From 0a6b382280ac3a496640f2e93e28eb8e4c857fb9 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Tue, 28 Jul 2026 06:58:18 +0000 Subject: [PATCH] kernel-rt-4.18.0-553.149.1.rt7.490.el8_10 * Tue Jul 28 2026 CKI KWF Bot [4.18.0-553.149.1.rt7.490.el8_10] - rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} - fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} Resolves: RHEL-172526, RHEL-180075 Signed-off-by: CKI KWF Bot --- kernel.spec | 19 ++++++++++++++++--- sources | 2 +- 2 files changed, 17 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index 318d430..695dd8d 100644 --- a/kernel.spec +++ b/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.148.1.rt7.489.el8_10 +%define pkgrelease 553.149.1.rt7.490.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.148.1.rt7.489%{?dist} +%define specrelease 553.149.1.rt7.490%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -159,7 +159,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .489 +%global rtbuild .490 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2726,6 +2726,19 @@ fi # # %changelog +* Tue Jul 28 2026 CKI KWF Bot [4.18.0-553.149.1.rt7.490.el8_10] +- rtnetlink: add missing netlink_ns_capable() check for peer netns (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- rtnetlink: Try the outer netns attribute in rtnl_get_peer_net(). (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- rtnetlink: fix double call of rtnl_link_get_net_ifla() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- vxcan: Set VXCAN_INFO_PEER to vxcan_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- veth: Set VETH_INFO_PEER to veth_link_ops.peer_type. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- rtnetlink: Add peer_type in struct rtnl_link_ops. (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- net: validate veth and vxcan peer ifindexes (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- rtnl: move rtnl_newlink_create() (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- rtnl: split __rtnl_newlink() into two functions (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- rtnl: allocate more attr tables on the heap (Guillaume Nault) [RHEL-172526] {CVE-2026-31692} +- fanotify: fix false positive on permission events (Miklos Szeredi) [RHEL-180075] {CVE-2026-46150} + * Mon Jul 27 2026 CKI KWF Bot [4.18.0-553.148.1.rt7.489.el8_10] - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006} diff --git a/sources b/sources index 3980174..42a692f 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (linux-4.18.0-553.148.1.rt7.489.el8_10.tar.xz) = 4b3ebb4032aae08e5103b5523fe9f5297409cde5d92eed9dec9a3bc07ef2f44f16e6b79282e3f826bb7402943518c96544dbba20b56bcf571961f8be6a509bd0 +SHA512 (linux-4.18.0-553.149.1.rt7.490.el8_10.tar.xz) = acb029a110ca39f9a19a30341ee4e558856d7fcf41a3863da8736ef8169ee127f9a9290783b849be9cfc01bf340fc0e1d8281a74645aa1a3b1bec3166ee6eea6