Lenovo Thinkpad X1 Carbon (Gen 12)

[apparatus]

@slchris

Maybe I can try upgrading to a 6.8 kernel using the xe driver and try again.

You can try to install kernel-latest from current-testing Qubes OS repository using tty.
Download the kernel package from another system:
https://yum.qubes-os.org/r4.2/current-testing/dom0/fc37/rpm/kernel-latest-6.8.8-1.qubes.fc37.x86_64.rpm
Mount your Qubes OS root in another system or from offline Live OS and move the package to dom0.
Boot into Qubes OS and in tty verify package signature like this:

rpm -K /path/to/kernel-latest-6.8.8-1.qubes.fc37.x86_64.rpm

Anyone got an AppVM or Debian standalone solution for Mullvad VPN?

you cannot just verify the file with gpg commands because the signature is not of the entire .rpm file. Instead, the signature is only associated with the critical portions of the package. Use the right tool: rpm --import KEY rpm -K PACKAGE The output should show SIGNATURES OK Alternatively, rpm -qi PACKAGE will show the key used to sign the package. On the Signature line you should see Key ID fdd1b8244731b36c for my packages, as explained here I never presume to speak for the Qubes …

Then install it:

rpm -i /path/to/kernel-latest-6.8.8-1.qubes.fc37.x86_64.rpm