mirror of
https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-10.git
synced 2026-09-09 00:07:04 +08:00
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-10/-/merge_requests/2735 JIRA: https://redhat.atlassian.net/browse/RHEL-183513 CVE: CVE-2026-23415 CVE: CVE-2026-31554 CVE: CVE-2026-31555 MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-10/-/merge_requests/2735 The following futex commits are backported to fix bugs and the corresponding CVEs in the futex code. 1) 190a8c48ff62 ("futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy()") 2) 210d36d892de ("futex: Clear stale exiting pointer in futex_lock_pi() retry path") 3) 19f94b390586 ("futex: Require sys_futex_requeue() to have identical flags") 4) bc7304f3ae20 ("futex: Prevent lockup in requeue-PI during signal/ timeout wakeup") Signed-off-by: Waiman Long <longman@redhat.com> Approved-by: Rafael Aquini <raquini@redhat.com> Approved-by: Luiz Capitulino <luizcap@redhat.com> Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> Merged-by: CKI GitLab Kmaint Pipeline Bot <26919896-cki-kmaint-pipeline-bot@users.noreply.gitlab.com>