ELBA-2026-82807-1

ELBA-2026-82807-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-10-17

Description

[4.18.0-553.173.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.173.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.173.1]
- drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811}
- drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236}
- drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887}
- drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108}
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278}
- ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920}
- wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409}
- cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318}
- openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678}
- openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678}

[4.18.0-553.172.1]
- svcrdma: Reject inline replies that overflow the pull-up buffer (Roberto Bergantinos Corpas) [RHEL-187743] {CVE-2026-89530}
- packet: use consistent hard_header_len in TX_RING send path (Jamie Bainbridge) [RHEL-244539]
- net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (Jamie Bainbridge) [RHEL-244539]
- packet: use consistent hard_header_len in non-ring send paths (Jamie Bainbridge) [RHEL-244539] {CVE-2026-74582}
- net/ip6_tunnel: Prevent perpetual tunnel growth (Jamie Bainbridge) [RHEL-244539]
- net: tunnels: annotate lockless accesses to dev->needed_headroom (Jamie Bainbridge) [RHEL-244539]
- vsock/vmci: fix UAF when peer resets connection during handshake (CKI Backport Bot) [RHEL-232253] {CVE-2026-64115}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.173.1.0.1.el8_10.src.rpm	d05b6bd19dcad01979030d5262e35a9bf1a88f783b20a33f5dffeefb8b703d89	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	0457ec1c01452c054625753c5021590038f5d730010ac7190e04878a9682d179	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	464beda25c91169aab59c5532d4a876a8db8945f891fb4840ae9c32838c74393	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.173.1.0.1.el8_10.noarch.rpm	62205f6044b2a57d5979f8181e93e29c1a4c3260337523d1e8782a3cfdbebef4	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	3ce4a66d860e5d5cae29665e26618c8aef5e143074687e66827c3797ba2c1dff	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	27739620f2042d13391f4b871311de6e9a69ebcaec7911e905114d3195753879	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	faba38fe570e712bf18feb62a994be9a06c6b1c31f563209524f01b50a8ab619	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	d78bf16e04699c5dee5bb0a508eb8193ff29207d7c61a3c56c1255319da70f92	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	d0255bf71cd9aebcb9bd71b4b0e3c314f08c6f32d3c87a93772643c4cfa10fb4	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	4ac76ac1e82de0c0ab5bba79e75ce738b7a25c8008328a389d2c3c2ffb7ee2b2	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	d7f8359270a41f716563947eed01bb4f6c05f67407389832a08be605f6f8d38d	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	da90d4be2863886082f866eb28387541ac236f6ede8658cc42b9efc64417aa7f	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.173.1.0.1.el8_10.noarch.rpm	271bbc9ef55ff3035bd071b314108e1170350a23e57880d14bb82f32832fb80c	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	620a2779f42548006b743d5aae2f28a22776367556fa1acb4101c50cf39501b1	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	df3e5e42bbb894eb768a3aa44ec62b99148ecc3d4f99ea12a30f4df453b65b60	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	73d40e365a28b7d4aca4baeb6799658a799a1bd9598134422156753b8be05628	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	25fb6fc092217a08087403c67fd9879fdad72b4dbd29dc0d68eff5b42a2ebf12	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	8aa96140970ed340e3fbba8b6860fb7911e76516abb3619eab36c9d002247d82	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	7aace258bf64c7c9f1ef85bcf84905f80cf909a251f9eb1d36f3a925b79181c5	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	14e460deeac0c0fe46ecd7e1bc11cd5cb5827268acbb5de8f076cafac60659f8	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.173.1.0.1.el8_10.x86_64.rpm	9dd146e796f36e968f88c78f019d71b4aeea4bb91d6cdf6154b1306da92b6acf	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team