ELBA-2025-15008-1

ELBA-2025-15008-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-09-03

Description

[4.18.0-553.72.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.72.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.72.1.el8_10]
- scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332}
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211}
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696}
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285}
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
- net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976]
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894]
- aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313]
- filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181]
- x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369]
- efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369]
- efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369]
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464}
- sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758]
- block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758]
- blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758]
- lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758]
- sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758]
- sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758]
- sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758]
- sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758]
- sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758]
- sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758]
- sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758]
- sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
- lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758]
- sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
- sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758]
- wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758]
- sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758]
- sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758]
- sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758]
- blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758]
- blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.72.1.0.1.el8_10.src.rpm	b2de76a25d042af4290221ae22b2c804fd7657adb9d2d3334d2e48f07f1077b9	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	a133a77501b5ebe2a6cb5fc7c6cd04e3baf98e5106884199892664806aef2e4b	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	0bb3a5d9070d06af53c37f877466febb20fb43cb5268346ed9641c367e204a4d	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.72.1.0.1.el8_10.noarch.rpm	57da09cdbdc571aba0abc1e16c530cd9bc016b2bf7795e9473cd6233a982a82c	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	a8ff200b9fb0918ba716b9d7af76c14f414b9453556dddb7f943db06ce89ccfb	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	2a0939d0c0ff10406a4b1215229008e339edf0acf7f84ad09681ce0c0f3f6f8f	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	6f3fd35df4fdf6fdf4c70d4c8c77931852553f18cce74e458aa8a7e112fd18cb	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	be9bddbd5ff335204b764231a0660d4283043c2abb2bb5c0bd0457babda69382	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	4606c823743be8fd05a36e9c09913b31eff00bbebbcf59dc75461f5f3e311987	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	d8d985814ebb05061e6cea044aff4a3cc58f02a4c4365c4d2b71fb3115cd0a5d	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	e61fb411f6909aaa50c9c5b7bd5fc91846a4ec8a16bb6e1f1af6fc882b01697d	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	549272bce9b4cc5d6f943d4926477f58a34a186ba542f818b5121c4dabab2524	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.72.1.0.1.el8_10.noarch.rpm	401948c359ae9723601728eddf4f588932a7d893634a627a277c8291932826a7	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	d7abee32cf4541041bbebdcdd1c50c93ff428385541cb3e3d2bd0ca83e812f23	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	7742b0ff8297605717b775e18ee062e78f18107157258e82f37f29b140bac31a	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	7f20c759929e39ef9b662b96c13437349115c29590dc7891392429e596ca7033	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	ad8a64eb7d69cde386bd8774a3969b91f267457b6be65ba808616ad9cf75d82f	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	a0a3daf14568dd7b6545cc146c9f56e652740f5b908d3c8529290c6517b87450	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	29293e3f2848adcc9fc59d9baf7ef6930c36b02c2f6bced7b692d33b0a8bf8e5	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	c63eb56a1c0acd03cd88caa55779594e0f3607c80d051bd99235aa70b84c4192	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm	605d4134ba04a7826586e1ffbb676aec7965035ee974b68014babd0fd7196a0d	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team