From 06bd8950225e657263cc1a1a7c10798bd8b07533 Mon Sep 17 00:00:00 2001 From: AlmaLinux RelEng Bot Date: Sun, 5 Apr 2026 22:40:07 -0400 Subject: [PATCH] import CS git kernel-4.18.0-553.117.1.el8_10 --- .gitignore | 2 +- .kernel.metadata | 6 +++--- SPECS/kernel.spec | 51 +++++++++++++++++++++++++++++++++++++++++++++-- 3 files changed, 53 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index 9e04ea511..3142ed8a2 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.115.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.117.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index 65ff2c2a7..e4af1ebf8 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -3a7753bd9eb85fc857fb3a273c22d028ad150c7a SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 -6738c144ce107a2e5dc463a1e1d2a7270f9557e1 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -a1aa757d2cb37b87b612c407fb5a5c83a7e463bc SOURCES/linux-4.18.0-553.115.1.el8_10.tar.xz +e5fac5a58d81817f9abf876b5737ea2099069875 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +518a38408b3bcf6d6d49e6e962832c665d6e5a85 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 +a1744b2de48d20fa04193c188bf1fcf81de1c5eb SOURCES/linux-4.18.0-553.117.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 0419d4234..baebdaf67 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.115.1.el8_10 +%define pkgrelease 553.117.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.115.1%{?dist} +%define specrelease 553.117.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2705,6 +2705,53 @@ fi # # %changelog +* Fri Mar 27 2026 CKI KWF Bot [4.18.0-553.117.1.el8_10] +- nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436] +- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193} + +* Wed Mar 25 2026 CKI KWF Bot [4.18.0-553.116.1.el8_10] +- nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} +- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] +- NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] +- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] +- pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] +- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] +- NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] +- flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] +- pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] +- NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] +- NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] +- pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] +- pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] +- NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] +- NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] +- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] +- SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] +- NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] +- SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] +- SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] +- SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] +- SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] +- NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] +- NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] +- nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] +- pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] +- NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] +- NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] +- NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] +- NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] +- NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] +- NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] +- NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] +- NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] +- NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] +- nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] +- nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] +- nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] +- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} +- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} +- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] + * Mon Mar 23 2026 CKI KWF Bot [4.18.0-553.115.1.el8_10] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}