ELBA-2026-63014-1

ELBA-2026-63014-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-09-14

Description

[4.18.0-553.159.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.159.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.159.1]
- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581}
- powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144]
- powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144]
- RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492]
(Waiman Long) [RHEL-230492]
- smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132}
- net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970}
- s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.159.1.0.1.el8_10.src.rpm	7ead2b0db41dfabc6a09902299e2a97a80bd1b9e329bcb8dbdb43ad0a769460b	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	ae28c0b1aa510473333ef8b5a0513bd3e3e5234612ec97affba16f535d019bb6	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	6e464bb4267a6a39b68271d076d955350fb5270d45b019c61412ff820af31768	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.159.1.0.1.el8_10.noarch.rpm	bb6d324525a67f40662d9f4e47a808f9303dbb8597ebc54b6652b90f13515367	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	40451885a233703e4a9540b1efbfe9ff8b4d733dd8a3875252a0928851490840	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	41072cf1e14638940920a918658bca1b674d64cfacff5bc07eedbe725c7e66a7	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	acdd2dd5cd6b3796f72c86a9b1554fdb3c70dac2d06b653f3d0ff3de12d42f55	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	11da91e136d67b53f37d2a15702b0204388abd0534dd05ce822071df2365d24e	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	13819d60d5ef856c75ea611c18f0cc6fb27542df4967692cb060231e610a358e	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	08946b5b359ce0e403b7c2f5459eacdfc85ddecad9bff10863ce120d19e1e332	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	b9b34a3f0e22dfa6379571494feb75a2fb33e0aec2a8755c7a37edae542ecf23	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	95def086d9a892ff6304e92ca34e649fb9ef10c188760be7735e5d17810e2078	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.159.1.0.1.el8_10.noarch.rpm	df96f41fe311ec4905f7e837a9dc3d5ebf00c0b993ab9f8eac11c601529faabf	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	f10038b43d2ffbfea4b3e8ce24562dd5e7faf18bc3b5275d567a4a8edeffd899	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	19b344a5906fbe4e16a0c751208ecc93144770aadfee8ef81f64f3a4b436add1	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	9deb3cdb86655469180ea33654b60da827b43ee253382b746b347bb25af8ac81	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	aa5960a606aa31e3793d412ab19e8ab34b6271266e8626f964e6cad916a3638b	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	98adb268e84c331c421b9adc9366f82fb11fa505ff6264f206b4cf279a51a2bd	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	092cb092004c610a509d63bc258e064bd02c4db6e0df0a5e8031620df986c38a	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	351282f11cb6a8ba7ad71de391e43ad2e4a2106be306a1e9dd8f3456ff1929f8	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.159.1.0.1.el8_10.x86_64.rpm	eb1ab2965b83efc5282261c0ad102cdf9811c3bf1ff0f882b2d99fda51c3c85f	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team