From 1544b2410dd9b564cca9a0c219a28ecb74a1ed6a Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Mon, 11 May 2026 12:58:26 +0200 Subject: [PATCH] kernel-rt-4.18.0-553.124.1.rt7.465.el8_10 * Mon May 11 2026 Denys Vlasenko [4.18.0-553.124.1.rt7.465.el8_10] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} Resolves: RHEL-174586 Signed-off-by: Denys Vlasenko --- kernel.spec | 9 ++++++--- sources | 2 +- 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index 9e5157e..3def007 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.123.1.rt7.464.el8_10 +%define pkgrelease 553.124.1.rt7.465.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.123.1.rt7.464%{?dist} +%define specrelease 553.124.1.rt7.465%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .464 +%global rtbuild .465 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2710,6 +2710,9 @@ fi # # %changelog +* Mon May 11 2026 Denys Vlasenko [4.18.0-553.124.1.rt7.465.el8_10] +- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} + * Mon May 04 2026 Denys Vlasenko [4.18.0-553.123.1.rt7.464.el8_10] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187] diff --git a/sources b/sources index 994e0ad..e2393c0 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (linux-4.18.0-553.123.1.rt7.464.el8_10.tar.xz) = 98a8cb019ec0a340ec528651d97ddc8d2df1515ea5c37927af3a38d97fc9a2a84134bcb4fda3220c42954ed6e2d263f7182ccbe16569acd25c262ce16489e426 +SHA512 (linux-4.18.0-553.124.1.rt7.465.el8_10.tar.xz) = b3ca28a0acc77d3620420a2a1ce4c1d48f90839543a5b04158cd0faab410840daaf0ca12eeaf6829afa9c6b0fb8821b1ff6e88996ae24921e7cf98cd88873007