To be applied directly on top of stable version v6.11.5. Applies the following changes:
- 348bc07
ZEN: Add sysctl and CONFIG to disallow unprivileged CLONE_NEWUSER - 25f05cb
arch/Kconfig: Default to maximum amount of ASLR bits - eb79c5c
drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set - a953a92
netfilter: xtables: fix a bunch of typos causing some targets to not load on IPv6 - a35721f
Arch Linux kernel v6.11.5-arch1