From 6922a06e4a863e07d78d71710b23b95afb7a6d43 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Mon, 31 Aug 2026 14:57:01 +0000 Subject: [PATCH] kernel-rt-4.18.0-553.159.1.rt7.500.el8_10 * Mon Aug 31 2026 CKI KWF Bot [4.18.0-553.159.1.rt7.500.el8_10] - net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} - powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] - powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] - RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} - nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} - NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} - pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} - nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} - x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} - x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] - x86/entry: Unify definitions from and (Waiman Long) [RHEL-230492] - smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} - net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} - bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} - s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} - RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} - qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] Resolves: RHEL-191437, RHEL-193045, RHEL-219521, RHEL-225272, RHEL-225510, RHEL-226624, RHEL-227780, RHEL-228028, RHEL-228073, RHEL-229075, RHEL-229402, RHEL-230492, RHEL-231993, RHEL-234059, RHEL-240144, RHEL-246806 Signed-off-by: CKI KWF Bot --- kernel-rt-aarch64-debug.config | 2 +- kernel-rt-aarch64.config | 2 +- kernel-rt-ppc64le-debug.config | 2 +- kernel-rt-ppc64le.config | 2 +- kernel.spec | 28 +++++++++++++++++++++++++--- sources | 2 +- 6 files changed, 30 insertions(+), 8 deletions(-) diff --git a/kernel-rt-aarch64-debug.config b/kernel-rt-aarch64-debug.config index 4b28efd..fdfe47c 100644 --- a/kernel-rt-aarch64-debug.config +++ b/kernel-rt-aarch64-debug.config @@ -2459,6 +2459,7 @@ # CONFIG_ZOPT2201 is not set # CONFIG_ZPA2326 is not set # CONFIG_ZRAM_MEMORY_TRACKING is not set +# CONFIG_ZRAM_WRITEBACK is not set # CONFIG_ZX_TDM is not set CONFIG_64BIT=y CONFIG_8139CP=m @@ -5692,7 +5693,6 @@ CONFIG_ZLIB_INFLATE=y CONFIG_ZONE_DEVICE=y CONFIG_ZPOOL=y CONFIG_ZRAM=m -CONFIG_ZRAM_WRITEBACK=y CONFIG_ZSMALLOC=y CONFIG_ZSMALLOC_STAT=y CONFIG_ZSWAP=y diff --git a/kernel-rt-aarch64.config b/kernel-rt-aarch64.config index d0fd1c7..84e1ccc 100644 --- a/kernel-rt-aarch64.config +++ b/kernel-rt-aarch64.config @@ -2537,6 +2537,7 @@ # CONFIG_ZOPT2201 is not set # CONFIG_ZPA2326 is not set # CONFIG_ZRAM_MEMORY_TRACKING is not set +# CONFIG_ZRAM_WRITEBACK is not set # CONFIG_ZX_TDM is not set CONFIG_64BIT=y CONFIG_8139CP=m @@ -5666,7 +5667,6 @@ CONFIG_ZLIB_INFLATE=y CONFIG_ZONE_DEVICE=y CONFIG_ZPOOL=y CONFIG_ZRAM=m -CONFIG_ZRAM_WRITEBACK=y CONFIG_ZSMALLOC=y CONFIG_ZSMALLOC_STAT=y CONFIG_ZSWAP=y diff --git a/kernel-rt-ppc64le-debug.config b/kernel-rt-ppc64le-debug.config index 10cf7b2..454d079 100644 --- a/kernel-rt-ppc64le-debug.config +++ b/kernel-rt-ppc64le-debug.config @@ -2211,6 +2211,7 @@ # CONFIG_ZOPT2201 is not set # CONFIG_ZPA2326 is not set # CONFIG_ZRAM_MEMORY_TRACKING is not set +# CONFIG_ZRAM_WRITEBACK is not set # CONFIG_ZX_TDM is not set CONFIG_64BIT=y CONFIG_6LOWPAN=m @@ -5422,7 +5423,6 @@ CONFIG_ZLIB_INFLATE=y CONFIG_ZONE_DEVICE=y CONFIG_ZPOOL=y CONFIG_ZRAM=m -CONFIG_ZRAM_WRITEBACK=y CONFIG_ZSMALLOC=y CONFIG_ZSMALLOC_STAT=y CONFIG_ZSWAP=y diff --git a/kernel-rt-ppc64le.config b/kernel-rt-ppc64le.config index a4cd735..27ef642 100644 --- a/kernel-rt-ppc64le.config +++ b/kernel-rt-ppc64le.config @@ -2288,6 +2288,7 @@ # CONFIG_ZOPT2201 is not set # CONFIG_ZPA2326 is not set # CONFIG_ZRAM_MEMORY_TRACKING is not set +# CONFIG_ZRAM_WRITEBACK is not set # CONFIG_ZX_TDM is not set CONFIG_64BIT=y CONFIG_6LOWPAN=m @@ -5398,7 +5399,6 @@ CONFIG_ZLIB_INFLATE=y CONFIG_ZONE_DEVICE=y CONFIG_ZPOOL=y CONFIG_ZRAM=m -CONFIG_ZRAM_WRITEBACK=y CONFIG_ZSMALLOC=y CONFIG_ZSMALLOC_STAT=y CONFIG_ZSWAP=y diff --git a/kernel.spec b/kernel.spec index cb01e19..4c77e9f 100644 --- a/kernel.spec +++ b/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.158.1.rt7.499.el8_10 +%define pkgrelease 553.159.1.rt7.500.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.158.1.rt7.499%{?dist} +%define specrelease 553.159.1.rt7.500%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -161,7 +161,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .499 +%global rtbuild .500 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2800,6 +2800,28 @@ fi # # %changelog +* Mon Aug 31 2026 CKI KWF Bot [4.18.0-553.159.1.rt7.500.el8_10] +- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581} +- powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144] +- powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144] +- RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185} +- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399} +- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392} +- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298} +- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391} +- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800} +- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397} +- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480} +- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492] +- x86/entry: Unify definitions from and (Waiman Long) [RHEL-230492] +- smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} +- net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132} +- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018} +- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970} +- s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849} +- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268} +- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045] + * Mon Aug 24 2026 CKI KWF Bot [4.18.0-553.158.1.rt7.499.el8_10] - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] diff --git a/sources b/sources index 9d3f28c..7036b74 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (linux-4.18.0-553.158.1.rt7.499.el8_10.tar.xz) = a895949e72f9b0c8db2bb64b7a5f7c40d3e5a40f209fc21d5882e823c46f5c792d3f8f7f2b1643e49c99708317454d8333ad303fef6af3dc4fb21fe8c6f0ad1c +SHA512 (linux-4.18.0-553.159.1.rt7.500.el8_10.tar.xz) = 7719bccbe694ec80d94a3f4f7a0ffd67202161ff97b2ee1563d5517ab68108d6c1bb8ae45a32e412516b47a0da541b3e0a143fe9939fe2fa218a6736bb03357d