[LU-20223] kernel update [RHEL 9.7 5.14.0-611.54.1.el9_7]

• Type: Task
• Resolution: Won't Fix
• Priority: Critical
• Affects Version/s: Lustre 2.18.0, Lustre 2.15.9
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es) for kernel 5.14.0-611.54.1.el9_7:

• kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
• kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
• kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
• kernel: crypto: algif_aead - Revert to operating out-of-place (CVE-2026-31431)

https://access.redhat.com/errata/product/479/ver=/rhel---9/x86_64/RHSA-2026:13565

Issue Links

• is related to: LU-20266 kernel update [RHEL 9.7 5.14.0-611.55.1.el9_7]
• is related to: LU-20127 kernel update [RHEL 9.7 5.14.0-611.47.1.el9_7]