ELSA-2026-23258

ELSA-2026-23258 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-06-05

Description


[4.18.0-553.129.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.129.1]
- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178938] {CVE-2026-46243}

[4.18.0-553.128.1]
- smb: client: fix OOB reads parsing symlink error response (Paulo Alcantara) [RHEL-171465] {CVE-2026-31613}
- geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Antoine Tenart) [RHEL-168961]
- geneve: Fix use-after-free in geneve_find_dev(). (Antoine Tenart) [RHEL-168961] {CVE-2025-21858}
- netfilter: nf_tables: release flowtable after rcu grace period on error (Florian Westphal) [RHEL-160514] {CVE-2026-23392}

[4.18.0-553.127.1]
- smc: Fix use-after-free in tcp_write_timer_handler(). (Steve Best) [RHEL-167084] {CVE-2023-53781}
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166939] {CVE-2025-68366}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143892] {CVE-2026-22984}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143874] {CVE-2026-22990}


Related CVEs


CVE-2026-46243

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.129.1.el8_10.src.rpm562eb553491077ef20c92f374934695344dbfd3e02b406548496ffd8df23b55b-ol8_aarch64_baseos_latest
kernel-4.18.0-553.129.1.el8_10.src.rpm562eb553491077ef20c92f374934695344dbfd3e02b406548496ffd8df23b55b-ol8_aarch64_codeready_builder
kernel-4.18.0-553.129.1.el8_10.src.rpm562eb553491077ef20c92f374934695344dbfd3e02b406548496ffd8df23b55b-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.129.1.el8_10.aarch64.rpm0fd0c07ddadc0005f25368080af3546243e905fa82438d38b403f9d6811c75f1-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.129.1.el8_10.aarch64.rpm0fd0c07ddadc0005f25368080af3546243e905fa82438d38b403f9d6811c75f1-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.129.1.el8_10.aarch64.rpm0889e5c99f8e34d881ce45540e5e350937f92bdaeb6fda77fb474ad230b11125-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.129.1.el8_10.aarch64.rpm0889e5c99f8e34d881ce45540e5e350937f92bdaeb6fda77fb474ad230b11125-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.129.1.el8_10.aarch64.rpmc142075f4d436e63dd1ba45baa2c1795916ee1a56b8cc33149cc2d2c6699040e-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.129.1.el8_10.aarch64.rpmc142075f4d436e63dd1ba45baa2c1795916ee1a56b8cc33149cc2d2c6699040e-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.129.1.el8_10.aarch64.rpm72b8ec631f9edf74ab1567f14a1cff0ded8a0946e8681fe75f295afaec03ca61-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.129.1.el8_10.aarch64.rpm72b8ec631f9edf74ab1567f14a1cff0ded8a0946e8681fe75f295afaec03ca61-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.129.1.el8_10.aarch64.rpmb2cf5d5592bc2c8133950b2f7ce59917f9bc78944f7b701a416af693c6d06053-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.129.1.el8_10.aarch64.rpmb2cf5d5592bc2c8133950b2f7ce59917f9bc78944f7b701a416af693c6d06053-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.129.1.el8_10.aarch64.rpm48fe910c3078dc72c17f79228819e3aa5bc5fbc65d9d725379e038097af2e3a8-ol8_aarch64_codeready_builder
perf-4.18.0-553.129.1.el8_10.aarch64.rpmefecd1bab53f1ed6a6be5cf5291d18af6940f48f3974b67f7052678f7f8a0c0b-ol8_aarch64_baseos_latest
perf-4.18.0-553.129.1.el8_10.aarch64.rpmefecd1bab53f1ed6a6be5cf5291d18af6940f48f3974b67f7052678f7f8a0c0b-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.129.1.el8_10.aarch64.rpm2abd23d2b7824dcbab9054b1427346db33e5da3ba761ec92dbefbaf209db783f-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.129.1.el8_10.aarch64.rpm2abd23d2b7824dcbab9054b1427346db33e5da3ba761ec92dbefbaf209db783f-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.129.1.el8_10.src.rpm562eb553491077ef20c92f374934695344dbfd3e02b406548496ffd8df23b55b-ol8_x86_64_baseos_latest
kernel-4.18.0-553.129.1.el8_10.src.rpm562eb553491077ef20c92f374934695344dbfd3e02b406548496ffd8df23b55b-ol8_x86_64_codeready_builder
kernel-4.18.0-553.129.1.el8_10.src.rpm562eb553491077ef20c92f374934695344dbfd3e02b406548496ffd8df23b55b-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.129.1.el8_10.x86_64.rpm9b4ed045af07ba4c242a45e11872a8b5bc0ee6edf16e4abcc19d8fba6cd19595-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.129.1.el8_10.x86_64.rpm9b4ed045af07ba4c242a45e11872a8b5bc0ee6edf16e4abcc19d8fba6cd19595-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.129.1.el8_10.x86_64.rpme68485f484f17004e2e9e467de6510377f143259e9da5c8eb96ae222d7bfec07-ol8_x86_64_baseos_latest
