ELBA-2025-19931-1

ELBA-2025-19931-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-11-11

Description

[4.18.0-553.83.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.83.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.83.1]
- fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367}
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781]
- i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781]
- i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781]
- bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781]
- bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781]
- qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757]
- fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215]
- jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215]
- jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215]
- s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611]
- mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}
- mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.83.1.0.1.el8_10.src.rpm	50f4b77b318c0e2ac4e1c12966569fc7d55a2f0c0506ab9b63d4f64dc31913b7	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	237e507f5668c1917b78b8e6b85b8adfd2d475843c932664759cc6c8a015f7ea	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	c2f636dce5fe81eaeea427f95cffcf839a6044e32d117e581f2bb0cc765eb4e8	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.83.1.0.1.el8_10.noarch.rpm	011b136d2491be851e5a6356d54831d9005454d7bf485348de4e23efe717bbbe	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	a4cfbfc53ad76e9c9b0b825692f0d1494230002df4eb5bad36f0e5592bcbdc51	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	2fe196155b33a7bae1626ab9b643eed2fe05c785e7fc39e71b8a48bb12a0e449	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	8946119b325f4b1c681b83a7a899ef9927cf29174b1c24ea46d8bc987beb070d	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	cff2798b9049c10bc70d3ce5e0ad7fcb1eeff52781e1ca5d6282f7b1a5687fb8	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	c2ee1f8f03c0c6b8d553cbafe9189657d3684396e5ee508fba3cf4e5fb82efaf	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	15900d7f39f8d7b2996366f955d9800de25a78e73f29ab6b2531b9dbd31cffbc	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	18cb921e4fe022bca1c9d4449dcd6546b12438bc4f9c9dc069f9055be10c58f6	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	377d943954fa7198830abaf2b889604eb8ecc66070e09145dba395f79b501d84	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.83.1.0.1.el8_10.noarch.rpm	dcea97f925fea30b6a20250116abdb39397cfe4fdfeb54a081f770a45bf72808	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	96aecd168a72519baf123d79ca81dec10f3864fead57caa829a1812f6ae9eb96	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	738635a46d8dde420d14e3694896c86ad735a5d3460d204118106a7c721eede7	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	af8b557bd845f9b05d8bc98be91afa4dae74765354435ee5c1d6911e447a4d6b	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	1603c40739d49157c9d58e056c48b60526ca05ca40b7c985b6f8c508e3cdf90e	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	34c2b6577edd775611816f2399cd5a32c24c917cab1d436a2a4f33750493ef16	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	e440336c3165df35dfd08264baf9dcee846b3603e1ac5c7e630002f7b598a26d	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	238fef86fdbe41e1ea42eeab90a70c4d073d8e6174b6dd43160cc7fcd7c65648	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm	13af6f17bfbd628be62c38e64f2e9e97682b9b3ce024eccb8fd8fa20f242ed0e	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team