI + QA validation to follow).

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 23.55%. Comparing base (9f69150) to head (f3fd641).
⚠️ Report is 138 commits behind head on 16.0-stable.

Additional details and impacted files

@@               Coverage Diff               @@
##           16.0-stable    #6183      +/-   ##
===============================================
+ Coverage        19.52%   23.55%   +4.02%     
===============================================
  Files               19       19              
  Lines             3021     2509     -512     
===============================================
+ Hits               590      591       +1     
+ Misses            2310     1787     -523     
- Partials           121      131      +10     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[rene]

You need to fix arm64 version as well and completely remove the versions we will not use from kernel-commits.mk

[christoph-zededa]

The arm64 version is still 6.1.155, isn't it?

I cleaned up the unused versions from kernel-commits.mk.

[eriknordmark]

LGTM