# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.119.1.el8_10]
changelog:
  - s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532]
  - s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532]
  - s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532]
  - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417]
  - s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307]
  - dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538]
  - dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236]
  - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236]
  - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236]
  - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236]
  - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236]
  - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236]
  - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236]
  - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236]
  - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236]
  - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131}
  - dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.120.1.el8_10]
changelog:
  - gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075]
  - gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075]
  - gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075]
  - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657]
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.121.1.el8_10]
changelog:
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.122.1.el8_10]
changelog:
  - nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073}
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724}
  - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252}
  - kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.123.1.el8_10]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187]
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187]
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401}


author: Release Engineering <releng@rockylinux.org> - 4.18.0-553.123.1
changelog:
  - Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
  - Adding Rocky secure boot certs (Sherif Nagy)
  - Fixing vmlinuz removal (Sherif Nagy)
  - Fixing UEFI CA path (Sherif Nagy)
  - Porting to 8.10, debranding and Rocky branding (Louis Abel)
  - Fixing pesign_key_name values (Sherif Nagy)


author: RESF Sideline (Backporter) <releng+sideline@rockylinux.org> - 4.18.0-553.123.1
changelog:
  - fbf6449f84bf x86/sev-es: Set x86_virt_bits to the correct value straight away, instead of a two-phase approach (nhanlon)
  - 3e3255265291 x86/boot: Move x86_cache_alignment initialization to correct spot (nhanlon)


author: Jonathan Maple (Backporter) <jmaple@ciq.com> - 4.18.0-553.123.1
changelog:
  - 2a38e4ca3022 - Dave Hansen - 2024-05-30 - x86/cpu: Provide default cache line size if not enumerated
  - 95bfb35269b2 - Borislav Petkov (AMD) - 2024-03-21 - x86/cpu: Get rid of an unnecessary local variable in get_cpu_address_sizes()
  - 9a458198eba9 - Paolo Bonzini - 2024-02-26 - x86/cpu: Allow reducing x86_phys_bits during early_identify_cpu()


