From f872645875afa2b94f7f88428b708f3b8944bf95 Mon Sep 17 00:00:00 2001 From: AlmaLinux RelEng Bot Date: Thu, 20 Aug 2026 00:35:13 -0400 Subject: [PATCH] import CS git kernel-rt-4.18.0-553.157.1.rt7.498.el8_10 --- .gitignore | 2 +- .kernel-rt.metadata | 2 +- SPECS/kernel.spec | 23 ++++++++++++++++++++--- 3 files changed, 22 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index bf981cc..7d30aa8 100644 --- a/.gitignore +++ b/.gitignore @@ -1,6 +1,6 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer -SOURCES/linux-4.18.0-553.156.1.rt7.497.el8_10.tar.xz +SOURCES/linux-4.18.0-553.157.1.rt7.498.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel-rt.metadata b/.kernel-rt.metadata index 07725e4..c9a2cd1 100644 --- a/.kernel-rt.metadata +++ b/.kernel-rt.metadata @@ -1,6 +1,6 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -4e15c5babc0f3bd2cd3c14dd731ac608742148f3 SOURCES/linux-4.18.0-553.156.1.rt7.497.el8_10.tar.xz +f0bc6c797e67e95cf0c118f978ee133469ecf4f1 SOURCES/linux-4.18.0-553.157.1.rt7.498.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 3adf37f..f2c063b 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.156.1.rt7.497.el8_10 +%define pkgrelease 553.157.1.rt7.498.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.156.1.rt7.497%{?dist} +%define specrelease 553.157.1.rt7.498%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -161,7 +161,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .497 +%global rtbuild .498 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2800,6 +2800,23 @@ fi # # %changelog +* Wed Aug 19 2026 CKI KWF Bot [4.18.0-553.157.1.rt7.498.el8_10] +- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} +- mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] +- mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] +- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} +- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} +- cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] +- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] +- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} +- sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] +- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] +- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} +- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} +- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} +- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} +- ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} + * Mon Aug 17 2026 CKI KWF Bot [4.18.0-553.156.1.rt7.497.el8_10] - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219}