From c4ea47c78676de9dc45059ccd8cd40d82a207890 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Wed, 25 Mar 2026 22:17:51 +0000 Subject: [PATCH] kernel-4.18.0-553.116.1.el8_10 * Wed Mar 25 2026 CKI KWF Bot [4.18.0-553.116.1.el8_10] - nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] - NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] - flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] - NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] - NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] - pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] - NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] - SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] - NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] - SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] - SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] - SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] - SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] - NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] - NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] - nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] - pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] - NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] - NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] - NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] - NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] - NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] - NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] - NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] - NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] - NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] - nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] - nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] - nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] - scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] Resolves: RHEL-111846, RHEL-123942, RHEL-153264, RHEL-153405, RHEL-156419, RHEL-157242, RHEL-157930 Signed-off-by: CKI KWF Bot --- kernel.spec | 47 +++++++++++++++++++++++++++++++++++++++++++++-- sources | 6 +++--- 2 files changed, 48 insertions(+), 5 deletions(-) diff --git a/kernel.spec b/kernel.spec index 0419d4234..daf82b5bc 100644 --- a/kernel.spec +++ b/kernel.spec @@ -38,10 +38,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.115.1.el8_10 +%define pkgrelease 553.116.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.115.1%{?dist} +%define specrelease 553.116.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2705,6 +2705,49 @@ fi # # %changelog +* Wed Mar 25 2026 CKI KWF Bot [4.18.0-553.116.1.el8_10] +- nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984} +- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930] +- NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242] +- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242] +- pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242] +- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242] +- NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242] +- flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242] +- pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242] +- NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242] +- NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242] +- pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242] +- pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] +- NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242] +- NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242] +- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242] +- SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242] +- NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242] +- SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242] +- SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242] +- SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242] +- SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242] +- NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242] +- NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419] +- nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419] +- pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419] +- NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419] +- NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419] +- NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419] +- NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419] +- NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419] +- NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419] +- NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419] +- NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419] +- NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419] +- nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419] +- nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419] +- nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419] +- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238} +- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231} +- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942] + * Mon Mar 23 2026 CKI KWF Bot [4.18.0-553.115.1.el8_10] - x86/microcode/AMD: Revert "Backport AMD microcode commits for better microcode loading support" (Waiman Long) [RHEL-155860] - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204} diff --git a/sources b/sources index 8b80a51e8..afd9f1eb0 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-553.115.1.el8_10.tar.xz) = d5c3c5e30632fa469ed407f741d0739bc1c22956ad36781b1a8d9f05a43caf0db48c4e1e5dd1e524e323a04fe454ec7898b7bdf0aab68342d5f2c6d2f48c4f69 -SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 8b4eadfaa7becee1fd25bf5c30fcd159fc204bebad761e2e73a7b8f0ae5470f0de02b659bd0b2c93b7b42426d2e24c01d06fb1b158a299a98a3050b2517c0358 -SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 553d7b464853035d24e64d1425bda55b547f6fb3eab971ad4d255902f86f673f65d93252a1dc70a4b87d349765407dd4343120a64ef26a9195df9d8315a311a4 +SHA512 (linux-4.18.0-553.116.1.el8_10.tar.xz) = 5d16e1ac07b9b6f0f77e8a4bed24e0881c9bbd13d320d8e3ed1a8a1f08200c424bf575b4495d76d39d82f4b1b4a2f089a31592f1e940c71cad57f747182f64c1 +SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 12525ee8b0f4f3f74c4563529a9a667e29449bad9f3059ab7122ea0d10300b65c99c27648add531ffdfad879c71d62979cf5da19d5f517a0a5fa7889eeb5acec +SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 40e411ba1f68b092aa8bc580f79793c102f786e7c5bfa8ee21d41936572d1a07b2fc6d0aea63c0f19b9f279b9aac2ac96c7bb7bc32b8a42f9b6d278678771f6c