[ANNOUNCE] Release v4.19.325-cip130

[ANNOUNCE] Release v4.19.325-cip130

[Ulrich Hecht]

Hi,

the CIP kernel team has released Linux kernel v4.19.325-cip130. The linux-4.19.y-cip tree's base version has been updated to v4.19-st14. The trees are up-to-date with kernel 5.10.251.

You can get this release via the git tree or as a tarball from https://mirrors.edge.kernel.org/pub/linux/kernel/projects/cip/4.19/

  v4.19.325-cip130:
    repository:
      https://git.kernel.org/pub/scm/linux/kernel/git/cip/linux-cip.git
    branch:
      linux-4.19.y-cip
    commit hash:
      ef917a8bed27ab284a27aa2e8e242bab707d7aa3
    Fixed CVEs:
      CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr
      CVE-2025-71232: scsi: qla2xxx: Free sp in error path to fix system crash
      CVE-2025-71235: scsi: qla2xxx: Delay module unload while fabric scan in progress
      CVE-2025-71236: scsi: qla2xxx: Validate sp before freeing associated memory
      CVE-2025-71237: nilfs2: Fix potential block overflow that cause system hang
      CVE-2025-71238: scsi: qla2xxx: Fix bsg_done() causing double free
      CVE-2026-23222: crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
      CVE-2026-23229: crypto: virtio - Add spinlock protection with virtqueue notification
      CVE-2026-23234: f2fs: fix to avoid UAF in f2fs_write_end_io()
      CVE-2026-23235: f2fs: fix out-of-bounds access in sysfs attribute read/write
      CVE-2026-23237: platform/x86: classmate-laptop: Add missing NULL pointer checks

Best regards,
Ulrich Hecht