From 096a17aff467d6ac3b5cc6a1ddc0ae39dc578437 Mon Sep 17 00:00:00 2001 From: AlmaLinux RelEng Bot Date: Fri, 24 Jul 2026 07:03:45 -0400 Subject: [PATCH] import CS git kernel-4.18.0-553.147.1.el8_10 --- .gitignore | 2 +- .kernel.metadata | 6 +++--- SPECS/kernel.spec | 28 ++++++++++++++++++++++++++-- 3 files changed, 30 insertions(+), 6 deletions(-) diff --git a/.gitignore b/.gitignore index 2f338a088..f15eecef1 100644 --- a/.gitignore +++ b/.gitignore @@ -2,7 +2,7 @@ SOURCES/centossecureboot201.cer SOURCES/centossecurebootca2.cer SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -SOURCES/linux-4.18.0-553.146.1.el8_10.tar.xz +SOURCES/linux-4.18.0-553.147.1.el8_10.tar.xz SOURCES/redhatsecureboot302.cer SOURCES/redhatsecureboot303.cer SOURCES/redhatsecureboot501.cer diff --git a/.kernel.metadata b/.kernel.metadata index af42955d7..8aa080868 100644 --- a/.kernel.metadata +++ b/.kernel.metadata @@ -1,8 +1,8 @@ 2ba40bf9138b48311e5aa1b737b7f0a8ad66066f SOURCES/centossecureboot201.cer bfdb3d7cffc43f579655af5155d50c08671d95e5 SOURCES/centossecurebootca2.cer -239540287fede87369c95623ba5425099a185579 SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 -8b7b84fc01f702583728256b137c0aac5ecb9a57 SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 -6a24e5d9ba1d08d8d38695202f8da615a6c1c792 SOURCES/linux-4.18.0-553.146.1.el8_10.tar.xz +f619221c0fe85a63119bed851c4abda1bf1bba2c SOURCES/kernel-abi-stablelists-4.18.0-553.tar.bz2 +af1fc8b7f0752d2d5e1806ebcacfc747429811ff SOURCES/kernel-kabi-dw-4.18.0-553.tar.bz2 +250c4750042f67642280fefd9e671758915ab609 SOURCES/linux-4.18.0-553.147.1.el8_10.tar.xz 13e5cd3f856b472fde80a4deb75f4c18dfb5b255 SOURCES/redhatsecureboot302.cer e89890ca0ded2f9058651cc5fa838b78db2e6cc2 SOURCES/redhatsecureboot303.cer ba0b760e594ff668ee72ae348adf3e49b97f75fb SOURCES/redhatsecureboot501.cer diff --git a/SPECS/kernel.spec b/SPECS/kernel.spec index 9a25240b2..cac18b2a0 100644 --- a/SPECS/kernel.spec +++ b/SPECS/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.146.1.el8_10 +%define pkgrelease 553.147.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.146.1%{?dist} +%define specrelease 553.147.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2723,6 +2723,30 @@ fi # # %changelog +* Thu Jul 23 2026 CKI KWF Bot [4.18.0-553.147.1.el8_10] +- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807} +- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341] +- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341] +- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341] +- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341] +- KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341] +- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026} +- KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228] +- KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228] +- KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228] +- KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228] +- serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191] +- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993} +- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324] +- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059} +- xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174] +- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738] +- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738] +- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738] +- mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655] +- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655] +- mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655] + * Mon Jul 20 2026 CKI KWF Bot [4.18.0-553.146.1.el8_10] - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (Gaurav Goklani) [RHEL-180153] {CVE-2026-46117} - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Herton R. Krzesinski) [RHEL-174916]