mirror of
https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9.git
synced 2026-09-09 00:08:12 +08:00
CKI KWF Bot
838155400a
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/8658 Fixes for various NFS/NFSD CVEs: - nfsd: release layout stid on setlease failure - NFSv4/flexfiles: reject zero filehandle version count - nfsd: fix posix_acl leak on SETACL decode failure - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC - NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr - pNFS: Fix use-after-free in pnfs_update_layout() JIRA: https://issues.redhat.com/browse/RHEL-225523 JIRA: https://redhat.atlassian.net/browse/RHEL-226326 JIRA: https://redhat.atlassian.net/browse/RHEL-227787 JIRA: https://redhat.atlassian.net/browse/RHEL-228034 JIRA: https://redhat.atlassian.net/browse/RHEL-229413 JIRA: https://redhat.atlassian.net/browse/RHEL-234058 CVE: CVE-2026-53391 CVE: CVE-2026-53392 CVE: CVE-2026-53397 CVE: CVE-2026-53399 CVE: CVE-2026-63800 CVE: CVE-2026-64298 Signed-off-by: CKI Backport Bot <cki-ci-bot+cki-gitlab-backport-bot@redhat.com> Signed-off-by: Scott Mayhew <smayhew@redhat.com> Approved-by: Roberto Bergantinos Corpas <rbergant@redhat.com> Approved-by: Olga Kornievskaia <okorniev@redhat.com> Merged-by: CKI GitLab Kmaint Pipeline Bot <26919896-cki-kmaint-pipeline-bot@users.noreply.gitlab.com>