From 1e5277c6cd19435c9ce7c42584c3e75a23d4001e Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Wed, 19 Aug 2026 00:28:25 +0000 Subject: [PATCH] kernel-4.18.0-553.157.1.el8_10 * Wed Aug 19 2026 CKI KWF Bot [4.18.0-553.157.1.el8_10] - smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} - mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] - mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] - scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} - cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] - sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] - sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} - sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] - psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] - smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} - mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} - net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} - scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} - ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} Resolves: RHEL-180148, RHEL-213200, RHEL-213227, RHEL-219767, RHEL-224189, RHEL-230094, RHEL-231209, RHEL-232546, RHEL-234516, RHEL-236195 Signed-off-by: CKI KWF Bot --- kernel.spec | 21 +++++++++++++++++++-- sources | 6 +++--- 2 files changed, 22 insertions(+), 5 deletions(-) diff --git a/kernel.spec b/kernel.spec index 6ed718650..559a5ae47 100644 --- a/kernel.spec +++ b/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.156.1.el8_10 +%define pkgrelease 553.157.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.156.1%{?dist} +%define specrelease 553.157.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2797,6 +2797,23 @@ fi # # %changelog +* Wed Aug 19 2026 CKI KWF Bot [4.18.0-553.157.1.el8_10] +- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388} +- mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767] +- mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767] +- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888} +- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602} +- cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546] +- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546] +- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991} +- sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546] +- psi: fix "no previous prototype" warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546] +- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379} +- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189} +- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048} +- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887} +- ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120} + * Mon Aug 17 2026 CKI KWF Bot [4.18.0-553.156.1.el8_10] - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} diff --git a/sources b/sources index 42e74fc18..a78668981 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-553.156.1.el8_10.tar.xz) = e01b565dedce0f2345cab9a42ae66584a492d962d6dbcc7a0de753295260ff267e849499154b1caf0e47ec1452726fcb421a40ce2362abe25c0f34f00bf66fe3 -SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = e0f907a0984a52f85bf27409bb7f2c4da903c3f9c4565fe9365936ff4baa978d2d6445ecd98defee2b614f6e470d05848f728333855cfdb9f9a4783af6daa0a0 -SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 64f3e08e425e7575d2b3671dff29678ac6365d37b3f91a78ea97a4e84620217a11eaa53485ed4481ddbcdec597dfb459687258cf20311a6e46c0c563cc1657b4 +SHA512 (linux-4.18.0-553.157.1.el8_10.tar.xz) = d6982844728af59c47c281e7657208e6f1e9ba68c7365e24842d8d90f2ea0564429fcd3e740b860b6507e06e8bda946286f5915d6a5c61b1facbd4d0f9435c93 +SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 7126bf4323c7ceadff28157242c66013c4e186e50aa6dd630a5dcc7fade07e2dfba6df21a702f8aef9366e252da22aae5344fa2f15143c555c680ce4a038bdc1 +SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = f00b118cf93a3f860e7ca76b8c69c20490088a7a05536bf64d18d6994b6f4d15048a4ca363d2f1e682abe2783249cba10d97749d236b09ffc19d2a6bfe8799a9