ELSA-2025-15008

ELSA-2025-15008 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-09-03

Description

[4.18.0-553.72.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.72.1_10]
- scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332}
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211}
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696}
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285}
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
- net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976]
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894]
- aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313]
- filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181]
- x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369]
- efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369]
- efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369]
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464}
- sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758]
- block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758]
- blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758]
- lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758]
- sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758]
- sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758]
- sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758]
- sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758]
- sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758]
- sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758]
- sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758]
- sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
- lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758]
- sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
- sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758]
- wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758]
- sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758]
- sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758]
- sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758]
- blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758]
- blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758]

Related CVEs

CVE-2025-38211

CVE-2025-38477

CVE-2025-38464

CVE-2025-38332

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.72.1.el8_10.src.rpm	73b64ced76e5efcb1629def39e181ce89871d4f18463f2db668f8f72e188a9d9	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.72.1.el8_10.src.rpm	73b64ced76e5efcb1629def39e181ce89871d4f18463f2db668f8f72e188a9d9	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.72.1.el8_10.src.rpm	73b64ced76e5efcb1629def39e181ce89871d4f18463f2db668f8f72e188a9d9	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.72.1.el8_10.aarch64.rpm	abfb44d962d2b9ec0a7c8a127939de8e986503d9479bc0a0e6e993a140f8d70e	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.72.1.el8_10.aarch64.rpm	abfb44d962d2b9ec0a7c8a127939de8e986503d9479bc0a0e6e993a140f8d70e	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.72.1.el8_10.aarch64.rpm	0acecbf23c2037c4164002b4a27a7f9b30c27f7318de27ac799f54a58440589e	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.72.1.el8_10.aarch64.rpm	0acecbf23c2037c4164002b4a27a7f9b30c27f7318de27ac799f54a58440589e	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.72.1.el8_10.aarch64.rpm	fc3f808bf7abd5948de2de4fddbaabf3b78e16a86456fa4cae7e552371bdc135	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.72.1.el8_10.aarch64.rpm	fc3f808bf7abd5948de2de4fddbaabf3b78e16a86456fa4cae7e552371bdc135	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.72.1.el8_10.aarch64.rpm	ab0690a2908df95b16be043337578c975ba5d05bf167c0741232f09ebd30f42d	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.72.1.el8_10.aarch64.rpm	ab0690a2908df95b16be043337578c975ba5d05bf167c0741232f09ebd30f42d	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.72.1.el8_10.aarch64.rpm	534048fae10c5439fa1f82997f4ac9d385aad056365b3e635b5f8d562c7fab29	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.72.1.el8_10.aarch64.rpm	534048fae10c5439fa1f82997f4ac9d385aad056365b3e635b5f8d562c7fab29	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.72.1.el8_10.aarch64.rpm	790e6639c5e823cc3e7cc5589405f5e938d5b7d24b616aabc0a949e92e4b6fd7	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.72.1.el8_10.aarch64.rpm	b0a4274350b53cfa4ae47fe80244d2067c14d69d61fcc4b62579a68daf899970	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.72.1.el8_10.aarch64.rpm	b0a4274350b53cfa4ae47fe80244d2067c14d69d61fcc4b62579a68daf899970	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.72.1.el8_10.aarch64.rpm	8220ab64749bf80a236be032efaa498e59407e15c04063cf373eef38031814c6	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.72.1.el8_10.aarch64.rpm	8220ab64749bf80a236be032efaa498e59407e15c04063cf373eef38031814c6	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.72.1.el8_10.src.rpm	73b64ced76e5efcb1629def39e181ce89871d4f18463f2db668f8f72e188a9d9	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.72.1.el8_10.src.rpm	73b64ced76e5efcb1629def39e181ce89871d4f18463f2db668f8f72e188a9d9	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.72.1.el8_10.src.rpm	73b64ced76e5efcb1629def39e181ce89871d4f18463f2db668f8f72e188a9d9	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.72.1.el8_10.x86_64.rpm	504f5cd69045547d749b88b90062a5fc7761e44bd542c63cffeff2d4993d7007	