ELBA-2026-2264-1

ELBA-2026-2264-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-02-10

Description

[4.18.0-553.104.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.104.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.104.1]
- Revert 'audit: Avoid excessive dput/dget in audit_context setup and reset paths' (Alexandra Hajkova) [RHEL-145856]

[4.18.0-553.103.1]
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}

[4.18.0-553.102.1]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]

[4.18.0-553.101.1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.104.1.0.1.el8_10.src.rpm	a63e4ef433dcfb6a47e83466ddf28259d3725a6057465bcbf6c31035c711735d	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	534eef78aef56c62ae2ad4416d74c000a16016d4d088b9a7495f595c03011d1a	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	d357e96bfc6d59f9569379f38e495a3d2edcbef81cca64ad0235aa777bd13782	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.104.1.0.1.el8_10.noarch.rpm	25bd7ae6f2255b5430aa8ec6ff2e366063e51051734e55086076ab19b5f42899	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	af7ccbbb68ea84680233566c8099813f2e4b018a866dc6f8207c7e75de53100b	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	ecaf14f6cd8ab607e5c878c2b2d7e3f0b1592e7dec5d031a86b7b4a6e90d0059	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	4ff60e4e30041e828ae2257e637a50e49e8bbb07cf36d6da09944c72b3593f12	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	105dd052acb91ab7aae0e397bd2b27c8eb2c410a5fd0e7720212ee4c39859d85	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	018167564cfca6f10854bedf35811d6a42c945293cd134f47e0d120f94f2d278	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	d0b088802fbdca748855e0637e47e49ca11bcbd1a1e1baff54bcb44c17d278c3	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	17930b3b094c878638ae5bd8e373a4e7f21fa57ba110ed2587ccbfc1763a49c4	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	457538864e808d20426cb1be8626cb0251cf63780b18c839bbc93e024b294b1c	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.104.1.0.1.el8_10.noarch.rpm	04faf1b273941fbfa11bb17896f67ede49196f2644267db14832b498f8dc0e25	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	90abe60933ca657c34e2b53f44d7b520c717c6e82e941b2b4d1fd03186ae0a14	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	819f8e52f210a4a69f6698bb6f9de73ae3d762058a3b1a7f503ea2a8aeb5afad	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	181bff14d7e29a1597c924b25cd5ab06c8b772e4c3b616079cd54f519e4ab93e	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	65b35d8f027414ca8307d586628db4081bd5e8ae1ba4cee51c5a507abf4a94c8	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	2c9d5f7d96cd51dcae54b3ff51df650ad4d0a469ee82fc3853a9c7aa56e6ff56	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	b18e5210997f086f9eed94694a9c9c969995ea9d151509e7060de56cdd5a9aaa	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	8d7ddcca0788c670eef01c60196731690776df6887d6e91f6a83bdc9f5e10c9f	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm	2ee4b574a838e1a73a69585aeccd736e0465a01ad8a6e5c1638899701ad06e71	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team