rpms/kernel
9
4
Fork 6
Code Issues Pull Requests Releases Activity
e1dbabe6cc
kernel/SOURCES
History
eabdullin e1dbabe6cc Bump version to 4.18.0-553.124.3 
net: skbuff: propagate shared-frag marker through frag-transfer helpers

Replace 553.124.2's partial fix (which was a backport of Hyunwoo Kim's
v1 patch covering only __pskb_copy_fclone() and skb_try_coalesce())
with a backport of the upstream v3 patch:
https://lore.kernel.org/all/agW4vC0r8QOUKtRT@v4bel/

v3 also covers skb_shift() (the new hunk added in v2) and
skb_gro_receive() / skb_gro_receive_list() (the audit follow-up
suggested by Sultan Alsawaf in agVpIsaSherjHTYg@sultan-box).

All five sites moved frag descriptors between skbs without
propagating the SKBFL_SHARED_FRAG marker (SKBTX_SHARED_FRAG on 4.18),
so destinations could end up referencing externally-owned or
page-cache-backed pages while reporting skb_has_shared_frag() as
false. Combined with ESP-over-UDP and UDP GRO, or any
nf_dup_ipv4 / xt_TEE caller, this lets an unprivileged user trigger
in-place ESP decryption over root-owned page-cache pages
(CVE-2026-46300, "Fragnesia").

Tree-adapted to the 4.18 kernel: SKBFL_SHARED_FRAG / shinfo->flags
back to the legacy SKBTX_SHARED_FRAG / shinfo->tx_flags, and
skb_gro_receive() / skb_gro_receive_list() targeting net/core/skbuff.c
since the net/core/gro.c split (upstream v5.19) is not in 4.18.
2026-05-14 15:59:08 +03:00
..
0001-Enable-all-disabled-pci-devices-by-moving-to-unmaint.patch Merge 8.10 beta PCI ID patches 2024-05-22 11:57:07 +00:00
0002-Bring-back-deprecated-pci-ids-to-megaraid_sas-driver.patch Merge 8.10 beta PCI ID patches 2024-05-22 11:57:07 +00:00
0003-Bring-back-deprecated-pci-ids-to-mptsas-mptspi-drive.patch Merge 8.10 beta PCI ID patches 2024-05-22 11:57:07 +00:00
0004-Bring-back-deprecated-pci-ids-to-hpsa-driver.patch Merge 8.10 beta PCI ID patches 2024-05-22 11:57:07 +00:00
0005-Bring-back-deprecated-pci-ids-to-qla2xxx-driver.patch Merge 8.10 beta PCI ID patches 2024-05-22 11:57:07 +00:00
0006-Bring-back-deprecated-pci-ids-to-lpfc-driver.patch Merge 8.10 beta PCI ID patches 2024-05-22 11:57:07 +00:00
0007-Bring-back-deprecated-pci-ids-to-qla4xxx-driver.patch Merge 8.10 beta PCI ID patches 2024-05-22 11:57:07 +00:00
0008-Bring-back-deprecated-pci-ids-to-be2iscsi-driver.patch Merge 8.10 beta PCI ID patches 2024-05-22 11:57:07 +00:00
1100-net-skbuff-propagate-shared-frag-marker.patch Bump version to 4.18.0-553.124.3 2026-05-14 15:59:08 +03:00
almalinux.pem AlmaLinux changes 2021-09-16 09:39:51 +00:00
almalinuxsecureboot0.cer hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2026-03-08 22:53:17 +00:00
almalinuxsecurebootca0.cer hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-02-06 13:27:42 +03:00
check-kabi import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
cpupower.config import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
cpupower.service import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
debrand-rh-i686-cpu.patch Revert EuroLinux modifications 2024-04-08 14:52:46 +00:00
debrand-single-cpu.patch Revert EuroLinux modifications 2024-04-08 14:52:46 +00:00
filter-aarch64.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
filter-modules.sh import kernel-4.18.0-348.el8 2021-11-10 10:04:13 +00:00
filter-ppc64le.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
filter-s390x.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
filter-x86_64.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
gating.yaml Import from CS git 2025-04-15 10:57:03 +00:00
generate_all_configs.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
generate_bls_conf.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
kernel-aarch64-debug.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-07-21 13:35:23 +00:00
kernel-aarch64.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-07-21 13:35:23 +00:00
kernel-ppc64le-debug.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-07-21 13:35:23 +00:00
kernel-ppc64le.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-07-21 13:35:23 +00:00
kernel-s390x-debug.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-07-21 13:35:23 +00:00
kernel-s390x-zfcpdump.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-07-21 13:35:23 +00:00
kernel-s390x.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-07-21 13:35:23 +00:00
kernel-x86_64-debug.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-11-10 08:04:54 +00:00
kernel-x86_64.config hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 2025-11-10 08:04:54 +00:00
kvm_stat.logrotate import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
linux-kernel-test.patch import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
mod-blacklist.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
mod-extra.list import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
mod-internal.list import CS kernel-4.18.0-552.el8 2024-05-22 11:48:35 +00:00
mod-sign.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
Module.kabi_aarch64 import CS kernel-4.18.0-552.el8 2024-05-22 11:48:35 +00:00
Module.kabi_dup_aarch64 import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
Module.kabi_dup_ppc64le import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
Module.kabi_dup_s390x import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
Module.kabi_dup_x86_64 import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
Module.kabi_ppc64le import CS kernel-4.18.0-552.el8 2024-05-22 11:48:35 +00:00
Module.kabi_s390x import CS kernel-4.18.0-552.el8 2024-05-22 11:48:35 +00:00
Module.kabi_x86_64 import CS kernel-4.18.0-552.el8 2024-05-22 11:48:35 +00:00
parallel_xz.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
process_configs.sh import kernel-4.18.0-305.7.1.el8_4 2021-09-15 09:45:24 +00:00
rpminspect.yaml Import from CS git 2025-11-24 12:36:32 +00:00
standalone-aarch64.c Import from CS git 2025-07-21 13:33:37 +00:00
standalone-ppc64le.c Import from CS git 2025-07-21 13:33:37 +00:00
standalone-s390x.c Import from CS git 2025-07-21 13:33:37 +00:00
standalone-x86_64.c Import from CS git 2025-07-21 13:33:37 +00:00
x509.genkey AlmaLinux changes 2021-09-16 09:39:51 +00:00