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.72.1.el8_10.x86_64.rpm	504f5cd69045547d749b88b90062a5fc7761e44bd542c63cffeff2d4993d7007	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.72.1.el8_10.x86_64.rpm	162bd6faa1346d2a8f906a90aa9875ef0e9130f261a49eb37d0fec363da57518	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.72.1.el8_10.x86_64.rpm	162bd6faa1346d2a8f906a90aa9875ef0e9130f261a49eb37d0fec363da57518	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.72.1.el8_10.noarch.rpm	995a1fea517352392136129d2e04a199b807cb29b09f2bca5a94702acc709fe0	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.72.1.el8_10.noarch.rpm	995a1fea517352392136129d2e04a199b807cb29b09f2bca5a94702acc709fe0	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.72.1.el8_10.x86_64.rpm	0a136b71ecb19f39cbadf3bf43f581a7bfcc555dd66ced480e2830606dd8c1ec	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.72.1.el8_10.x86_64.rpm	0a136b71ecb19f39cbadf3bf43f581a7bfcc555dd66ced480e2830606dd8c1ec	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.72.1.el8_10.x86_64.rpm	31ddc192c0335339cc308aafde02d665cfbb251d1c303f703ad1dd6112f62c75	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.72.1.el8_10.x86_64.rpm	31ddc192c0335339cc308aafde02d665cfbb251d1c303f703ad1dd6112f62c75	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.72.1.el8_10.x86_64.rpm	54650e6cbc26d5cb2293ee727fb2d195405694625047e4aa2fbaddd131ac804e	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.72.1.el8_10.x86_64.rpm	54650e6cbc26d5cb2293ee727fb2d195405694625047e4aa2fbaddd131ac804e	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.72.1.el8_10.x86_64.rpm	f57717b3aadb329aaa03b625f7df1820f838e055bf74db1f034b78241012b3dd	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.72.1.el8_10.x86_64.rpm	f57717b3aadb329aaa03b625f7df1820f838e055bf74db1f034b78241012b3dd	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.72.1.el8_10.x86_64.rpm	9f8d99e716531f10ef13fe9890f9fbd75a331ada11dcb689d17501cb331616c2	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.72.1.el8_10.x86_64.rpm	9f8d99e716531f10ef13fe9890f9fbd75a331ada11dcb689d17501cb331616c2	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.72.1.el8_10.x86_64.rpm	11d1263496cfad2ce61272addc2f30c198e8e0c835e8779554dc8d9396a19bf7	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.72.1.el8_10.x86_64.rpm	11d1263496cfad2ce61272addc2f30c198e8e0c835e8779554dc8d9396a19bf7	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.72.1.el8_10.x86_64.rpm	6102969fe0feaf64b0b54326ef880fe48bb1e905661f557b915dc6ac96a88a69	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.72.1.el8_10.x86_64.rpm	6102969fe0feaf64b0b54326ef880fe48bb1e905661f557b915dc6ac96a88a69	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.72.1.el8_10.x86_64.rpm	40e92d0e095bd224bb54ccb3c992bd0ff7047481294193c083814953e16afcab	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.72.1.el8_10.x86_64.rpm	40e92d0e095bd224bb54ccb3c992bd0ff7047481294193c083814953e16afcab	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.72.1.el8_10.noarch.rpm	b524d1cade9438186453c2f62fac4940f0b67cea2e1c7ebe1f1fdc6d9f17f1a4	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.72.1.el8_10.noarch.rpm	b524d1cade9438186453c2f62fac4940f0b67cea2e1c7ebe1f1fdc6d9f17f1a4	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.72.1.el8_10.x86_64.rpm	015b1365a1b116f25e46d06bd069b4820f7425acefde05bf12bf95ed8da84d16	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.72.1.el8_10.x86_64.rpm	015b1365a1b116f25e46d06bd069b4820f7425acefde05bf12bf95ed8da84d16	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.72.1.el8_10.x86_64.rpm	e8356308d2c708fe74805bb61b6522a61d418909d335edd119a5f20f6b7ff0f4	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.72.1.el8_10.x86_64.rpm	e8356308d2c708fe74805bb61b6522a61d418909d335edd119a5f20f6b7ff0f4	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.72.1.el8_10.x86_64.rpm	1223e53a958156d7edaf564b4399fe27149203b34c0801b6c2a7c546aaee5062	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.72.1.el8_10.x86_64.rpm	1223e53a958156d7edaf564b4399fe27149203b34c0801b6c2a7c546aaee5062	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.72.1.el8_10.x86_64.rpm	cc2f2f6dc25e91f902399ed1137ad00a461b8eba3e4659213d5f50c8dda029b1	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.72.1.el8_10.x86_64.rpm	cc2f2f6dc25e91f902399ed1137ad00a461b8eba3e4659213d5f50c8dda029b1	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.72.1.el8_10.x86_64.rpm	9f16e661d19f72e5be5792b57c96e1408159dfb22365e22a5d3a53c3590503fa	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.72.1.el8_10.x86_64.rpm	9f16e661d19f72e5be5792b57c96e1408159dfb22365e22a5d3a53c3590503fa	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.72.1.el8_10.x86_64.rpm	b4efc743d0f060b175aaa6640b9a5d69949344593a5ae46d040e6a449fb65228	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.72.1.el8_10.x86_64.rpm	db1416481c166238d36cda2015ce73c18053a20b154dd6e47581b80d5c78a7d4	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.72.1.el8_10.x86_64.rpm	db1416481c166238d36cda2015ce73c18053a20b154dd6e47581b80d5c78a7d4	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.72.1.el8_10.x86_64.rpm	891a5d4c9eaf7ab669050b530b70d86e56007c62083199abe3e4565cb02c64af	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.72.1.el8_10.x86_64.rpm	891a5d4c9eaf7ab669050b530b70d86e56007c62083199abe3e4565cb02c64af	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team