diff --git a/COPYING-5.14.0-611.54.6.el9 b/COPYING-5.14.0-611.55.1.el9 similarity index 100% rename from COPYING-5.14.0-611.54.6.el9 rename to COPYING-5.14.0-611.55.1.el9 diff --git a/Makefile.rhelver b/Makefile.rhelver index 89455b77bc..f4c77bf9ac 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 7 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 611.54.1 +RHEL_RELEASE = 611.55.1 # # ZSTREAM diff --git a/net/ipv4/ip_output.c b/net/ipv4/ip_output.c index a92c54d6d4..a6506a81b8 100644 --- a/net/ipv4/ip_output.c +++ b/net/ipv4/ip_output.c @@ -1467,6 +1467,7 @@ ssize_t ip_append_page(struct sock *sk, struct flowi4 *fl4, struct page *page, err = -EMSGSIZE; goto error; } + if (!(flags & MSG_NO_SHARED_FRAGS)) skb_shinfo(skb)->flags |= SKBFL_SHARED_FRAG; diff --git a/redhat/kernel.changelog-9.7 b/redhat/kernel.changelog-9.7 index b7f0bf698f..70e1f6aba6 100644 --- a/redhat/kernel.changelog-9.7 +++ b/redhat/kernel.changelog-9.7 @@ -1,3 +1,7 @@ +* Sat May 09 2026 CKI KWF Bot [5.14.0-611.55.1.el9_7] +- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174561] {CVE-2026-43284} +Resolves: RHEL-174561 + * Sat May 02 2026 CKI KWF Bot [5.14.0-611.54.1.el9_7] - crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172201] - crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172201]