Stay Connected:

ELSA-2025-22801

ELSA-2025-22801 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-12-08

Description


[4.18.0-553.89.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.89.1]
- mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774]
- mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
- mm/memcg: revert ('mm/memcg: optimize user context object stock access') (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
- gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660]
- gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660]

[4.18.0-553.88.1]
- scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199]
- RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539}
- RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543}


Related CVEs


CVE-2022-50543
CVE-2023-53401
CVE-2023-53539

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.89.1.el8_10.src.rpm11ff3b8c8e77dabf3add9e7773707db43bc66c2d44c66332c9d3147c6a319112-ol8_aarch64_baseos_latest
kernel-4.18.0-553.89.1.el8_10.src.rpm11ff3b8c8e77dabf3add9e7773707db43bc66c2d44c66332c9d3147c6a319112-ol8_aarch64_codeready_builder
kernel-4.18.0-553.89.1.el8_10.src.rpm11ff3b8c8e77dabf3add9e7773707db43bc66c2d44c66332c9d3147c6a319112-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.89.1.el8_10.aarch64.rpm34dfbea4ec60d7d5cfe1017b9ce1412553949e5525e8a935aa0141192da4dfcc-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.89.1.el8_10.aarch64.rpm34dfbea4ec60d7d5cfe1017b9ce1412553949e5525e8a935aa0141192da4dfcc-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.89.1.el8_10.aarch64.rpmcc7fb12813fce0aae3652aaf35d4295613ece0a7989831587ce94a099f7125a5-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.89.1.el8_10.aarch64.rpmcc7fb12813fce0aae3652aaf35d4295613ece0a7989831587ce94a099f7125a5-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.89.1.el8_10.aarch64.rpmf84d820e37661e7715c22afe2415d26a6879d19b92245932ffbe6ecfce4715b4-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.89.1.el8_10.aarch64.rpmf84d820e37661e7715c22afe2415d26a6879d19b92245932ffbe6ecfce4715b4-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.89.1.el8_10.aarch64.rpmfc5b10eebe43b55eb5669a85fcb92b67493d3c8a7b28b4563dc44b522e06aa79-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.89.1.el8_10.aarch64.rpmfc5b10eebe43b55eb5669a85fcb92b67493d3c8a7b28b4563dc44b522e06aa79-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.89.1.el8_10.aarch64.rpmb27edfcae80e371e71c2f197c973b3ab8a0fa92c6b9da0d22ce02e913d61b6a3-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.89.1.el8_10.aarch64.rpmb27edfcae80e371e71c2f197c973b3ab8a0fa92c6b9da0d22ce02e913d61b6a3-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.89.1.el8_10.aarch64.rpm9f159af4bd85566a2a4fb5577a0b2d6af099f34df907b211dea8ebffd423c782-ol8_aarch64_codeready_builder
perf-4.18.0-553.89.1.el8_10.aarch64.rpm030733750ef9995ff01ff63242b10e4a45c2342f4be88f652765da17c6b3e184-ol8_aarch64_baseos_latest
perf-4.18.0-553.89.1.el8_10.aarch64.rpm030733750ef9995ff01ff63242b10e4a45c2342f4be88f652765da17c6b3e184-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.89.1.el8_10.aarch64.rpmfaa39c24ac89ed36c46212ff93232584fb76f9c103641e05d7fb43c974c44e93-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.89.1.el8_10.aarch64.rpmfaa39c24ac89ed36c46212ff93232584fb76f9c103641e05d7fb43c974c44e93-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.89.1.el8_10.src.rpm11ff3b8c8e77dabf3add9e7773707db43bc66c2d44c66332c9d3147c6a319112-ol8_x86_64_baseos_latest
kernel-4.18.0-553.89.1.el8_10.src.rpm11ff3b8c8e77dabf3add9e7773707db43bc66c2d44c66332c9d3147c6a319112-ol8_x86_64_codeready_builder
kernel-4.18.0-553.89.1.el8_10.src.rpm11ff3b8c8e77dabf3add9e7773707db43bc66c2d44c66332c9d3147c6a319112-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.89.1.el8_10.x86_64.rpm9877c157fa2b79c770ad0fb2babea0d09ad73bd278359a448f58180fcd27fa26-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.89.1.el8_10.x86_64.rpm9877c157fa2b79c770ad0fb2babea0d09ad73bd278359a448f58180fcd27fa26-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.89.1.el8_10.x86_64.rpm5ec43a9d648890b16f73200d788478532a9b932c8c7ef890e18144be95c963e1-ol8_x86_64_baseos_latest
