From 304e386c6b272525298ddd4eeaec4f86198c2b10 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Mon, 17 Aug 2026 00:30:04 +0000 Subject: [PATCH] kernel-rt-4.18.0-553.156.1.rt7.497.el8_10 * Mon Aug 17 2026 CKI KWF Bot [4.18.0-553.156.1.rt7.497.el8_10] - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} Resolves: RHEL-188453, RHEL-189997, RHEL-216711, RHEL-221327, RHEL-222576, RHEL-222620, RHEL-222656, RHEL-222662, RHEL-222680, RHEL-222738, RHEL-224556, RHEL-226551 Signed-off-by: CKI KWF Bot --- kernel.spec | 29 ++++++++++++++++++++++++++--- sources | 2 +- 2 files changed, 27 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index 46c49b0..3adf37f 100644 --- a/kernel.spec +++ b/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.155.1.rt7.496.el8_10 +%define pkgrelease 553.156.1.rt7.497.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.155.1.rt7.496%{?dist} +%define specrelease 553.156.1.rt7.497%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -161,7 +161,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .496 +%global rtbuild .497 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2800,6 +2800,29 @@ fi # # %changelog +* Mon Aug 17 2026 CKI KWF Bot [4.18.0-553.156.1.rt7.497.el8_10] +- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} +- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} +- drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} +- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} +- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} +- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} +- mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} +- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} +- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] +- can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] +- sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] +- sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] +- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} + * Wed Aug 12 2026 CKI KWF Bot [4.18.0-553.155.1.rt7.496.el8_10] - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} diff --git a/sources b/sources index c8d155f..db46238 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (linux-4.18.0-553.155.1.rt7.496.el8_10.tar.xz) = bc9a23f7dffa4d7335506cb58ddf99350d9ff79a71c3d0b45d6cc9ee1e79d070d9acf0c24ee36d00fca5bb139af625055b03baa5a021f6422f4516733e285f5d +SHA512 (linux-4.18.0-553.156.1.rt7.497.el8_10.tar.xz) = 36cc5fddfa71608ba4f25b453aba6f228b1eb1891cccc7ea536bb8fa86142ac06f64a4b809dc40b09b2d9fb5ccf0efcaaa74deaf9313f1592d063796a80756ab