[LU-19289] kernel update [RHEL 8.10 4.18.0-553.71.1.el8_10]

• Type: Task
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.17.0
• Affects Version/s: Lustre 2.17.0, Lustre 2.15.7
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es) for kernel 4.18.0-553.70.1.el8_10:

• kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)
• kernel: net_sched: ets: Fix double list add in class with netem as child qdisc (CVE-2025-37914)
• kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)
• kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2025:13960

Security Fix(es) for kernel 4.18.0-553.71.1.el8_10:

• kernel: udp: Fix memory accounting leak. (CVE-2025-22058)
• kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2025:14438

Issue Links

• is related to: LU-19170 kernel update [RHEL 8.10 4.18.0-553.66.1.el8_10]