rpms/kernel
9
4
Fork 6
Code Issues Pull Requests Releases Activity

kernel-5.14.0-741.el9

Browse Source 
* Fri Aug 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-741.el9]
- dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231826] {CVE-2026-53062}
- sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190190]
- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190190] {CVE-2026-53246}
- sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234286] {CVE-2026-64564}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231453] {CVE-2026-64277}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230265] {CVE-2026-64276}
- sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214461]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212388]
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188202] {CVE-2026-52924}
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182345] {CVE-2026-53266}
- ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152701]
Resolves: RHEL-152701, RHEL-182345, RHEL-188202, RHEL-190190, RHEL-212388, RHEL-214461, RHEL-230265, RHEL-231453, RHEL-231826, RHEL-234286

Signed-off-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>
This commit is contained in:
CKI KWF Bot 2026-08-21 17:38:52 +00:00
parent 75975b58e4
commit fad579299d
4 changed files with 35 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Makefile.rhelver
View File

@ -12,7 +12,7 @@ RHEL_MINOR = 9
#
# Use this spot to avoid future merge conflicts.
# Do not trim this comment.
RHEL_RELEASE = 740
RHEL_RELEASE = 741
#
# ZSTREAM

14
kernel.changelog
View File

@ -1,3 +1,17 @@
* Fri Aug 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-741.el9]
- dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231826] {CVE-2026-53062}
- sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190190]
- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190190] {CVE-2026-53246}
- sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234286] {CVE-2026-64564}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231453] {CVE-2026-64277}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230265] {CVE-2026-64276}
- sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214461]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212388]
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188202] {CVE-2026-52924}
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182345] {CVE-2026-53266}
- ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152701]
Resolves: RHEL-152701, RHEL-182345, RHEL-188202, RHEL-190190, RHEL-212388, RHEL-214461, RHEL-230265, RHEL-231453, RHEL-231826, RHEL-234286
* Thu Aug 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-740.el9]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226701] {CVE-2026-43493}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228526] {CVE-2026-63952}

21
kernel.spec
View File

@ -176,15 +176,15 @@ Summary: The Linux kernel
# define buildid .local
%define specversion 5.14.0
%define patchversion 5.14
%define pkgrelease 740
%define pkgrelease 741
%define kversion 5
%define tarfile_release 5.14.0-740.el9
%define tarfile_release 5.14.0-741.el9
# This is needed to do merge window version magic
%define patchlevel 14
# This allows pkg_release to have configurable %%{?dist} tag
%define specrelease 740%{?buildid}%{?dist}
%define specrelease 741%{?buildid}%{?dist}
# This defines the kabi tarball version
%define kabiversion 5.14.0-740.el9
%define kabiversion 5.14.0-741.el9
#
# End of genspec.sh variables
@ -3881,6 +3881,19 @@ fi
#
#
%changelog
* Fri Aug 21 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-741.el9]
- dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231826] {CVE-2026-53062}
- sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190190]
- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190190] {CVE-2026-53246}
- sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234286] {CVE-2026-64564}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231453] {CVE-2026-64277}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230265] {CVE-2026-64276}
- sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214461]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212388]
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188202] {CVE-2026-52924}
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182345] {CVE-2026-53266}
- ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152701]
* Thu Aug 20 2026 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-740.el9]
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226701] {CVE-2026-43493}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228526] {CVE-2026-63952}

6
sources
View File

@ -1,3 +1,3 @@
SHA512 (linux-5.14.0-740.el9.tar.xz) = 462c8fe2ca5ed70bb50330f0c4096c55f8e3993df0f51a67ed6560252d24625d6c2175e715def894230ce11cd31af5d15e75ea13063830b54779d653e7224a4e
SHA512 (kernel-abi-stablelists-5.14.0-740.el9.tar.bz2) = 6a5f41a72d0bfab4a875e8c37c2466c7d7e63b71ed80176d031d6e0979581729b00445e3e90b52ea8b1f788b2e6d50c042aad5d2dab9382d2bc87365e820260f
SHA512 (kernel-kabi-dw-5.14.0-740.el9.tar.bz2) = 091e1bc255eb492f0a584bdace402ecac47ed81dbcd40ace2fa66a1cfb0622b2162d33b5775780335d0248784b7d1cb650ce94dcfa93eb99fd9a7f0b0546a913
SHA512 (linux-5.14.0-741.el9.tar.xz) = 0d5e99c12e5d3d2b886e313091de3db4011c2506f0cbaf624541048bca5385da45b273c66f34c0f2c55ab96e12c479a0f5d49a8a680a065dc08dbcf090e31868
SHA512 (kernel-abi-stablelists-5.14.0-741.el9.tar.bz2) = d69608687eb7398da3863f2cf35f1c5f385eca810f81c19a86f3d9e4db936952a59570a8a3615d45e84e81a458254acf5faa1418ba4988e4fb69d9a75ca08d62
SHA512 (kernel-kabi-dw-5.14.0-741.el9.tar.bz2) = 79f079c71e98602129a65079251ca349af313a76cdd03ceb320da71299c44ccab40544e8e8ba59fabe494bcfa1cb2cd532e98c8620e35be88ecd051264dcd6ab