From dff3ca08823a0df90ce2d5c626da0422e693a68b Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Thu, 2 Jul 2026 00:22:35 +0000 Subject: [PATCH] kernel-4.18.0-553.140.1.el8_10 * Thu Jul 02 2026 CKI KWF Bot [4.18.0-553.140.1.el8_10] - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] Resolves: RHEL-152759, RHEL-174237, RHEL-179736, RHEL-179857, RHEL-179907, RHEL-181898, RHEL-183619 Signed-off-by: CKI KWF Bot --- kernel-aarch64-debug.config | 1 + kernel-aarch64.config | 1 + kernel.spec | 35 +++++++++++++++++++++++++++++++++-- sources | 6 +++--- 4 files changed, 38 insertions(+), 5 deletions(-) diff --git a/kernel-aarch64-debug.config b/kernel-aarch64-debug.config index 8c282447f..c99a370dc 100644 --- a/kernel-aarch64-debug.config +++ b/kernel-aarch64-debug.config @@ -2532,6 +2532,7 @@ CONFIG_ARM64_CRYPTO=y CONFIG_ARM64_E0PD=y CONFIG_ARM64_ERRATUM_1024718=y CONFIG_ARM64_ERRATUM_1542419=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y diff --git a/kernel-aarch64.config b/kernel-aarch64.config index e5c1ae953..d0fd1c7c6 100644 --- a/kernel-aarch64.config +++ b/kernel-aarch64.config @@ -2604,6 +2604,7 @@ CONFIG_ARM64_CRYPTO=y CONFIG_ARM64_E0PD=y CONFIG_ARM64_ERRATUM_1024718=y CONFIG_ARM64_ERRATUM_1542419=y +CONFIG_ARM64_ERRATUM_4118414=y CONFIG_ARM64_ERRATUM_819472=y CONFIG_ARM64_ERRATUM_824069=y CONFIG_ARM64_ERRATUM_826319=y diff --git a/kernel.spec b/kernel.spec index 4bb924ce2..20cf4a2a0 100644 --- a/kernel.spec +++ b/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.139.1.el8_10 +%define pkgrelease 553.140.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.139.1%{?dist} +%define specrelease 553.140.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2723,6 +2723,37 @@ fi # # %changelog +* Thu Jul 02 2026 CKI KWF Bot [4.18.0-553.140.1.el8_10] +- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} +- tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} +- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} +- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} +- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} +- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} +- vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] + * Mon Jun 29 2026 CKI KWF Bot [4.18.0-553.139.1.el8_10] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] diff --git a/sources b/sources index dbddb5626..1bad8caf4 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-553.139.1.el8_10.tar.xz) = f7a6c64ce7153018a6b9dce37bae83b7f752adcb2952b67acb0aed0faf0e931fc04d04a968c6923580e1ec2868cd1d38548ba854e41f1032f03c9b68ebaed3da -SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = feb129090d3e078c85a6df9cfa5b570c096a342bb3f844cb23f3e2c0bcc33bed228f53d09626641c06a69ca5cea8422344e6e300697dd5d80e664f1aa9a47012 -SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 4f555f999caac6c2056eb67c48c447b1a2b80fcd19164b8d7f666626e05573fc4aa4e1f5fed7114067020174ae740395298de7ce1107ef357c35062294a55f14 +SHA512 (linux-4.18.0-553.140.1.el8_10.tar.xz) = a7cd8d70e5574b61e9ae2beea1cdeef6b24e9c4b07d9a27882550e8d86ef63f84134d4ba31ebb5927872e69de0acfb57ea17aa4f76e06ecd732d0cc92312f930 +SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = 5199694ccf5d1f9b2cb4ea2429de07963e25891b4b4ffa2a0b5d2ef648a80ce661d2f268092c750cb23c96e35aa4d516498d6d2d91a2fc88c8d242447c6593b8 +SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = b9fe4c7bb473866e6f11c619c276f5d492a6cfe582788cd025d36bbcd719b96449cb63851069b45b9585c737b88c6341ef198b38c8b597dd216916d699d1c2e3