kernel-4.18.0-553.89.1.el8_10.x86_64.rpm5ec43a9d648890b16f73200d788478532a9b932c8c7ef890e18144be95c963e1-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.89.1.el8_10.noarch.rpmcf96282a30954ce3546d3ae839780fff918aa6d401d64ac87cf08831ae40fe0f-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.89.1.el8_10.noarch.rpmcf96282a30954ce3546d3ae839780fff918aa6d401d64ac87cf08831ae40fe0f-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.89.1.el8_10.x86_64.rpm94b32e8305497b8a8ef36304e5714bc1c639134437132efc98c8a1c7008fcf76-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.89.1.el8_10.x86_64.rpm94b32e8305497b8a8ef36304e5714bc1c639134437132efc98c8a1c7008fcf76-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.89.1.el8_10.x86_64.rpm6bf9fe811c5c7dab9f07ab544819c559a64043fc2d32ad41f25a87c6bd478d32-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.89.1.el8_10.x86_64.rpm6bf9fe811c5c7dab9f07ab544819c559a64043fc2d32ad41f25a87c6bd478d32-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.89.1.el8_10.x86_64.rpm00b16eeb66ceb82d27833bf08d7eb2743f9910045da9bb7c352a62f5f0b339f1-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.89.1.el8_10.x86_64.rpm00b16eeb66ceb82d27833bf08d7eb2743f9910045da9bb7c352a62f5f0b339f1-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.89.1.el8_10.x86_64.rpmb8df26ed70000f9353c0ead5d05ce64544066b33d6c450243d5a3e79adf0cdaf-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.89.1.el8_10.x86_64.rpmb8df26ed70000f9353c0ead5d05ce64544066b33d6c450243d5a3e79adf0cdaf-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.89.1.el8_10.x86_64.rpmeea685ae607d960dee6c2f14da91530a92985fcde8ba4921016a39ee98f81d33-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.89.1.el8_10.x86_64.rpmeea685ae607d960dee6c2f14da91530a92985fcde8ba4921016a39ee98f81d33-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.89.1.el8_10.x86_64.rpm04aee218704eaac2b5e6b14f8822395192f1484272ce76be9fec806ee78aedc3-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.89.1.el8_10.x86_64.rpm04aee218704eaac2b5e6b14f8822395192f1484272ce76be9fec806ee78aedc3-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.89.1.el8_10.x86_64.rpmb6af6d05b39182d1613baebb78c38799815ad5bbad7c7fd8ba2e77d796d4139f-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.89.1.el8_10.x86_64.rpmb6af6d05b39182d1613baebb78c38799815ad5bbad7c7fd8ba2e77d796d4139f-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.89.1.el8_10.x86_64.rpm86fd91c203c3e082df87c648885d0f09c44f1910aa856febeb811633c2994697-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.89.1.el8_10.x86_64.rpm86fd91c203c3e082df87c648885d0f09c44f1910aa856febeb811633c2994697-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.89.1.el8_10.noarch.rpm7d2760c685d60ff7feca414c5c7d46ac4e357d199a04028bedd0ce2d59897373-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.89.1.el8_10.noarch.rpm7d2760c685d60ff7feca414c5c7d46ac4e357d199a04028bedd0ce2d59897373-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.89.1.el8_10.x86_64.rpm4fb59c0305f3a0e5b88059efc9acc70a73b56ac6309318e54766d291624985e0-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.89.1.el8_10.x86_64.rpm4fb59c0305f3a0e5b88059efc9acc70a73b56ac6309318e54766d291624985e0-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.89.1.el8_10.x86_64.rpm0e4ffb8600f3a1e5d1c3ad2b99d0df8df51ebc7465ba316a5caa3aa17d0e68bc-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.89.1.el8_10.x86_64.rpm0e4ffb8600f3a1e5d1c3ad2b99d0df8df51ebc7465ba316a5caa3aa17d0e68bc-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.89.1.el8_10.x86_64.rpm10524a69616f7566691126a8aef669411a641a275a11c71cc8eb4e700061f282-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.89.1.el8_10.x86_64.rpm10524a69616f7566691126a8aef669411a641a275a11c71cc8eb4e700061f282-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.89.1.el8_10.x86_64.rpmff18605da35b8d8cb91ce0567ae87177a551783ffaa27441750c2822abff1309-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.89.1.el8_10.x86_64.rpmff18605da35b8d8cb91ce0567ae87177a551783ffaa27441750c2822abff1309-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.89.1.el8_10.x86_64.rpm94e8432d87987874b1687bb02ff2a9f3bdb0936785a3a0af40e1ce2d1acd513b-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.89.1.el8_10.x86_64.rpm94e8432d87987874b1687bb02ff2a9f3bdb0936785a3a0af40e1ce2d1acd513b-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.89.1.el8_10.x86_64.rpm1089016981bec30fb04eec454d129a7e14c7b83db5f458853a15d0c12187ca5f-ol8_x86_64_codeready_builder
perf-4.18.0-553.89.1.el8_10.x86_64.rpmf357b6912066df7f503bf28280139a2a903698093cf2d9203971b2f5f53a963c-ol8_x86_64_baseos_latest
perf-4.18.0-553.89.1.el8_10.x86_64.rpmf357b6912066df7f503bf28280139a2a903698093cf2d9203971b2f5f53a963c-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.89.1.el8_10.x86_64.rpm3d77ca61ca7cd1c4e14f430d67867579a8fffcdfb73ae0b3399854328e8f3f4f-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.89.1.el8_10.x86_64.rpm3d77ca61ca7cd1c4e14f430d67867579a8fffcdfb73ae0b3399854328e8f3f4f-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights