ELBA-2026-59821-1

ELBA-2026-59821-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-09-01

Description

[4.18.0-553.158.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.158.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.158.1]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320}
- selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276}
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189}
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400]
- usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088]
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.158.1.0.1.el8_10.src.rpm	70c558e21ad8094eee90fe732efb4a670fb38e73d2d978c07457f8c81dde4c28	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	cf05d6589842e6eab6efc32c175837257e1415ee03dccd0c00ab0f6b25c19b30	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	6778e987b66d7689e2d21dce36ae8e40563cbefb7246379de0ebb7cc869cdd95	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.158.1.0.1.el8_10.noarch.rpm	f4c6870d6a69a34b5070dfab620f353b7a090a8114afc5cde5254adfa4e90dce	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	65c937224563124390d15bb8c373af524419f32704a454cb367e66eba6bc300a	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	fa987d869891b109e55da8d0b6c826511388046a029736f5ab202369cd679a5a	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	aca10b7a34ff1adce0e01c97b72b323945b251dd89235ae27324b26d4feec41e	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	bdc44eeaaa95cc5c74fc212b961ef01ab7437931a946936cf31138969eed3703	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	a1a98d7deddc84430a2ddcd31dff3bc69e3173f9014034b8ac8ba5cf00103892	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	09cab64543321a79e54bdaccda03e98df97957a3c2caa70f265e6a966ea81515	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	0a6f5f4e713a3d8185665320856683008044c5d24e2d58024975cd35b52d942c	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	af63a67d790621e7e7e042bf6e77c81a18471828aede45a44a590d7027dbd1bd	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.158.1.0.1.el8_10.noarch.rpm	3218b8083fcfed0cc7859f42e76b99b2d41ca072179fc3f31699035f748abff6	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	7e2bf2a86ed0e40c2210fffbfb58849ca494105111bd7e4c96531a59c50e1f95	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	a9d7560c18de37beb109d0cb8b375794f0cfd9ef515c926ab6c82af5c1b2fc22	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	546c0ac7e2437a6a8d5484297f1d71dccbd5ae2050803e8e8a52e840ba6475a1	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	cc554eb6d252e7bc2d2d397010925a946813c657572c13fa4c59c382f7b371fe	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	b4b3460472aec906a40266744e3360d442d1a1ad7dffd12af6dfad095d0ad313	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	1ed01a5b1ae52558cbd536d30873721ab5c750b8f807be38feb2f19c868386d2	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	d9a4e5bb32eedc9fe30d96d91e5d0b9462b447dfaa12198f7659cca2f03ef8ca	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.158.1.0.1.el8_10.x86_64.rpm	e78ef833b2f3233f76860035fa52d4bc79fc556463b1f1a9a8f7341d8abb0522	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team