ELBA-2026-39179-1

ELBA-2026-39179-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-07-20

Description

[4.18.0-553.144.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.144.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.144.1]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180170] {CVE-2026-46116}
- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193938]
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179325] {CVE-2026-46086}

[4.18.0-553.143.1]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499}

[4.18.0-553.142.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113}
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Stop passing 'direct' to mmu_alloc_root() (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341]
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066}
- iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.144.1.0.1.el8_10.src.rpm	ca3e9036fd71987008b911021c534abce3a0790bec5efeea4d0685abd8213147	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	d8897a4b5a0b0aa8a52923a38fc0ad64aaccf2147dd1c737cd81d7f88ba554b1	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	db06ba51f7eb2b30775ef7e3d77b7123171e0d77c7dbc85f8a08db997677468f	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.144.1.0.1.el8_10.noarch.rpm	be1909690b4d12f114e241ee51a246fc8449d3ddf3a84957b8ebd8399479aa80	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	756bb61e9494bb2b11cae385c8e83739466e4b5bab4d760b583574c6ac519e0c	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	ed68b2639962b1c676a4c4c18839e3919b80a5de9ba872fc1ad52d0b2ecd0c4d	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	a79a224e7b1554d7377cf21b7e12f63fb6f33ca1cf1b8011c99b3a36809bdc19	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	5d008779cf8278ce646f5fb22cca5350ecba22063393ec3f63f16886fff1e6bf	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	74673dd0ebc33f9f579b45c8cb90530dc9a360539ce10d147859f3553dcdd39e	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	adc5b5b0f88158c39f57ae12e8fd93b7d602a7e55836ac4d8fc1f69108e56cff	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	a1fb5db17f08634245df56a0c776fad8f67847b3bf7c74fa9d17e4ca3f3a0e2e	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	cf8c9a41abdabaa713b526f450c48586deb6b0abe3650ec828f1f68c25d26f0c	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.144.1.0.1.el8_10.noarch.rpm	fde3c6c8f06be8eb678caf0563d2f754741c472b43732aeaa36e6da06fe0eba1	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	35bd7b233fe3bc5d7d88a19ed42e4d62ceee7e43cced7043b24d6119b7c20bd1	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	b4cd8941ace6870e5ca530a9f7b4ec4aaf8c5255306e89fa230600dda0ce1cd4	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	6a79262c462c6a829789fbcfe59fa7da4c612309294cbd31c374b9f21be8e470	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	061e80cecbe8795bbf52423f68397f73ac0b7fbb7b8a6f2e923f80b36378e291	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	730201cbb88d3f12d420163a1a2594e4ce888e69bf4a7c3ffa173874ddc17f5e	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	6dbdbf8a7c6b7b76aa5fb362918311b5e1cf4972b1d508ac27425314ce6c3257	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	35687f6087521dce418af6d6915fe2ab703d0416fb241039e086c2eab13fd03b	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.144.1.0.1.el8_10.x86_64.rpm	830d7f222900bf67b5db4daa95da188df812901af3a315535e6ec619506e6f7c	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team