[LU-19752] kernel update [RHEL 9.7 5.14.0-611.16.1.el9_7]

• Type: Task
• Resolution: Unresolved
• Priority: Medium
• Affects Version/s: Lustre 2.18.0
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es) for kernel 5.14.0-611.16.1.el9_7:

• kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499)
• kernel: iommufd: Fix race during abort for file descriptors (CVE-2025-39966)
• kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails (CVE-2025-40176)

https://access.redhat.com/errata/product/479/ver=/rhel---9/x86_64/RHSA-2025:23241

Issue Links

• is related to: LU-19665 kernel update [RHEL 9.7 5.14.0-611.13.1.el9_7]