ELSA-2026-55764

ELSA-2026-55764 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-08-20

Description

[4.18.0-553.155.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
- udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179571] {CVE-2026-45991}
- ice: fix double-free of tx_buf skb (Michal Schmidt) [RHEL-192193] {CVE-2026-53009}

[4.18.0-553.156.1]
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221327] {CVE-2026-43206}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222576] {CVE-2026-64219}
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (CKI Backport Bot) [RHEL-222620] {CVE-2026-63879}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222738] {CVE-2026-63884}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222662] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222680] {CVE-2026-53136}
- mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Luiz Capitulino) [RHEL-226551] {CVE-2025-39902}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222656] {CVE-2026-53374}
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224556]
- can: bcm: extend bcm_tx_lock usage for data and timer updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523}
- can: bcm: add locking when updating filter and timer values (Guillaume Nault) [RHEL-216711] {CVE-2026-17523}
- can: bcm: fix locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523}
- can: bcm: add locking for bcm_op runtime updates (Guillaume Nault) [RHEL-216711] {CVE-2026-17523}
- can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Guillaume Nault) [RHEL-216711] {CVE-2026-17523}
- can: bcm: check the result of can_send() in bcm_can_tx() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523}
- can: bcm: Use hrtimer_forward_now() (Guillaume Nault) [RHEL-216711] {CVE-2026-17523}
- can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet (Guillaume Nault) [RHEL-216711] {CVE-2026-17523}
- sched/deadline: Update GRUB description in the documentation (Herton R. Krzesinski) [RHEL-189997]
- sched/deadline: fix kABI breakage after the introduction of max_bw on dl_rq (Herton R. Krzesinski) [RHEL-189997]
- sched/deadline: Fix bandwidth reclaim equation in GRUB (Herton R. Krzesinski) [RHEL-189997]
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188453] {CVE-2026-53016}

