# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.105.1.el8_10]
changelog:
  - s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
  - Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_sync: hold hdev->lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
  - gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.106.1.el8_10]
changelog:
  - bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
  - net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
  - smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.107.1.el8_10]
changelog:
  - autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
  - i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
  - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.109.1.el8_10]
changelog:
  - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}


author: Release Engineering <releng@rockylinux.org> - 4.18.0-553.109.1
changelog:
  - Adding prod certs and changed cert date to 20210620 (Sherif Nagy)
  - Adding Rocky secure boot certs (Sherif Nagy)
  - Fixing vmlinuz removal (Sherif Nagy)
  - Fixing UEFI CA path (Sherif Nagy)
  - Porting to 8.10, debranding and Rocky branding (Louis Abel)
  - Fixing pesign_key_name values (Sherif Nagy)


author: RESF Sideline (Backporter) <releng+sideline@rockylinux.org> - 4.18.0-553.109.1
changelog:
  - fbf6449f84bf x86/sev-es: Set x86_virt_bits to the correct value straight away, instead of a two-phase approach (nhanlon)
  - 3e3255265291 x86/boot: Move x86_cache_alignment initialization to correct spot (nhanlon)


author: Jonathan Maple (Backporter) <jmaple@ciq.com> - 4.18.0-553.109.1
changelog:
  - 2a38e4ca3022 - Dave Hansen - 2024-05-30 - x86/cpu: Provide default cache line size if not enumerated
  - 95bfb35269b2 - Borislav Petkov (AMD) - 2024-03-21 - x86/cpu: Get rid of an unnecessary local variable in get_cpu_address_sizes()
  - 9a458198eba9 - Paolo Bonzini - 2024-02-26 - x86/cpu: Allow reducing x86_phys_bits during early_identify_cpu()


author: Jonathan Dieter <jdieter@ciq.com> - 0.6-1
changelog:
  - Ensure that available_modules are sorted by evr_key in reverse order
  - Exclude kernels if they're in a higher priority value repo
  - Exclude kmods without any matching kernels


