rpms/kernel
9
4
Fork 6
Code Issues Pull Requests Releases Activity

kernel-4.18.0-553.159.1.el8_10

Browse Source 
* Mon Aug 31 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.159.1.el8_10]
- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581}
- powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144]
- powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144]
- RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492]
- x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492]
- smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132}
- net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970}
- s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045]
Resolves: RHEL-191437, RHEL-193045, RHEL-219521, RHEL-225272, RHEL-225510, RHEL-226624, RHEL-227780, RHEL-228028, RHEL-228073, RHEL-229075, RHEL-229402, RHEL-230492, RHEL-231993, RHEL-234059, RHEL-240144, RHEL-246806

Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
This commit is contained in:
CKI KWF Bot 2026-08-31 14:52:07 +00:00
parent 59aa6b2a2e
commit 79a7cb6315
6 changed files with 31 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
kernel-aarch64-debug.config
View File

@ -2459,6 +2459,7 @@
# CONFIG_ZOPT2201 is not set # CONFIG_ZOPT2201 is not set
# CONFIG_ZPA2326 is not set # CONFIG_ZPA2326 is not set
# CONFIG_ZRAM_MEMORY_TRACKING is not set # CONFIG_ZRAM_MEMORY_TRACKING is not set
# CONFIG_ZRAM_WRITEBACK is not set
# CONFIG_ZX_TDM is not set # CONFIG_ZX_TDM is not set
CONFIG_64BIT=y CONFIG_64BIT=y
CONFIG_8139CP=m CONFIG_8139CP=m
@ -5692,7 +5693,6 @@ CONFIG_ZLIB_INFLATE=y
CONFIG_ZONE_DEVICE=y CONFIG_ZONE_DEVICE=y
CONFIG_ZPOOL=y CONFIG_ZPOOL=y
CONFIG_ZRAM=m CONFIG_ZRAM=m
CONFIG_ZRAM_WRITEBACK=y
CONFIG_ZSMALLOC=y CONFIG_ZSMALLOC=y
CONFIG_ZSMALLOC_STAT=y CONFIG_ZSMALLOC_STAT=y
CONFIG_ZSWAP=y CONFIG_ZSWAP=y

2
kernel-aarch64.config
View File

@ -2537,6 +2537,7 @@
# CONFIG_ZOPT2201 is not set # CONFIG_ZOPT2201 is not set
# CONFIG_ZPA2326 is not set # CONFIG_ZPA2326 is not set
# CONFIG_ZRAM_MEMORY_TRACKING is not set # CONFIG_ZRAM_MEMORY_TRACKING is not set
# CONFIG_ZRAM_WRITEBACK is not set
# CONFIG_ZX_TDM is not set # CONFIG_ZX_TDM is not set
CONFIG_64BIT=y CONFIG_64BIT=y
CONFIG_8139CP=m CONFIG_8139CP=m
@ -5666,7 +5667,6 @@ CONFIG_ZLIB_INFLATE=y
CONFIG_ZONE_DEVICE=y CONFIG_ZONE_DEVICE=y
CONFIG_ZPOOL=y CONFIG_ZPOOL=y
CONFIG_ZRAM=m CONFIG_ZRAM=m
CONFIG_ZRAM_WRITEBACK=y
CONFIG_ZSMALLOC=y CONFIG_ZSMALLOC=y
CONFIG_ZSMALLOC_STAT=y CONFIG_ZSMALLOC_STAT=y
CONFIG_ZSWAP=y CONFIG_ZSWAP=y

2
kernel-ppc64le-debug.config
View File

@ -2211,6 +2211,7 @@
# CONFIG_ZOPT2201 is not set # CONFIG_ZOPT2201 is not set
# CONFIG_ZPA2326 is not set # CONFIG_ZPA2326 is not set
# CONFIG_ZRAM_MEMORY_TRACKING is not set # CONFIG_ZRAM_MEMORY_TRACKING is not set
# CONFIG_ZRAM_WRITEBACK is not set
# CONFIG_ZX_TDM is not set # CONFIG_ZX_TDM is not set
CONFIG_64BIT=y CONFIG_64BIT=y
CONFIG_6LOWPAN=m CONFIG_6LOWPAN=m
@ -5422,7 +5423,6 @@ CONFIG_ZLIB_INFLATE=y
CONFIG_ZONE_DEVICE=y CONFIG_ZONE_DEVICE=y
CONFIG_ZPOOL=y CONFIG_ZPOOL=y
CONFIG_ZRAM=m CONFIG_ZRAM=m
CONFIG_ZRAM_WRITEBACK=y
CONFIG_ZSMALLOC=y CONFIG_ZSMALLOC=y
CONFIG_ZSMALLOC_STAT=y CONFIG_ZSMALLOC_STAT=y
CONFIG_ZSWAP=y CONFIG_ZSWAP=y

