ELBA-2026-36366-1

ELBA-2026-36366-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-07-13

Description

[4.18.0-553.141.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.141.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.141.1]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112}

[4.18.0-553.140.1]
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450}
- vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759]

[4.18.0-553.139.1]
- NFS: improve 'Server wrote zero bytes' error (Olga Kornievskaia) [RHEL-147665]

[4.18.0-553.138.1]
- redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788]
- redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788]
- redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788]
- x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788]
- redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984}
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.141.1.0.1.el8_10.src.rpm	f13101ed1c4cd4aef2c3994239e6768043fc93df2d656bb98b7e40c4ed0dff34	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	9af508e06f2075368f650f8b9498091f7cedb5e1088e04dc6e66887a1c832277	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	52a23444ed387bbab5b8cbae9f9902321ed6107545b42fc796460b6075f13693	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.141.1.0.1.el8_10.noarch.rpm	bd16a43f059867a9a2dbbf7e69fbeafd5a1bca73c3812de6d96503c5b6101a34	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	c55bb121f29779bfc45873eebbd4dab580deb0a953d606446b4e5a4a935111ab	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	d5f55b9cca66d96e516d885b96a11448f7de1919afb34461afa2f0b8a15bae44	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	467b93b2af08c875d99cae6e97bdbd49071b7fabef7c3b3c9a2849dc04ca79c4	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	035e016671d1c970130adf47b87f9209ef07d1826b25bb34eb48d65468241ae4	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	3bf084b9b5cc1e272e047b05b36a35870c81415e9600bbbd90b1425185dd30f2	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	586083c3875d7fe33f90ac00175bfdb2cbf73c4d2edb2d22df6522f877f691cf	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	eac0b5b27d9781cebc868dc6c612233a5a06618ff3036b1027e8cf330b43452d	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	5d24a2c84735092372ef63b09c158faf6ddc3fbbb6365add6142788c76adc4b6	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.141.1.0.1.el8_10.noarch.rpm	f2daa259e2bec74c29cbb48fb88927728ada1481c89bad296cf74ead297dc1bb	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	6960e0e9e726623de7fa4dcfd18d493b26e6ecc1de0dee895385d6013ab42b63	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	707df3f00603fe620fe88ea32263b170b174e22a6f5607d929b30375565fbe8f	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	592d8624f13d5f742764609a90a427988bc628944e5f96a2de554eada5eecdb4	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	95dc56b23c9aa810e8e4ed83fec445a2cd1abcf1ab4a7037a087eeccfe21d2c1	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	66e40ec57c956cfe39bf740a0a2e5cad4314352f4e42729516d1b6951a74b296	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	98a8790603a154ee733f56a4cb58250feb859008fa2573c46fcbfe8c1e36670a	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	cd4959429798e1c44e95af4878ac361db36d79371dfe57bc8191122ef050e086	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.141.1.0.1.el8_10.x86_64.rpm	2f3f34761145d909cd19df7b2ab2f2e2a03101f261676d5c0386bc7193a14b1c	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team