Related CVEs

CVE-2025-39902

CVE-2026-17523

CVE-2026-43206

CVE-2026-53016

CVE-2026-53136

CVE-2026-53329

CVE-2026-53374

CVE-2026-63879

CVE-2026-63884

CVE-2026-64219

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.156.1.el8_10.src.rpm	35b03d417c08497acc44ce6f8917485d2c7baf157ce35c8f0c8bf14db3e20831	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.156.1.el8_10.src.rpm	35b03d417c08497acc44ce6f8917485d2c7baf157ce35c8f0c8bf14db3e20831	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.156.1.el8_10.src.rpm	35b03d417c08497acc44ce6f8917485d2c7baf157ce35c8f0c8bf14db3e20831	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.156.1.el8_10.aarch64.rpm	ef602299b652deb8a7b86c52aae5fcc4e53b2f0e7728bdb8500747836e33c8d2	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.156.1.el8_10.aarch64.rpm	ef602299b652deb8a7b86c52aae5fcc4e53b2f0e7728bdb8500747836e33c8d2	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.156.1.el8_10.aarch64.rpm	29b0a9a56694dc5c670f7ea7445180df355747e79ab4020225ee23c582a0d116	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.156.1.el8_10.aarch64.rpm	29b0a9a56694dc5c670f7ea7445180df355747e79ab4020225ee23c582a0d116	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.156.1.el8_10.aarch64.rpm	eb253e817d8c221409fb75eabc16911f771057dd343b30bcbe193d4dfea58f62	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.156.1.el8_10.aarch64.rpm	eb253e817d8c221409fb75eabc16911f771057dd343b30bcbe193d4dfea58f62	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.156.1.el8_10.aarch64.rpm	e1b70b599788ac2f1108ee43e4de58b407d6483118cb67b614773af7cc3bce9b	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.156.1.el8_10.aarch64.rpm	e1b70b599788ac2f1108ee43e4de58b407d6483118cb67b614773af7cc3bce9b	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.156.1.el8_10.aarch64.rpm	b2f1af74093dd5850b80a67d8232842e8c1b3e1e9fbb184c554026de171fecd9	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.156.1.el8_10.aarch64.rpm	b2f1af74093dd5850b80a67d8232842e8c1b3e1e9fbb184c554026de171fecd9	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.156.1.el8_10.aarch64.rpm	16e7c8e18e0cdd71cef793e88e4923128ad8fa3436e40e4b08451b36d1c688f1	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.156.1.el8_10.aarch64.rpm	7637eec8e1e730791a2f5a8a949957464dd1cef48fd98ebce051f1729f0c0495	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.156.1.el8_10.aarch64.rpm	7637eec8e1e730791a2f5a8a949957464dd1cef48fd98ebce051f1729f0c0495	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.156.1.el8_10.aarch64.rpm	13ff6ecd976927c834591627ec34cea99aba64d1ec4082deda1776310830f170	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.156.1.el8_10.aarch64.rpm	13ff6ecd976927c834591627ec34cea99aba64d1ec4082deda1776310830f170	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.156.1.el8_10.src.rpm	35b03d417c08497acc44ce6f8917485d2c7baf157ce35c8f0c8bf14db3e20831	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.156.1.el8_10.src.rpm	35b03d417c08497acc44ce6f8917485d2c7baf157ce35c8f0c8bf14db3e20831	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.156.1.el8_10.src.rpm	35b03d417c08497acc44ce6f8917485d2c7baf157ce35c8f0c8bf14db3e20831	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.156.1.el8_10.x86_64.rpm	d6e993692b7a8b59fde0eb09a1070a6c5cf8affc15165668fe308b55cd8e76f9	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.156.1.el8_10.x86_64.rpm	d6e993692b7a8b59fde0eb09a1070a6c5cf8affc15165668fe308b55cd8e76f9	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.156.1.el8_10.x86_64.rpm	02f7c6dede97d4953e0a237f741e3bac4c6d8e5fb1b00383530c41489e3c486b	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.156.1.el8_10.x86_64.rpm	02f7c6dede97d4953e0a237f741e3bac4c6d8e5fb1b00383530c41489e3c486b	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.156.1.el8_10.noarch.rpm	9b6dc4b66e878269d653a89f26b48c3fb0381313609e6654e764754289519419	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.156.1.el8_10.noarch.rpm	9b6dc4b66e878269d653a89f26b48c3fb0381313609e6654e764754289519419	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.156.1.el8_10.x86_64.rpm	2f5e24e84e90ca294a3f5692d31a0932760d781864751d29a13ecf9789206f58	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.156.1.el8_10.x86_64.rpm	2f5e24e84e90ca294a3f5692d31a0932760d781864751d29a13ecf9789206f58	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.156.1.el8_10.x86_64.rpm	eaf2b06bc22a28519711e87caa52f9926deae32dc863f577f718bc7fcb839f53	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.156.1.el8_10.x86_64.rpm	eaf2b06bc22a28519711e87caa52f9926deae32dc863f577f718bc7fcb839f53	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.156.1.el8_10.x86_64.rpm	806067925a7ace03ac2b2de239af63f24067ee46c56202347a4d32215aeda624	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.156.1.el8_10.x86_64.rpm	806067925a7ace03ac2b2de239af63f24067ee46c56202347a4d32215aeda624	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.156.1.el8_10.x86_64.rpm	056ab2dc2b76b3b85f4e0be163d4be81ef2e2eee06135110e9fa36ccaa569889	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.156.1.el8_10.x86_64.rpm	056ab2dc2b76b3b85f4e0be163d4be81ef2e2eee06135110e9fa36ccaa569889	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.156.1.el8_10.x86_64.rpm	1b141d83ed72dcc8afbfddf9d1c18e5b4c72d868f286c0853cb422448d11bc68	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.156.1.el8_10.x86_64.rpm	1b141d83ed72dcc8afbfddf9d1c18e5b4c72d868f286c0853cb422448d11bc68	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.156.1.el8_10.x86_64.rpm	03954e184226ee4eabdca19bc32f846d25b20a2d86a01533d478c8f2f2ec8b25	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.156.1.el8_10.x86_64.rpm	03954e184226ee4eabdca19bc32f846d25b20a2d86a01533d478c8f2f2ec8b25	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.156.1.el8_10.x86_64.rpm	593197182ba89c64bad50e981fb99fdb0e70ab41e52ba990fbfbbf560e0f9646	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.156.1.el8_10.x86_64.rpm	593197182ba89c64bad50e981fb99fdb0e70ab41e52ba990fbfbbf560e0f9646	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.156.1.el8_10.x86_64.rpm	dd7493c892690c43010b2337864c0958a3f20e4334b6d3b64ad81246c22c8071	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.156.1.el8_10.x86_64.rpm	dd7493c892690c43010b2337864c0958a3f20e4334b6d3b64ad81246c22c8071	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.156.1.el8_10.noarch.rpm	999f7e49c13eb09caca849920fa47b8cdb5eadcd4cb60eb13974230a0b9b0095	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.156.1.el8_10.noarch.rpm	999f7e49c13eb09caca849920fa47b8cdb5eadcd4cb60eb13974230a0b9b0095	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.156.1.el8_10.x86_64.rpm	3ae6b224c0bb05c27e315d5d601f96e31b48cddceb70d1f2b3307eef954ace0c	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.156.1.el8_10.x86_64.rpm	3ae6b224c0bb05c27e315d5d601f96e31b48cddceb70d1f2b3307eef954ace0c	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.156.1.el8_10.x86_64.rpm	a1417deb024d8b5bcdd03850f3dcee1007c2a09eaec32785c27b770970fb77cd	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.156.1.el8_10.x86_64.rpm	a1417deb024d8b5bcdd03850f3dcee1007c2a09eaec32785c27b770970fb77cd	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.156.1.el8_10.x86_64.rpm	85568a04b8a51aafbefd5baccbc3aa05cf9ebc9b193b3ce2fb3fab8b05b4cdc8	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.156.1.el8_10.x86_64.rpm	85568a04b8a51aafbefd5baccbc3aa05cf9ebc9b193b3ce2fb3fab8b05b4cdc8	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.156.1.el8_10.x86_64.rpm	9d9ee4b30c547ceafe56ba45afe2ebbe6a2b91485538896291548bcddd01adac	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.156.1.el8_10.x86_64.rpm	9d9ee4b30c547ceafe56ba45afe2ebbe6a2b91485538896291548bcddd01adac	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.156.1.el8_10.x86_64.rpm	d37f75ed68409fd67a3ece7587d2dfa1c6cf54ae9153a279b4ea36983be435eb	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.156.1.el8_10.x86_64.rpm	d37f75ed68409fd67a3ece7587d2dfa1c6cf54ae9153a279b4ea36983be435eb	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.156.1.el8_10.x86_64.rpm	c5b48b999a2f13b4af4b46c2e00a3c4f02fb29cefa7933b5d85ef9a42d5e7a74	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.156.1.el8_10.x86_64.rpm	2f885090871aff461c35dd8a1abd640a5e268bb03f19cd2ac9a8b90aa6bd82e9	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.156.1.el8_10.x86_64.rpm	2f885090871aff461c35dd8a1abd640a5e268bb03f19cd2ac9a8b90aa6bd82e9	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.156.1.el8_10.x86_64.rpm	7e9a59e45e4b19eb402ddf38345b181b9b21f2fcd3647e5c7cd6f34648bafd71	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.156.1.el8_10.x86_64.rpm	7e9a59e45e4b19eb402ddf38345b181b9b21f2fcd3647e5c7cd6f34648bafd71	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team