ELBA-2025-9580-1

ELBA-2025-9580-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-06-25

Description

[4.18.0-553.58.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.58.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.58.1.el8_10]
- ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764}
- ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765}
- net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765}
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535]
- idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116}
- idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182]
- idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182]
- idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182]
- idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182]
- idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182]
- idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182]
- idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182]
- idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065}
- idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890}
- idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182]
- idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182]
- idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057}
- idpf: Acquire the lock before accessing the xn->salt (Michal Schmidt) [RHEL-71182]
- idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182]
- idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182]
- idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182]
- idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182]
- idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849]
- idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064}
- idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274}
- idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182]
- idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932}
- idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182]
- idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964}
- idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182]
- redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182]
- idpf: merge singleq and splitq &net_device_ops (Michal Schmidt) [RHEL-71182]
- idpf: avoid bloating &idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182]
- idpf: split &idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182]
- idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182]
- net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182]
- idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182]
- idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182]
- idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182]
- idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182]
- s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783]
- s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783]
- s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783]
- s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783]
- s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783]
- s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783]
- s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783]
- s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783]

[4.18.0-553.57.1.el8_10]
- smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825]
- cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919}
- security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.58.1.0.1.el8_10.src.rpm	7d6daa2fc9acfd4551d8aa825941390712540e49f3848f64b5eac7b0aa46f2a8	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	0e508fcc8d8f95a7b6c09cc8ee6c11b03df57cb1c25b9517db234108617e7b7a	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	1d6bea1ee5894ca82a0bed6d784186f1407fd145832c1548433ae28ae80ac545	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.58.1.0.1.el8_10.noarch.rpm	ebc865ec364624688c8c6ad89ba30803c5b5a1a3d6d9d70d0b5944563959d6e0	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	f347b54614dbb5593236eeae310f751eaa1eabeba638b9538e3f7a26cfe12c5f	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	deafea3a70920261d13f9fd5054c551687e4641dcef284f5b3caccf14ab43d5b	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	e3ea939723a2010d5d968e3114b96fe83881d798ec5d9792718961e6d5d43214	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	abd10bb08fff1142326fd79f3fe160d5b2e16857bc4686b2c32833bc4ae8b52c	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	6953dd9389b215bcb9dd86c39f8f27410ef3b07408ac2f4d8cc310d85a302d75	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	646bd7a760422df061d1c7d3513e080fd138fa8cf78fcd0cfc7830616c34c0f0	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	cf16b3209ae60a2c4f49cc8c49acae2dc270e24a2b469926e46624bb21713314	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	7ca597db4d9d70f00059f3eda217ca02c7612750ed846d9674847d2a03158915	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.58.1.0.1.el8_10.noarch.rpm	9aecb27ea2985d71b42b8808dcdee088dd7ee0c0a5fc06f915f2d85c8e7e6bf5	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	cc65c98b4b65a6b3edbffd874e3163e244a06bba403b23f6871315769061df93	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	f9eb54ea8da65102cb43c4824e5435d3f6585ba86dfce484988ef6db6b34bd87	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	a0656bc6e8e52e430f78530083382d4f4b4394273bc784c1eb545a734b4e9ca1	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	661107baffc873bff2d4ce2c8a7c1104f5e8b6a3f36c75b740707de548ce06e2	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	b1e63de7dd7428e0dab01a9c027fe78814244e43379b476ea0f540e702242da7	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	600573ac919659b2b464a35e42d87da829e6b65d6543faab3973c1201c0c281f	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	564b13c00c10d315518256aca671203844b765bc5f699bc2bb8fb93af79814b6	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm	29c25b82f2aeb7c67d106c12523e55eeb5e3d4678e554da77df6300b4689abcc	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team