To be applied directly on top of stable version v6.8.5. Applies the following changes:
- 613a643
ZEN: Add sysctl and CONFIG to disallow unprivileged CLONE_NEWUSER - fe48d5b
drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set - 55778d0
arch/Kconfig: Default to maximum amount of ASLR bits - f4f6c3a
Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit - 3d20ad2
gcc-plugins/stackleak: Avoid .head.text section - bf1b8d4
nouveau: fix devinit paths to only handle display on GSP. - fb4b4af
Arch Linux kernel v6.8.5-arch1