kernel/config/6.18: bump yocto-cfg-fragments for netfilter fixes

bumping to pickup the following change:

  commit af4e4301c12e98dc03b8827a44eb29786c1a61a6 (HEAD -> yocto-6.18, origin/yocto-6.18)
  Author: Bruce Ashfield <bruce.ashfield@gmail.com>
  Date:   Mon Jan 5 09:41:06 2026 -0500

      config/netfilter: migrate from legacy NF to NETFILTER_XT_TARGET_MASQUERADE

        - 9fce66583f06c212 ("netfilter: Exclude LEGACY TABLES on PREEMPT_RT.")
           adds NETFILTER_XTABLES_LEGACY and switches the iptables legacy options
           (IP_NF_IPTABLES_LEGACY, IP_NF_NAT, IP6_NF_NAT, IP_NF_TARGET_MASQUERADE,
           etc.) from select to depends on it in net/ipv4/netfilter/Kconfig and
           net/ipv6/netfilter/Kconfig.

      If NETFILTER_XTABLES_LEGACY is left unset, IP_NF_TARGET_MASQUERADE
      becomes unreachable and no longer auto-selects NETFILTER_XT_TARGET_MASQUERADE,
      so the xt_MASQUERADE module vanishes.

        - 25a8b88f000c33a1 ("netfilter: add back NETFILTER_XTABLES dependencies")
          restores depends on NETFILTER_XTABLES for those legacy symbols but keeps
          the new NETFILTER_XTABLES_LEGACY gate in the same Kconfig files.

      Effect: after these patches in the 6.18 cycle, keeping kernel-module-xt-masquerade
      without enabling the legacy iptables stack requires setting
      CONFIG_NETFILTER_XT_TARGET_MASQUERADE directly (as in your fix) or turning on
      NETFILTER_XTABLES_LEGACY in the config.

      Solution: for now, we just enable NETFILTER_XT_TARGET_MASQUERADE to fix a
                specific error, and will start the migration of all the legacy
                options to their new options. If breakage becomes widespread,
                we'll enable NETFILTER_XTABLES_LEGACY.

This avoids a build error in xen-image-minimal due to missing kernel
module packages.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/recipes-kernel/linux/yocto-cfg-fragments-6.18.bb b/recipes-kernel/linux/yocto-cfg-fragments-6.18.bb
index 5d41186e..2b051891 100644
--- a/recipes-kernel/linux/yocto-cfg-fragments-6.18.bb
+++ b/recipes-kernel/linux/yocto-cfg-fragments-6.18.bb
@@ -15,7 +15,7 @@ INHIBIT_DEFAULT_DEPS = "1"
 LINUX_VERSION ?= "6.18"
 PV = "v${LINUX_VERSION}+git${SRCREV}"
 
-SRCREV = "f4a44299f4519c9ee5c06c12ceaa2a214290490e"
+SRCREV = "af4e4301c12e98dc03b8827a44eb29786c1a61a6"
 SRC_URI = "\
         git://git.yoctoproject.org/yocto-kernel-cache;branch=yocto-${LINUX_VERSION} \
         "