[LU-19666] kernel update [RHEL 8.10 4.18.0-553.89.1.el8_10]

• Type: Task
• Resolution: Fixed
• Priority: Medium
• Fix Version/s: Lustre 2.17.0
• Affects Version/s: Lustre 2.17.0
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es) for kernel 4.18.0-553.87.1.el8_10:

• kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CVE-2025-38724)
• kernel: smb: client: fix race with concurrent opens in rename(2) (CVE-2025-39825)
• kernel: mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CVE-2025-39883)
• kernel: e1000e: fix heap overflow in e1000_set_eeprom (CVE-2025-39898)
• kernel: nbd: fix incomplete validation of ioctl arg (CVE-2023-53513)
• kernel: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (CVE-2025-39955)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2025:22388

Security Fix(es) for kernel 4.18.0-553.89.1.el8_10:

• kernel: mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (CVE-2023-53401)
• kernel: RDMA/rxe: Fix incomplete state save in rxe_requester (CVE-2023-53539)
• kernel: RDMA/rxe: Fix mr->map double free (CVE-2022-50543)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2025:22801

Issue Links

• is related to: LU-19803 kernel update [RHEL 8.10 4.18.0-553.94.1.el8_10]
• is related to: LU-19633 kernel update [RHEL 8.10 4.18.0-553.85.1.el8_10]