To be applied directly on top of stable version v6.8.3. Applies the following changes:
- 0fdf693
ZEN: Add sysctl and CONFIG to disallow unprivileged CLONE_NEWUSER - d553738
drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set - 2c7219f
arch/Kconfig: Default to maximum amount of ASLR bits - 23e44fb
xen-netfront: Add missing skb_mark_for_recycle - de78d6b
Arch Linux kernel v6.8.3-arch1