From f6a6a13eabe986e8dc64f55ccf4ab597479142a8 Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Mon, 17 Aug 2026 00:24:45 +0000 Subject: [PATCH] kernel-4.18.0-553.156.1.el8_10 * Mon Aug 17 2026 CKI KWF Bot [4.18.0-553.156.1.el8_10] - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} - drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} - drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} - drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} - drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} - drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} - drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} - vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] - can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} - sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] - sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} Resolves: RHEL-188453, RHEL-189997, RHEL-216711, RHEL-221327, RHEL-222576, RHEL-222620, RHEL-222656, RHEL-222662, RHEL-222680, RHEL-222738, RHEL-224556, RHEL-226551 Signed-off-by: CKI KWF Bot --- kernel.spec | 27 +++++++++++++++++++++++++-- sources | 6 +++--- 2 files changed, 28 insertions(+), 5 deletions(-) diff --git a/kernel.spec b/kernel.spec index 9ca2bc6da..6ed718650 100644 --- a/kernel.spec +++ b/kernel.spec @@ -49,10 +49,10 @@ # define buildid .local %define specversion 4.18.0 -%define pkgrelease 553.155.1.el8_10 +%define pkgrelease 553.156.1.el8_10 # allow pkg_release to have configurable %%{?dist} tag -%define specrelease 553.155.1%{?dist} +%define specrelease 553.156.1%{?dist} %define pkg_release %{specrelease}%{?buildid} @@ -2797,6 +2797,29 @@ fi # # %changelog +* Mon Aug 17 2026 CKI KWF Bot [4.18.0-553.156.1.el8_10] +- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206} +- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219} +- drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879} +- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884} +- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329} +- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136} +- mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902} +- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374} +- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556] +- can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523} +- sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997] +- sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997] +- sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997] +- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016} + * Wed Aug 12 2026 CKI KWF Bot [4.18.0-553.155.1.el8_10] - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991} - ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009} diff --git a/sources b/sources index ed8ca78a4..42e74fc18 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-4.18.0-553.155.1.el8_10.tar.xz) = 92f278b48851546b1fc818e23df90fd0aecab1ef3652390c518c25e4df11426161ad45a1a4510d058cd26b4c2bf5765fd7f4d28f370ebe82704b435228f21978 -SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = d1b530b0a178cb07aa6716b0490acdf750b62259fc01fded4fefc3efdb98b6bf6aa0cbe6c4f89d8d804ae13bc65b524c7f827a4e6571c2b1f641051a2a43d2f8 -SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 0e8040f3ac76c55a0510c4e91f191af6f6a544df3206a5f843d3e886b8855c9c1d02c8e2b79fd0d7f0fde8c196942fa6d47e5c70f1901fd14e2896f0ae33d74c +SHA512 (linux-4.18.0-553.156.1.el8_10.tar.xz) = e01b565dedce0f2345cab9a42ae66584a492d962d6dbcc7a0de753295260ff267e849499154b1caf0e47ec1452726fcb421a40ce2362abe25c0f34f00bf66fe3 +SHA512 (kernel-abi-stablelists-4.18.0-553.tar.bz2) = e0f907a0984a52f85bf27409bb7f2c4da903c3f9c4565fe9365936ff4baa978d2d6445ecd98defee2b614f6e470d05848f728333855cfdb9f9a4783af6daa0a0 +SHA512 (kernel-kabi-dw-4.18.0-553.tar.bz2) = 64f3e08e425e7575d2b3671dff29678ac6365d37b3f91a78ea97a4e84620217a11eaa53485ed4481ddbcdec597dfb459687258cf20311a6e46c0c563cc1657b4