ELBA-2026-47011-1

ELBA-2026-47011-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-08-04

Description

[4.18.0-553.148.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.148.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.148.1]
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192211] {CVE-2026-53006}

[4.18.0-553.147.1]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026}
- KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228]
- KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228]
- KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228]
- KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228]
- serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191]
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324]
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059}
- xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174]
- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738]
- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738]
- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738]
- mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655]
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655]
- mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.148.1.0.1.el8_10.src.rpm	a56700dc8d11f4849acedc6df4f17dd54a1f5d76581ba9a27bf0994b335d7a80	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	b73173f3ae0f4bf9c1ab9e34793e4b918ba4297caea0293c85d00cbb2942f19e	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	8b7b7a5c2100fe35201b605bd998d43e6bd609adcfc1e9421a02496d18fb63d2	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.148.1.0.1.el8_10.noarch.rpm	8c40c99b400fe47e385c2b5b9dd01f043071a813d839b4ecfd4691cce10cdebc	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	c145bdf1fcd70d96eba07dbbaaeb4eb704345857902768a3971f25d78003252d	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	8eb4805f5c8370dd6fcfd69791413584cb262916ce44ebabb82b94162efcc845	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	cf236ba44c916bf23cd3428e669e9d90c801b8d07b5e9365a13a933782b714cd	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	59abcde73f44053616837af3b41ba2f51c6e6c2852b440218601cd94fb4ad13f	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	32a384f8eacb768c70cf9098d2c1ceb301d812d6fc1185355dcc456e5d3cd767	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	38b891da5cbeccd05eb28dc0b9fb4b51e97a6fe267deb64fb11e119ab5405998	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	0d77886a2d2a1a9e8f6da3f03d001ee6065b480c38cc88b46ca9cc4028d126ca	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	8338803b3d40e2048b4453ecf2d743da656ce1bc677d79a4152654982d331ca4	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.148.1.0.1.el8_10.noarch.rpm	d7c998676dd084a7dd69741cc75bbcbbab516231aa1f502a3828424e76701f71	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	141e0dcd8c471daa90b339a0f7e08cac60bf78e6ede9801d6cb3a2d55c513286	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	bacb870cfab7790c8c5bca0f524e48a76b29aeb15c8c83c2f0eb213977bf2e0a	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	227e482ab2262155ae2c3ff644abf8647d6246319d0c6ac2a9470ddab0c54649	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	e9436cf2ddac65d2d9d1cc8892ad53eaf0e4df0d4f967e788a470a48e2869360	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	43990eb4d7a04cd6a6b7c96b1db97164fc20cd89f2daf79b1c6b18183f3da58e	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	8ae34a1ed102ddf1c118e7350c00c1a16f6512d39de93d4599f4281de615d68d	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	c0ec5aa00db6fa3301941ebd2efbb72ffa534de9775eb895a6784adc85013905	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.148.1.0.1.el8_10.x86_64.rpm	8164f6b782ed04e9ed4719a3ee39dcd2b5ed633c05ab3ec5280907ba9917d81c	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team