2
kernel-ppc64le.config
View File

@ -2288,6 +2288,7 @@
# CONFIG_ZOPT2201 is not set # CONFIG_ZOPT2201 is not set
# CONFIG_ZPA2326 is not set # CONFIG_ZPA2326 is not set
# CONFIG_ZRAM_MEMORY_TRACKING is not set # CONFIG_ZRAM_MEMORY_TRACKING is not set
# CONFIG_ZRAM_WRITEBACK is not set
# CONFIG_ZX_TDM is not set # CONFIG_ZX_TDM is not set
CONFIG_64BIT=y CONFIG_64BIT=y
CONFIG_6LOWPAN=m CONFIG_6LOWPAN=m
@ -5398,7 +5399,6 @@ CONFIG_ZLIB_INFLATE=y
CONFIG_ZONE_DEVICE=y CONFIG_ZONE_DEVICE=y
CONFIG_ZPOOL=y CONFIG_ZPOOL=y
CONFIG_ZRAM=m CONFIG_ZRAM=m
CONFIG_ZRAM_WRITEBACK=y
CONFIG_ZSMALLOC=y CONFIG_ZSMALLOC=y
CONFIG_ZSMALLOC_STAT=y CONFIG_ZSMALLOC_STAT=y
CONFIG_ZSWAP=y CONFIG_ZSWAP=y

26
kernel.spec
View File

@ -49,10 +49,10 @@
# define buildid .local # define buildid .local
%define specversion 4.18.0 %define specversion 4.18.0
%define pkgrelease 553.158.1.el8_10 %define pkgrelease 553.159.1.el8_10
# allow pkg_release to have configurable %%{?dist} tag # allow pkg_release to have configurable %%{?dist} tag
%define specrelease 553.158.1%{?dist} %define specrelease 553.159.1%{?dist}
%define pkg_release %{specrelease}%{?buildid} %define pkg_release %{specrelease}%{?buildid}
@ -2797,6 +2797,28 @@ fi
# #
# #
%changelog %changelog
* Mon Aug 31 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.159.1.el8_10]
- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581}
- powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144]
- powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144]
- RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492]
- x86/entry: Unify definitions from <asm/calling.h> and <asm/ptrace-abi.h> (Waiman Long) [RHEL-230492]
- smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132}
- net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970}
- s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045]
* Mon Aug 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.158.1.el8_10] * Mon Aug 24 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.158.1.el8_10]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320} - nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320}
- selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800] - selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800]

6
sources
View File

@ -1,3 +1,3 @@
SHA512 (linux-4.18.0-553.158.1.el8_10.tar.xz) = cfbdfc033ff3d6392a680b8b73923401adf56af65d1e1d22632ebfcbedb3a621094af5621bd41f59bd018b20b46a5661a1d4bdbc05f409e93cacecf39543bb23 SHA512 (linux-4.18.0-553.159.1.el8_10.tar.xz) = 4f9a780878603315a57be5fa8e8eac35f44ed406c1cb17ded63ad7d15e2f1a83319691bdbbdab87ab997c4367988a4679c380f9a9c3e35a7e1275dd6b39e76a5
SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 42676e62295fbce3a9a1d019d860bece1ba7ec9a0f9d61ebce608e90d7cdd8fee8994c048be1cfaddb02a5496510f98c094e35a9229446acd7b6588b0cc4247f SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 8beb8a4daf4723bdabcf10ce0f344f0ef4d3e20816d9fadf7d6cf8d3ebd804b3998c228026f15ba6c5a52d84a35aec9ebd52d8bdb44d290c3723b48178589de0
SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 430807d34009b8f30f7844dc57b1d293a4faaf3fa8edc5e0522c7a09b68c429733d6f85b2565e38d9442d9e3378c46d54349e5b385fa99981e04494a79bfe817 SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 6d5154c460923177284c3c98808b585328d6862c60e8cdd689ced9562eb1953d269a483fd5baaf2eb4f3cc1c958936e898e3a1d80aa01c3e9172659b19fc296c