From 758ce6231d4d2e540122f7dac436bd6476a0ac56 Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Mon, 18 May 2026 15:23:57 +0200 Subject: [PATCH] kernel-rt-4.18.0-553.125.1.rt7.466.el8_10 * Mon May 18 2026 Denys Vlasenko [4.18.0-553.125.1.rt7.466.el8_10] - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} Resolves: RHEL-176090, RHEL-176445 Signed-off-by: Denys Vlasenko --- kernel.spec | 11 ++++++++--- sources | 2 +- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/kernel.spec b/kernel.spec index 3def007..5cc58b8 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.124.1.rt7.465.el8_10 +%define pkgrelease 553.125.1.rt7.466.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.124.1.rt7.465%{?dist} +%define specrelease 553.125.1.rt7.466%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -148,7 +148,7 @@ # The preempt RT patch level %global rttag .rt7 # realtimeN -%global rtbuild .465 +%global rtbuild .466 %define with_doc 0 %define with_headers 0 %define with_cross_headers 0 @@ -2710,6 +2710,11 @@ fi # # %changelog +* Mon May 18 2026 Denys Vlasenko [4.18.0-553.125.1.rt7.466.el8_10] +- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} +- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300} +- ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333} + * Mon May 11 2026 Denys Vlasenko [4.18.0-553.124.1.rt7.465.el8_10] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284} diff --git a/sources b/sources index e2393c0..0910ab4 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (linux-4.18.0-553.124.1.rt7.465.el8_10.tar.xz) = b3ca28a0acc77d3620420a2a1ce4c1d48f90839543a5b04158cd0faab410840daaf0ca12eeaf6829afa9c6b0fb8821b1ff6e88996ae24921e7cf98cd88873007 +SHA512 (linux-4.18.0-553.125.1.rt7.466.el8_10.tar.xz) = b4005556a7bb57e7812f69283a8aca5c596eac3eed5a20639a4f965c99d49469dd2f683d9d1aa7c32fc06e4d830d5a832d215d56eab68b68fcd9ef8a9f27efe2