• changed/a9/kernel-5.14.0-611.55.1.el9_7 01f79da1ca

    alukoshko released this 2026-05-19 18:15:47 +00:00 | -165 commits to c8 since this release

    Bring back three local patches that were dropped from a9 after
    upstream landed the related fixes. The xfrm-esp fix (CVE-2026-43284)
    came in via the CKI Backport Bot at 5.14.0-611.55.1, but rxrpc,
    net/skbuff and ptrace did not -- restore them here. Blobs are
    imported verbatim from the latest a9 commits that carried them
    (2530dd40b / d62b1833b / cbd86e459 / cc48c27cd):

    1101-rxrpc-linearize-paged-frags.patch (CVE-2026-43500)
    1102-net-skbuff-propagate-shared-frag-marker.patch
    v3 frag-transfer helpers variant (CVE-2026-46300 "Fragnesia")
    1103-ptrace-require-cap-on-mm-less-task.patch
    CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd

    Release is not bumped; a second changelog entry is added under the
    existing 5.14.0-611.55.1 version. All three verified to apply with
    patch -p1 -F0 against the 5.14.0-611.55.1.el9_7 source tree
    (one minor offset, no fuzz, no rejects).

    Downloads