[13.4-stable] Kernel update - [amd64-next, amd64-generic, amd64-generic, arm64-nvidia-jp5, arm64-nvidia-jp6, arm64-generic, arm64-generic, arm64-nvidia-jp7, riscv64-generic]

[christoph-zededa]

Description

Backport of #6180

Stable-branch counterpart of #6180 for 13.4-stable. This is not a cherry-pick: kernel-commits.mk was re-generated with tools/update_kernel_commits.py against the kernel set used by this branch.

Updated pins used by builds from this branch:

eve-kernel branch	old	new	notable changes
eve-kernel-amd64-v6.1.112-generic → eve-kernel-amd64-v6.1.177-generic	37e63bacad34	66072f59c883	amd64 generic moves to upstream stable Linux 6.1.177 (from 6.1.112, 65 point releases) and kernel-version.mk is bumped to match; 6.1.177 already carries both KVM shadow-paging use-after-free fixes, the af_alg CVE-2026-31431 fix and the iommu/vt-d perfmon revert that this branch backported, and the EVE patch stack is otherwise unchanged (linuxkit tmpdir tooling fix included)
eve-kernel-arm64-v6.1.112-generic	34056de6ff5b	20eaad6e15a1	2x KVM shadow-paging use-after-free fixes, af_alg CVE-2026-31431 fix, module compression and network config updates
eve-kernel-riscv64-v6.1.112-generic	18e1d313b90b	bd5816893ca9	2x KVM shadow-paging use-after-free fixes, af_alg CVE-2026-31431 fix

amd64-v6.1.111-rt stays at c708a17493f1 (unchanged). The update also prunes pins of obsolete eve-kernel branches that were deleted upstream, and adds pins for branches consumed by newer EVE releases (inert on this branch). arm64 and riscv64 stay on v6.1.112: no v6.1.177 branch exists for those architectures. Full per-branch changelogs are in the commit message.

Note for reviewers: the pruned entries include KERNEL_COMMIT_arm64_v5.10.192_nvidia (the upstream eve-kernel-arm64-v5.10.192-nvidia branch was deleted), while kernel-version.mk on 13.4-stable still selects KERNEL_FLAVOR=nvidia for PLATFORM=nvidia. arm64 nvidia builds will therefore fail the defined-pin check unless that pin is kept (last value: 2758ac95f676) or the platform is retired on this branch.

How to test and validate this PR

• The PR gate builds the supported ZARCH/PLATFORM combinations against the new pins, which validates that the pinned kernel images are pullable and usable.
• Local validation: make live && make run-live; the device should boot normally and uname -r inside EVE reports a kernel version string containing the new short commit hash of the pinned kernel.
• The KVM shadow-paging fixes are exercised by deploying/booting any VM app instance; make eden TEST_SMOKE=1 covers app-instance deployment end to end.

Changelog notes

Kernel update for amd64, arm64 and riscv64: the amd64 generic kernel moves to upstream stable Linux 6.1.177 (from 6.1.112), and all architectures pick up two KVM x86 shadow-paging use-after-free fixes and the af_alg CVE-2026-31431 fix.

PR Backports

Not applicable — this PR targets the 13.4-stable branch (stable-branch counterpart of #6180).

Checklist

• I've provided a proper description
• I've added the proper documentation
• I've tested my PR on amd64 device
• I've tested my PR on arm64 device
• I've written the test verification instructions
• I've set the proper labels to this PR

For backport PRs (remove it if it's not a backport):

• I've added a reference link to the original PR
• PR's title follows the template

And the last but not least:

• I've checked the boxes above, or I've provided a good reason why I didn't
  check them: no documentation changes are needed for a kernel pin bump; device testing is pending while this PR is in draft (CI + QA validation to follow).

[christoph-zededa]

update_kernel_commits.py has removed KERNEL_COMMIT_arm64_v5.10.192_nvidia = 2758ac95f676 and KERNEL_COMMIT_arm64_v5.10.104_nvidia = 244cc5a18fa5, so I re-added it again.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 32.66%. Comparing base (8077a3d) to head (78e9a1e).
⚠️ Report is 222 commits behind head on 13.4-stable.

Additional details and impacted files

@@               Coverage Diff               @@
##           13.4-stable    #6181      +/-   ##
===============================================
+ Coverage        24.78%   32.66%   +7.88%     
===============================================
  Files                8        9       +1     
  Lines             1138     1090      -48     
===============================================
+ Hits               282      356      +74     
+ Misses             788      654     -134     
- Partials            68       80      +12     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[eriknordmark]

Same confusion here. eve-kernel branch is named eve-kernel-amd64-v6.1.112-generic and we need 6.1.177 or greater.