kernel-4.18.0-553.129.1.el8_10.x86_64.rpme68485f484f17004e2e9e467de6510377f143259e9da5c8eb96ae222d7bfec07-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.129.1.el8_10.noarch.rpmbadd35cfeb6cad685bebb873d1eba3f25ace4156c35aab2e7db8d04d5842d33f-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.129.1.el8_10.noarch.rpmbadd35cfeb6cad685bebb873d1eba3f25ace4156c35aab2e7db8d04d5842d33f-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.129.1.el8_10.x86_64.rpm5ff9084d1ce2d6cd027a5d1287af5ee40ca2ef6cc7afc063131c7f96600a99fe-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.129.1.el8_10.x86_64.rpm5ff9084d1ce2d6cd027a5d1287af5ee40ca2ef6cc7afc063131c7f96600a99fe-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.129.1.el8_10.x86_64.rpm21b5fde8d6e46844256984b241e1a71455e290b719687cdee873afd5b8c70e72-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.129.1.el8_10.x86_64.rpm21b5fde8d6e46844256984b241e1a71455e290b719687cdee873afd5b8c70e72-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.129.1.el8_10.x86_64.rpm58806a004f73faafa7fb88c897889b81abb5b2a3bed4b2c9a1127d1452adce22-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.129.1.el8_10.x86_64.rpm58806a004f73faafa7fb88c897889b81abb5b2a3bed4b2c9a1127d1452adce22-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.129.1.el8_10.x86_64.rpm7021d69b502f85ff321ff1b7dd325c61a4bd80c49b65e37ffde4e49397cb29f3-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.129.1.el8_10.x86_64.rpm7021d69b502f85ff321ff1b7dd325c61a4bd80c49b65e37ffde4e49397cb29f3-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.129.1.el8_10.x86_64.rpm5630333b8678aca515248792c12c7f23c849e7e2c82734ceff02dbf8942e7c4f-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.129.1.el8_10.x86_64.rpm5630333b8678aca515248792c12c7f23c849e7e2c82734ceff02dbf8942e7c4f-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.129.1.el8_10.x86_64.rpm4d22399dafa13bcf648da4ccbf4118b1759f3ebc1e377734f97eb2c9d2bcc2c2-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.129.1.el8_10.x86_64.rpm4d22399dafa13bcf648da4ccbf4118b1759f3ebc1e377734f97eb2c9d2bcc2c2-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.129.1.el8_10.x86_64.rpm630c2dcd756576c68ff0dc9e7077253b989eb155a3792ff4d65397783abc4056-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.129.1.el8_10.x86_64.rpm630c2dcd756576c68ff0dc9e7077253b989eb155a3792ff4d65397783abc4056-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.129.1.el8_10.x86_64.rpm57c65dbe0a6869e0bbb409d4f2ab0a3cf4a0ec588c1b883ab9848ae6427c9dc0-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.129.1.el8_10.x86_64.rpm57c65dbe0a6869e0bbb409d4f2ab0a3cf4a0ec588c1b883ab9848ae6427c9dc0-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.129.1.el8_10.noarch.rpm024d0332319c4da554300c5bd5828e29c0e65fb595cb0ba78415709e07aeeebf-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.129.1.el8_10.noarch.rpm024d0332319c4da554300c5bd5828e29c0e65fb595cb0ba78415709e07aeeebf-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.129.1.el8_10.x86_64.rpm02731826f1b6bee5b60aefa7936ef7fece0f65904f2666d72527f5398263715c-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.129.1.el8_10.x86_64.rpm02731826f1b6bee5b60aefa7936ef7fece0f65904f2666d72527f5398263715c-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.129.1.el8_10.x86_64.rpm907b739d9332849270a7bbfda0d0e856ed361f270e997a663c00e6c49b095649-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.129.1.el8_10.x86_64.rpm907b739d9332849270a7bbfda0d0e856ed361f270e997a663c00e6c49b095649-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.129.1.el8_10.x86_64.rpm4d2022eb27507766cfe81e052c93ca8e459d20b19764dea12a7b2ec4cfa38a0c-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.129.1.el8_10.x86_64.rpm4d2022eb27507766cfe81e052c93ca8e459d20b19764dea12a7b2ec4cfa38a0c-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.129.1.el8_10.x86_64.rpm15d68ea4cc7bd618bcd1eee9d7291cc20b19ba65199b65321c366f26ba68f65f-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.129.1.el8_10.x86_64.rpm15d68ea4cc7bd618bcd1eee9d7291cc20b19ba65199b65321c366f26ba68f65f-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.129.1.el8_10.x86_64.rpm0144b13166961f74ebe2bc317b7f9f41c47f9020b6070cef2141f6030cb64f49-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.129.1.el8_10.x86_64.rpm0144b13166961f74ebe2bc317b7f9f41c47f9020b6070cef2141f6030cb64f49-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.129.1.el8_10.x86_64.rpm236537fdc7afc2849f5217dcac11da9cb5944f8380d332dab3c040555994adb7-ol8_x86_64_codeready_builder
perf-4.18.0-553.129.1.el8_10.x86_64.rpm9fc5440d9abe5dc7cda1a1c25b9ac5e52d01f99dca31c8657310cc790b39c791-ol8_x86_64_baseos_latest
perf-4.18.0-553.129.1.el8_10.x86_64.rpm9fc5440d9abe5dc7cda1a1c25b9ac5e52d01f99dca31c8657310cc790b39c791-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.129.1.el8_10.x86_64.rpm835c39c6fc5c4537b40e63f09733fcf671327dccce5d9aa611535dcca788d6a3-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.129.1.el8_10.x86_64.rpm835c39c6fc5c4537b40e63f09733fcf671327dccce5d9aa611535dcca788d6a3-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete