ELBA-2026-45115-1

ELBA-2026-45115-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-07-31

Description

[4.18.0-553.147.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.147.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.147.1]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026}
- KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228]
- KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228]
- KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228]
- KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228]
- serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191]
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324]
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059}
- xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174]
- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738]
- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738]
- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738]
- mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655]
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655]
- mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.147.1.0.1.el8_10.src.rpm	bb7313ddd10b7c4e786f8a2b1838ad7dc73b67a41d9b32d7a967845d21f70149	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	8434b9afcb4458de065612266915225fc059fd88d348274f8c3da6abc1ec51ba	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	07421b8ea7dfc369298ffaf25fcc2ff4d3088e4e5e89c02742f6136e0ca62f19	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.147.1.0.1.el8_10.noarch.rpm	beb7cfe4e43503270a12b289d53105866aef1134056423920bcda6100bb42cf8	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	c51d6fab5c36e0809609438de02e33d27b7f8bb729e41e0c2a0473580ed65f61	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	48b8d9b5a5edd6cf7721d98de40552c2d0cbd919f2b33a32e962d18e36f7e0b0	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	d8d23351471eb61f9565ed0e5f508e96c41fafa2839ab28a3bd7d06cbda937e2	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	4994bcd2127c5f14d507d18f101b8b65b59f62eff95d2947f3f66acf90242513	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	f99023d3f2fe479a52bba09c288d5595f5c80910e1049d7224b70cf2b54e2c97	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	ba766c161bed747e3ae26a5d1a31d5557e649b489ea18b1950cd3da28b8f2edb	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	f57652ca5a6915da7c6ed8ca83b701bb018230803638b9e0e1a34ea2abf5dc94	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	2f98d8f2a87e099ad296c5df4d733f6393ae66e3d750e0e6e5ad640b760fff15	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.147.1.0.1.el8_10.noarch.rpm	39ed9c09bc95c22d95a9ddbc6b24e84f0fc1c96616d9425fc8da2a9c9e120317	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	78283f471b4d1aaba27c1c8a8c47386f2d0c378689e842d5b9e3654253cf3e68	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	ce9617f246fdf72285482206b6ffc1ebb3ced40042233b99c3fb34272a60c056	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	106f74c1e2ba2a42dd7b9011c64cdd6f31c9449185a81f2d5151972be93d3829	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	10903c4b7599f902f0454b281e82dce197e976c3416ba109bce840839c689140	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	5bca9fa9117f5ac680b9f840ac9776f73349b5abdd84700a7ba106ce98272257	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	8111bda76c58900cef1b027515c4e347193d960f424f1ea3cce3721b0b579c02	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	e325b4fba3e31c3133a690264562d1d83587d025f1913b147a91d31d9b33e913	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.147.1.0.1.el8_10.x86_64.rpm	f365e5ee210cd031e7d061b4f686bb4c05ba0bcb1dc9f1388119837191ae82bc	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team