ELBA-2026-39083-1

ELBA-2026-39083-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-07-15

Description

[4.18.0-553.143.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.143.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.143.1]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499}

[4.18.0-553.142.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113}
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Stop passing 'direct' to mmu_alloc_root() (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341]
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066}
- iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.143.1.0.1.el8_10.src.rpm	dce258031e73ca604e690d8965422e3d23438402ddb3fa6a2721dc7a5d16f47d	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	ebf54c9fc4a4686a0cc6d186b6cf25fcc8cbfd50663507166f7aec11e5f09be4	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	7828c99bbcae32dd09c8ef72b245cbb8844deec6616bfb46b3e0c8de924bde74	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.143.1.0.1.el8_10.noarch.rpm	05afa99a98e855631d6557dffbb37fe125b792fa7451bfa89f0ff6027c0d6351	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	017cc33b3e7d064ed9e5cef582e4f9b368578259d1508bd2849da14ee310b1e4	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	e06b866081f42a29c55278042b1b79fbf91a30db0a3bdd77a15dc0cf4975e09d	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	62254fe26240dbcbdff39df2025bd2835839343f29380f9cff75d93efb0db9b4	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	d390fa6bc0ade01f5fa33698bd42685a7cafd2fc8c8748969a6b8884dd55a4eb	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	6d53ce1cf89e4dbb110663eee5019d4a4a4e3eef93600ae66acc31fe928c8434	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	193102147b68952e6309901933170cf16ff6b70edce5c7f1037d544d235c509e	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	f8d2e18c7a764613eee07a2707438bfbee6b98743a32e5be585e7f5fa9273283	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	7c5ffdb9a3526ff40f97f4b4eec01bd2e751ba9b8e49a85a1e4559ad70053f99	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.143.1.0.1.el8_10.noarch.rpm	8fb2b6378e8004df0acab2b8ab538384efc1845bca4925cd6dfe096434852aef	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	84c297061ad58c91a5bcd2b50842eb3907f6a1644e716044dc91e9cca47ee29f	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	b658bee60c53499fdb283fd398acc3f6f5dddc60a5ae499e85b93b2a70075c00	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	d143d25833199ee2cef1169d0d134ac6f737377119854289fbbe5c8538975601	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	31baa084644537272974704394a1b171e66e384cbcded2aa6a73ad811ced1c3e	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	74def11fcc05913cf68757ca9bc108ac525879fa409caedeba59bc8586319246	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	80be705cfa78f15f6c6c531f4e068cc00e85ef096f79eb8ff5b9c6ff7e20a543	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	091ab6e2a75254e74d0af73b987c3fa9098de743bcafdbdcc8e395bb2c127591	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.143.1.0.1.el8_10.x86_64.rpm	76ed0cd33f2f88f59d1e6668caeee899dedf0616a1c88368b67a1320a87a9e8e	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team