ELBA-2026-27811-1

ELBA-2026-27811-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-07-02

Description

[4.18.0-553.137.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.137.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.137.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435]
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435]
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435]
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435]
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435]
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435]
- fs: use backing_file container for internal files with 'fake' f_path (Ondrej Mosnacek) [RHEL-179435]
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435]
- ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435]

[4.18.0-553.136.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056}

[4.18.0-553.135.1]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (Jose Exposito) [RHEL-178825] {CVE-2026-31488}
- sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520]
- RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.137.1.0.1.el8_10.src.rpm	62e528e324df43e774d1606971974f4814f67ef0c2cf914ef91db10eb18c041e	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	6ed97d79b7fb8dc2f53e453371bd90efc2d357ba521edcccafb56033e0944541	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	3602290861bd07990e468e628fa73dad8635cd7d0ff9007cd4b2fc347c94086b	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.137.1.0.1.el8_10.noarch.rpm	fba011043c36e265f596ddc1befa053baf1f5243b8fefe9d67e1ff04b86b33f1	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	e2d91c12535776fdece25936ab9a1ab37a9f85a39357c12fb52da16dbb8e8ef2	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	21fefb488ab849cc50f4748bbe40c57af54f7187b930cb33c3beba62cdbf1168	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	da8bbde1d81fc9aacf96f04022cc948378d1b8d98cc63620c8b44613f695ec8a	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	4fba3d2d5c67b41d3b5b9ccb9f94948b74be362420d448a0ab2523e98543a858	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	6489dca32b0845694f6ddaa03adca4d1a4c04daaebf549abcd3b119d3e33478b	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	f4a5423749afe58c2451deba7e069ea50a3b17468c5008201b2f572bf1105824	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	179baac8e0341c5476d98e25a28a3d45aaaea88a66819c84f499d7f7fc984da7	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	598b2320ab097c957f7e84b95e361974d509042875d5f09ae0d0c8d8b79e06ef	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.137.1.0.1.el8_10.noarch.rpm	264edd2ae24011e8ea108a1a905038c9e3170a7192146198270264c1a347acfa	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	cfff49320524fd61913c4e2e2e5f7ac411e57c6d8cd793bd9116b4dbe5036adf	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	9cd053fd8b3266be22a6c01505f0317874a6cf39934eeb72cf2c0ef65be9882f	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	f21520a149520635bff05c148cfe448e9c00f156b1a3a70b51c566a678df3fe6	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	4165cc3101aa4ed59ac80216e6c825a7308bff7648e5ccfac87c3d44465ba03c	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	220da461f9fc5ba4718c72769a14cf00f776f56b7b08daeeeb1703972f6bdae4	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	891a77c81b3c4eb4d604bba95d37e7185d06b9c1369f173a89b4089bbcb17c46	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	54823059be94ad5cde0abd8d0c85017878e736f66da18ed0d3bac5c286e24f38	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.137.1.0.1.el8_10.x86_64.rpm	7ff4cd548d3b0e70ac5dbceccb30ea0f0725fe4aef87d8701de0e30ae637852a	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team