ELBA-2026-13577-1

ELBA-2026-13577-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-05-06

Description

[4.18.0-553.123.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.123.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.123.1]
- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187]
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401}

[4.18.0-553.122.1]
- nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724}
- net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252}
- kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252}

[4.18.0-553.121.1]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.123.1.0.1.el8_10.src.rpm	bd1b0c8f2d65854684df8ea3de7dd55f02e78425b86fb5e871ec36ec45754f64	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	cb877d97860b9f98049c6065aad256f0cb0490707bbbc971fb608ed28f66ef97	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	107adb757cf5f76659066426c7f7e05bddd4bc1d959a885287e3b4cc64cfb097	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.123.1.0.1.el8_10.noarch.rpm	23028cbb42a424e2478e994339b588514c1ea3d32449ac366e82f67557122360	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	4fed3a2ca247af6e1a01d7057408c2ed77f9296573fa0bb72bcc6a48740ff3c9	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	3898b6a9dd81334c2e5fdf68f82e1fc0c8b0d2e23ebe47ad85da35ae4560667a	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	f59cd52f4d894b523c13ed786fa34e18ee6c4378d847c48c6054fad87d341010	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	cf754bbd0887a66fcd15c6dc6bbeff914af427f6aa4a5fc71f64388ec0489faf	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	9fc12646929a25e8cad7abf880ca365e52cd38c96182dd378fa9473e541e9150	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	135d07556946280519c4076144fc96d9b10948d570fca3c3d2ff349fd36d512b	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	abeb324c325552ef8ca5c37ed95c291dfbb3afa44d6a8cd897307d4a4c94ae20	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	9d0ada6b0c002348834b3108d380252d58ae21fa6be1d33312a882aa9653f998	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.123.1.0.1.el8_10.noarch.rpm	92ca42df67bcbdc312813ffaccb968451cd47c75e00a3cb6c952c41ce2bc7881	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	dca76311130f87050b2f6c7119e6070e037fd48ec21e326aaa00615363f81973	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	93b234012596a1964bb34f871e13146f375f0868190c6c7d97552bad3b5367d8	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	10618b0386963e07a8949224916798d0f7154abba7251489208fe60f924fa737	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	b4d00eafa1282affeb13a79ade1c0eaf47f58633ef189f18688b73d1163f3fb6	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	320c2a8a4b5493dd4780170a674b695cfe6a69524e7a428c141b60eaec0fe8a4	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	12066975f9fadcd0533520a8439d02a3198230b54b7ebcb704f46bff9a3fbb9a	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	82dbd82a5f15348b148ede3b1ecf602addf70a11a29cc4c85483bfaad632bff1	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm	bcdc0252b1a0d4a826c9b2340de579a01e01e30943be0bfc70ddcfb27ef35d4c	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team