From fad579299d6c3f75d73552d21c9b968cf249803d Mon Sep 17 00:00:00 2001 From: CKI KWF Bot Date: Fri, 21 Aug 2026 17:38:52 +0000 Subject: [PATCH] kernel-5.14.0-741.el9 * Fri Aug 21 2026 CKI KWF Bot [5.14.0-741.el9] - dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231826] {CVE-2026-53062} - sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190190] - sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190190] {CVE-2026-53246} - sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234286] {CVE-2026-64564} - Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231453] {CVE-2026-64277} - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230265] {CVE-2026-64276} - sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214461] - sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212388] - sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188202] {CVE-2026-52924} - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182345] {CVE-2026-53266} - ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152701] Resolves: RHEL-152701, RHEL-182345, RHEL-188202, RHEL-190190, RHEL-212388, RHEL-214461, RHEL-230265, RHEL-231453, RHEL-231826, RHEL-234286 Signed-off-by: CKI KWF Bot --- Makefile.rhelver | 2 +- kernel.changelog | 14 ++++++++++++++ kernel.spec | 21 +++++++++++++++++---- sources | 6 +++--- 4 files changed, 35 insertions(+), 8 deletions(-) diff --git a/Makefile.rhelver b/Makefile.rhelver index 264ae07ef..ae8a181bc 100644 --- a/Makefile.rhelver +++ b/Makefile.rhelver @@ -12,7 +12,7 @@ RHEL_MINOR = 9 # # Use this spot to avoid future merge conflicts. # Do not trim this comment. -RHEL_RELEASE = 740 +RHEL_RELEASE = 741 # # ZSTREAM diff --git a/kernel.changelog b/kernel.changelog index a537ffe4e..18591ad03 100644 --- a/kernel.changelog +++ b/kernel.changelog @@ -1,3 +1,17 @@ +* Fri Aug 21 2026 CKI KWF Bot [5.14.0-741.el9] +- dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231826] {CVE-2026-53062} +- sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190190] +- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190190] {CVE-2026-53246} +- sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234286] {CVE-2026-64564} +- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231453] {CVE-2026-64277} +- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230265] {CVE-2026-64276} +- sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214461] +- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212388] +- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188202] {CVE-2026-52924} +- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182345] {CVE-2026-53266} +- ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152701] +Resolves: RHEL-152701, RHEL-182345, RHEL-188202, RHEL-190190, RHEL-212388, RHEL-214461, RHEL-230265, RHEL-231453, RHEL-231826, RHEL-234286 + * Thu Aug 20 2026 CKI KWF Bot [5.14.0-740.el9] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226701] {CVE-2026-43493} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228526] {CVE-2026-63952} diff --git a/kernel.spec b/kernel.spec index d91c0afd3..fc10528cb 100644 --- a/kernel.spec +++ b/kernel.spec @@ -176,15 +176,15 @@ Summary: The Linux kernel # define buildid .local %define specversion 5.14.0 %define patchversion 5.14 -%define pkgrelease 740 +%define pkgrelease 741 %define kversion 5 -%define tarfile_release 5.14.0-740.el9 +%define tarfile_release 5.14.0-741.el9 # This is needed to do merge window version magic %define patchlevel 14 # This allows pkg_release to have configurable %%{?dist} tag -%define specrelease 740%{?buildid}%{?dist} +%define specrelease 741%{?buildid}%{?dist} # This defines the kabi tarball version -%define kabiversion 5.14.0-740.el9 +%define kabiversion 5.14.0-741.el9 # # End of genspec.sh variables @@ -3881,6 +3881,19 @@ fi # # %changelog +* Fri Aug 21 2026 CKI KWF Bot [5.14.0-741.el9] +- dm cache policy smq: check allocation under invalidate lock (Benjamin Marzinski) [RHEL-231826] {CVE-2026-53062} +- sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190190] +- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190190] {CVE-2026-53246} +- sctp: don't free the ASCONF's own transport in DEL-IP processing (CKI Backport Bot) [RHEL-234286] {CVE-2026-64564} +- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231453] {CVE-2026-64277} +- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230265] {CVE-2026-64276} +- sctp: prevent peer transport count overflow (CKI Backport Bot) [RHEL-214461] +- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212388] +- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188202] {CVE-2026-52924} +- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182345] {CVE-2026-53266} +- ipv6: add NULL checks for idev in SRv6 paths (CKI Backport Bot) [RHEL-152701] + * Thu Aug 20 2026 CKI KWF Bot [5.14.0-740.el9] - crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226701] {CVE-2026-43493} - memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228526] {CVE-2026-63952} diff --git a/sources b/sources index baec78a1b..10f4a99a8 100644 --- a/sources +++ b/sources @@ -1,3 +1,3 @@ -SHA512 (linux-5.14.0-740.el9.tar.xz) = 462c8fe2ca5ed70bb50330f0c4096c55f8e3993df0f51a67ed6560252d24625d6c2175e715def894230ce11cd31af5d15e75ea13063830b54779d653e7224a4e -SHA512 (kernel-abi-stablelists-5.14.0-740.el9.tar.bz2) = 6a5f41a72d0bfab4a875e8c37c2466c7d7e63b71ed80176d031d6e0979581729b00445e3e90b52ea8b1f788b2e6d50c042aad5d2dab9382d2bc87365e820260f -SHA512 (kernel-kabi-dw-5.14.0-740.el9.tar.bz2) = 091e1bc255eb492f0a584bdace402ecac47ed81dbcd40ace2fa66a1cfb0622b2162d33b5775780335d0248784b7d1cb650ce94dcfa93eb99fd9a7f0b0546a913 +SHA512 (linux-5.14.0-741.el9.tar.xz) = 0d5e99c12e5d3d2b886e313091de3db4011c2506f0cbaf624541048bca5385da45b273c66f34c0f2c55ab96e12c479a0f5d49a8a680a065dc08dbcf090e31868 +SHA512 (kernel-abi-stablelists-5.14.0-741.el9.tar.bz2) = d69608687eb7398da3863f2cf35f1c5f385eca810f81c19a86f3d9e4db936952a59570a8a3615d45e84e81a458254acf5faa1418ba4988e4fb69d9a75ca08d62 +SHA512 (kernel-kabi-dw-5.14.0-741.el9.tar.bz2) = 79f079c71e98602129a65079251ca349af313a76cdd03ceb320da71299c44ccab40544e8e8ba59fabe494bcfa1cb2cd532e98c8620e35be88ecd051264dcd6ab