[LU-20222] kernel update [RHEL 8.10 4.18.0-553.123.1.el8_10]

• Type: Task
• Resolution: Won't Fix
• Priority: Critical
• Affects Version/s: Lustre 2.18.0, Lustre 2.15.9
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es) for kernel 4.18.0-553.123.1.el8_10:

• kernel: nvme: avoid double free special payload (CVE-2024-41073)
• kernel: net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (CVE-2025-40252)
• kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CVE-2025-68724)
• kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
• kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
• kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

https://access.redhat.com/errata/product/479/ver=/rhel---8/x86_64/RHSA-2026:13577

Issue Links

• is related to: LU-20267 kernel update [RHEL 8.10 4.18.0-553.124.1.el8_10]
• is related to: LU-20128 kernel update [RHEL 8.10 4.18.0-553.117.1.el8_10]