[LU-19494] kernel update [RHEL 8.10 4.18.0-553.81.1.el8_10]

• Type: Task
• Resolution: Unresolved
• Priority: Medium
• Affects Version/s: Lustre 2.17.0
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es) for kernel 4.18.0-553.78.1.el8_10:

• kernel: smb: client: fix use-after-free in cifs_oplock_break (CVE-2025-38527)
• kernel: NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CVE-2025-39730)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2025:17397

Security Fix(es) for kernel 4.18.0-553.79.1.el8_10:

• kernel: KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CVE-2022-50228)
• kernel: Bluetooth: L2CAP: Fix use-after-free (CVE-2023-53305)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2025:17797

Security Fix(es) for kernel 4.18.0-553.80.1.el8_10:

• kernel: ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CVE-2025-39757)
• kernel: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CVE-2025-39751)
• kernel: crypto: seqiv - Handle EBUSY correctly (CVE-2023-53373)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2025:18297

Security Fix(es) for kernel 4.18.0-553.81.1.el8_10:

• kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CVE-2023-53297)
• kernel: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CVE-2025-39817)
• kernel: Bluetooth: Fix potential use-after-free when clear keys (CVE-2023-53386)
• kernel: Bluetooth: L2CAP: Fix user-after-free (CVE-2022-50386)
• kernel: wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CVE-2025-39849)
• kernel: scsi: lpfc: Fix buffer free/clear order in deferred receive path (CVE-2025-39841)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2025:19102

Issue Links

• is related to: LU-19338 kernel update [RHEL 8.10 4.18.0-553.76.1.el8_10]