ELBA-2026-87375-1

ELBA-2026-87375-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2026-10-27

Description

[4.18.0-553.177.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.177.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.177.1]
- vfio/pci: clear vdev->msi_perm after freeing it on init failure (Rodolfo Vick) [RHEL-270905] {CVE-2026-89777}
- ALSA: seq: close a re-opened queue timer in the destructor (CKI Backport Bot) [RHEL-263644] {CVE-2026-68202}
- inet: frags: strip GSO state from fragments before reassembly (Jamie Bainbridge) [RHEL-254200] {CVE-2026-80590}
- ipv4: fib: free fib_alias with kfree_rcu() on insert error path (Jamie Bainbridge) [RHEL-233134] {CVE-2026-64572}
- ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (Jamie Bainbridge) [RHEL-225459] {CVE-2026-64114}
- xfs: bounds-check buffer log item's dirty bitmap (CKI Backport Bot) [RHEL-253365] {CVE-2026-80536}
- fuse: re-lock request before returning from fuse_ref_folio() (CKI Backport Bot) [RHEL-234242] {CVE-2026-64266}

[4.18.0-553.176.1]
- smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631}
- netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320}
- perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196}
- gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363]
- gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363]
- gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363]
- gfs2: Fix 'gfs2: Switch to wait_event in gfs2_quotad' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363]
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363]
- gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363]
- gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Rename 'gfs_recovery' workqueue to 'gfs2_recovery' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363]
- gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363]
- gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: fix infinite loop when checking ail item count before go_inval' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Allow some glocks to be used during withdraw' (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Check for log write errors before telling dlm to unlock' (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: fix a deadlock on withdraw-during-mount' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (6/6) (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (5/6) (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (4/6) (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (3/6) (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (2/6) (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (1/6) (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: don't stop reads while withdraw in progress' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363]
- gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363]
- gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760}
- gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363]
- gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363]

[4.18.0-553.175.1]
- strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732]
- xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684]
- xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684]
- xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684]
- netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288}
- sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752}
- sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479}
- sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588}
- xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.177.1.0.1.el8_10.src.rpm	ba658ddc87d7e03792c4a13181574940095c370d69d5b97ffaafabeafa0f8314	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	0d883f6ca96a27b6fa9a106e45f11deb49cca94bf97a696d48935067d68679ef	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	0d77573b1181be66fcddca176adc7a9a6e65d8e24cea52d72b70cfe204f1b69c	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.177.1.0.1.el8_10.noarch.rpm	4d4440825cde48e38d5ab1e96731857bc27900a848c974d163fe05114e09e9c2	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	839683e77dc2f47cfde9cc883c41ed646bb5757ff584add900819615e1739c09	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	d88c27b09ea8a8a2c5bedf01ba11c7b0e709995282f9f8321919d3cadcfdd72a	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	abbc0af2fd3d07eb173bd7267f291e875f7724001007895cbfb98b8b4620d83d	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	eb71513952985f6495ebf5bd7d54080801dab9731a2f744bfac0330844cc43e8	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	1c859ba03029c9819debe0ccdc96cef76534b0ca5f39302907a4f8978c9bec3b	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	b3e6f2696d27b53781e442fef3481b610c1bee035eccdc1c3ccc930e6d08d7c6	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	85f1ee5df4eb43c048a47614f4b81d97652ee0bb0c4053e492ec5a1b2df785c0	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	26b0fc1185c19f5528ebcccff2ff5badf412224e607e232995b2d26be375cad1	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.177.1.0.1.el8_10.noarch.rpm	b88712bc28dfbcda1fd612f81c3ffb071a1ab434fc76d047425373e77d30db15	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	907ebeeeabe8a2f90dbe0756ed6248017c4704cd8e9834d1486130146601ed48	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	adf8d7967ddfc35eb611954af2ff657fd521ca77eca49a27d250730facdbac98	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	6b4d0bb2b15be9dd32133ee929475e19320b755069e798f900bd4fc6d19eddee	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	a9088fb517a91f630e18c45c34c5b6e2705df35bd746a6ff67a41d19225174ac	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	278186af791152b1e29e8af3c446bdcb40e342ff4e6a03a49d5730b33ee95200	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	bb6c5a33214d079627a9e5729cad74833a10ccfd1c5101eefadf8561210f56d7	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	3afe71a35d9b27484820e6fc5e06b8094a1662662d6613ecfeb72ef8de95438b	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.177.1.0.1.el8_10.x86_64.rpm	4740af09af8c7bf160d06994a51a5902ae6a6a4355f9486d5a5c6bab402465cf	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team