ELBA-2026-72468-1

ELBA-2026-72468-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-10-06

Description

[4.18.0-553.170.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.170.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.170.1]
- keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349]
- Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136]
- dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099}
- net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329}
- liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368]
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299}
- RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102}

[4.18.0-553.169.1]
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034}
- arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875}
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556}
- drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273}
- drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710]
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309]
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430]
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204}
- drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024]
- fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323}
- libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159}
- libceph: Amend checking to fix make W=1 build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159}
- ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942}
- libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.170.1.0.1.el8_10.src.rpm	2b0c7b2ca7ead4fbc1b28fb19a77b73eb92e4a7e79dad2c832edf892a6e9702b	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	854a553afd6b3b1e93e2079932f84f5cbd0ef5caf5e600064c3bad01f646a2b9	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	b7f32f36c1537290daa9aee96fd0ba6bb191085b23fee43aae7711fb7afa9898	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.170.1.0.1.el8_10.noarch.rpm	d7f8b257873fd0cb8d30e36da7508fbb89e246cfbe29422aacc588f8ebf3787b	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	913fcac6e8c75be30f6b5c98cf9d2c3ae2cb16acce4a689b67307a26615ae8a0	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	0183c61c69911d60f63970d4b28f5f0e89abd9fd4cf45c0b0c077f2c06849e27	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	981a014d673a65ad188b00d7b5dd43d35660dd2cd22ac869abce848ef02aca12	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	a0b06ea2f1f8b51f41965cf03705a6b75200c5d222ce4f2b3962ae03fea8bf98	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	48f14b561f4146857a4522d5e8272de98285515088b3fd901d8e1faaaf593a2d	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	5e20beab96437b9e97a958eedb10dbf90318aa8d85f3053dbe70446f29e63d8f	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	98d2a5729759a7c597cb2d90a564c9519456f4055a8c9c403ef53f515dcba047	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	865bcb9e30234117aee8d6439bd41047d2b018bc8b80abc4cc0acdd902937997	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.170.1.0.1.el8_10.noarch.rpm	e6d495f95ebb3e080ff3b4b1ac90cfedc536dab948c833fa908052bcbe78847a	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	913caadf2e25db4a9acfee68d32e9960ecb3fb3348afe00e37854fd9982c15c3	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	d4afbbed1da83bd7814b8551d81536d0c2519295767579ade91b9e7359bad8b4	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	f7aa91086aedd4641bcb21be5e563a52bb08cb6fed4bad115ddc1e40368e4be6	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	d4508d74bf7d575ca615a63660304c15c8b2ee370ed6f75cb909fb83449ce0d4	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	87afea7f13abf8bc69947354852c62f340074d6a4dca5b86397c9d5ead3533aa	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	115dae6592e9a6534dff1c2c31a372959ff8c1b5044a7f54929a21b3291b532a	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	62fca92abc93a757e54ded8b8d366766307c9e2b56d8abc32542c7616bbd8170	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.170.1.0.1.el8_10.x86_64.rpm	772f3bba6d97f08192f074e843b2caad9dd65403b572142479fc6c8e215bfd29	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team