ELBA-2026-6571-1

ELBA-2026-6571-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-04-10

Description

[4.18.0-553.117.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.117.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.117.1]
- nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193}

[4.18.0-553.116.1]
- nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930]
- NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242]
- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242]
- pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242]
- NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242]
- flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242]
- NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242]
- NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242]
- NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242]
- NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242]
- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242]
- SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242]
- NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242]
- SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242]
- SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242]
- SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242]
- SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242]
- NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242]
- NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419]
- nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419]
- pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419]
- NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419]
- NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419]
- NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419]
- NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419]
- NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419]
- NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419]
- NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419]
- NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419]
- NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419]
- nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419]
- nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419]
- nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419]
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238}
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231}
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.117.1.0.1.el8_10.src.rpm	b4e76ac2aa8224b065dd9d904666e399347302e8e8098e9dbf8c3bf491e80912	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	78f108991a4e1da6224eb4bba0c04fa1db380d16be3085cb3836cb9be6f9748f	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	e727d2e12a3a8873cc7cc1a1a927256502fea7c293915bc707ed1aecb637eec7	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.117.1.0.1.el8_10.noarch.rpm	85104dbbf63ae7d8df812f8f48058095b49b42d5b837d4d46b4ff94855723ac5	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	233ef0502134f7a6277d4cf30449c994e2e99e0a0257ff1f355e65341b45dbb5	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	32c6f5c0ecc79467d3c3ba2fcd850032335e16c103314468b2a4bf3d6201732b	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	a7bd86e06b6c8f5e07fc179d33588763762fecf80928382b22cdd61d7cde5c9a	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	adc0bbcc498582015e5313dbf3864dee943bec6b89ae9669b7ad851e1b3483db	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	1c7a6e14f0c0ddb97030daff9bad03ad42789ee00493bd2a61b13e56f69501e9	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	155888e3cde861c54c0cb5b417009c5b3e4ba206dc114be2527ad8f33e294879	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	cde16f433c3d164113b115b2d90263f583f54d09c9711e4952317d08e2ac3402	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	9d9c4a4a0f31fbb20a318d3fcd39e97301e146e6c7f9029801d780c4fe2328e6	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.117.1.0.1.el8_10.noarch.rpm	24b2e3ecbe0558ab272f242a4cde00f6b3f5de81fe2848432cbce9ab16820ed3	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	a446ba14eae42ce6f95447c639788f9f6abaf616542fa2d5cc4d1b0d53f00436	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	ebe24e383a5c73dfea90ec01a30259617e47ce488630e6e859f94f3ccebbf332	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	ad78dac7262f0cacec8bd882d0538ee9a3dc88d6b19f95e5a1043d3500dd06b2	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	5acbd6ada1c6112e5496f6709070583e7e8c5f272e4c92737ef64a95eca5af94	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	a2d3f02b960e8036029a8d61d417d0e3654e93226bf756a5a252a3c5267dab88	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	28145e9a0af776ed4a85c29191eec82b90a68a2cb2764c173e28c53c8db1beef	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	42183d513ab467b69b35ca97ac36693fdf6373ce651fd6b54a423e040c36d988	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm	3efd46dcb4a089a7ee9addf8c25c4fb084f9bed44d7377cf94889a727309cad0	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team