From 2ae2e87bb33fb88b876dfdd7376b7cd12d446141 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Sat, 31 Jan 2026 05:20:45 +0000 Subject: [PATCH] kernel-rt-4.18.0-553.102.1.rt7.443.el8_10 * Sat Jan 31 2026 CKI KWF Bot [4.18.0-553.102.1.rt7.443.el8_10] - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] - audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] - lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] - lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] - lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] - lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} - net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] - ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] Resolves: RHEL-121683, RHEL-128966, RHEL-129004, RHEL-129079, RHEL-140776, RHEL-144327 Signed-off-by: CKI KWF Bot --- kernel.spec | 25 ++++++++++++++++++++++--- sources | 2 +- 2 files changed, 23 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index 0fc21a6..aeaef18 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.101.1.rt7.442.el8_10 +%define pkgrelease 553.102.1.rt7.443.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.101.1.rt7.442%{?dist} +%define specrelease 553.102.1.rt7.443%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .442 +%global rtbuild .443 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2708,6 +2708,25 @@ fi # # %changelog +* Sat Jan 31 2026 CKI KWF Bot [4.18.0-553.102.1.rt7.443.el8_10] +- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998} +- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683] +- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776] +- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776] +- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776] +- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776] +- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776] +- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170} +- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135} +- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158} +- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966] +- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966] +- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966] +- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766} +- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966] +- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966] +- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966] + * Thu Jan 29 2026 CKI KWF Bot [4.18.0-553.101.1.rt7.442.el8_10] - i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878] - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349} diff --git a/sources b/sources index e68c992..3bd09f3 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (linux-4.18.0-553.101.1.rt7.442.el8_10.tar.xz) = d9fab2566044fe0fbf869a5d884a13c0319977479c6af1da2ce1b753cf62218cdf1d172371ed347f9eb09f8cbc99b9bf8280f58b9f54c5ae02cbf38dc97f40d7 +SHA512 (linux-4.18.0-553.102.1.rt7.443.el8_10.tar.xz) = ca3b3de4f3bc0aa94e0e1b8ea17289572e3f725bc1ee7d00942e1c99d6a4105cd1af70fa3af36419cc35e4981b327fd962af9377a7b60e989c2c911bbd44e273