Stay Connected:

ELSA-2026-74133

ELSA-2026-74133 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:MODERATE
Release Date:2026-10-02

Description


[4.18.0-553.170.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.170.1]
- keys: Do not drop the auth key's request_key_auth reference in revoke (Thomas Huth) [RHEL-270349]
- Tracing: Fix a race condition in register_trace_kprobe() (Jerome Marchand) [RHEL-214136]
- dm-integrity: don't increment hash_offset twice (CKI Backport Bot) [RHEL-257757] {CVE-2026-72099}
- net/liquidio: drop cached VF pci_dev LUT (Izabela Bakollari) [RHEL-244368] {CVE-2026-72329}
- liquidio: Use pcie_flr() instead of reimplementing it (Izabela Bakollari) [RHEL-244368]
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CKI Backport Bot) [RHEL-252809] {CVE-2026-68299}
- RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CKI Backport Bot) [RHEL-232567] {CVE-2026-64102}

[4.18.0-553.169.1]
- net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (Filippo Storniolo) [RHEL-230983] {CVE-2026-64034}
- arm64: tlb: Flush walk cache when unsharing PMD tables (Rafael Aquini) [RHEL-259308] {CVE-2026-63875}
- perf: Reject exited events as group leaders (Anubhav Shelat) [RHEL-258792] {CVE-2026-74753}
- perf/core: Detach event groups during remove_on_exec (Anubhav Shelat) [RHEL-250500] {CVE-2026-64556}
- drm/amdgpu: Fix context pstate override handling (Jocelyn Falempe) [RHEL-236710] {CVE-2026-68273}
- drm/amdgpu: keep amdgpu_ctx_mgr in ctx structure (Jocelyn Falempe) [RHEL-236710]
- drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check (Jocelyn Falempe) [RHEL-225309]
- drm/amdgpu/vcn3: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225309]
- drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225309] {CVE-2026-46230}
- drm/amdgpu/vcn4: Avoid overflow on msg bound check (Jocelyn Falempe) [RHEL-225430]
- drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (Jocelyn Falempe) [RHEL-225430] {CVE-2026-46199}
- drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (Jocelyn Falempe) [RHEL-226024] {CVE-2026-46204}
- drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (Jocelyn Falempe) [RHEL-226024]
- fbcon: Set fb_display[i]->mode to NULL when the mode is released (Jocelyn Falempe) [RHEL-230330] {CVE-2025-40323}
- libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159}
- libceph: Amend checking to fix make W=1 build breakage (CKI Backport Bot) [RHEL-237150] {CVE-2026-68159}
- ext4: fix e4b bitmap inconsistency reports (Lukas Herbolt) [RHEL-225932] {CVE-2026-45942}
- libceph: Reject monmaps advertising zero monitors (CKI Backport Bot) [RHEL-237904] {CVE-2026-68155}
- libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CKI Backport Bot) [RHEL-237472] {CVE-2026-68156}


Related CVEs


CVE-2026-64102
CVE-2026-68299
CVE-2026-72099
CVE-2026-72329

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.170.1.el8_10.src.rpm913967c0bac8cae3eb35e44588821756b61c3604acdcfdde40c5965ad1e50d44-ol8_aarch64_baseos_latest
kernel-4.18.0-553.170.1.el8_10.src.rpm913967c0bac8cae3eb35e44588821756b61c3604acdcfdde40c5965ad1e50d44-ol8_aarch64_codeready_builder
kernel-4.18.0-553.170.1.el8_10.src.rpm913967c0bac8cae3eb35e44588821756b61c3604acdcfdde40c5965ad1e50d44-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.170.1.el8_10.aarch64.rpmf8a3e39a7f3a7643645e67534ba57c8801a5ab4dc2840515d101090ec4f6b53b-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.170.1.el8_10.aarch64.rpmf8a3e39a7f3a7643645e67534ba57c8801a5ab4dc2840515d101090ec4f6b53b-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.170.1.el8_10.aarch64.rpm7a632bda23629b44a10822ea6828d5ee53507b55c7ca9a91de78bed80acbbfdd-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.170.1.el8_10.aarch64.rpm7a632bda23629b44a10822ea6828d5ee53507b55c7ca9a91de78bed80acbbfdd-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.170.1.el8_10.aarch64.rpmd747044df7783e9cc5c1fb9ac602b3a73d1f8cf66a1a79ae5e6b8c3141449df2-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.170.1.el8_10.aarch64.rpmd747044df7783e9cc5c1fb9ac602b3a73d1f8cf66a1a79ae5e6b8c3141449df2-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.170.1.el8_10.aarch64.rpm98cdafad75a65181e358eb974168a6f5fb92d0c3309204ef18437563605044d1-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.170.1.el8_10.aarch64.rpm98cdafad75a65181e358eb974168a6f5fb92d0c3309204ef18437563605044d1-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.170.1.el8_10.aarch64.rpm96e59de00f5565c9186a36556ece2f3036fadfd9bcf221b6c407e4f6e1db29df-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.170.1.el8_10.aarch64.rpm96e59de00f5565c9186a36556ece2f3036fadfd9bcf221b6c407e4f6e1db29df-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.170.1.el8_10.aarch64.rpm294f00a086165b644888818afef2f2c4f65a0f9e52c5da0c1d3abd25c1f48229-ol8_aarch64_codeready_builder
perf-4.18.0-553.170.1.el8_10.aarch64.rpm8649a8ce9d719b7bfe0664d53c6e8922fce596afdf05161678a9292abf8a1380-ol8_aarch64_baseos_latest
perf-4.18.0-553.170.1.el8_10.aarch64.rpm8649a8ce9d719b7bfe0664d53c6e8922fce596afdf05161678a9292abf8a1380-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.170.1.el8_10.aarch64.rpm7af79bc4bc399c062a7a07c99d327e2cb155adeca15f9093f86e60cb7ce3c476-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.170.1.el8_10.aarch64.rpm7af79bc4bc399c062a7a07c99d327e2cb155adeca15f9093f86e60cb7ce3c476-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.170.1.el8_10.src.rpm913967c0bac8cae3eb35e44588821756b61c3604acdcfdde40c5965ad1e50d44-ol8_x86_64_baseos_latest
kernel-4.18.0-553.170.1.el8_10.src.rpm913967c0bac8cae3eb35e44588821756b61c3604acdcfdde40c5965ad1e50d44-ol8_x86_64_codeready_builder
kernel-4.18.0-553.170.1.el8_10.src.rpm913967c0bac8cae3eb35e44588821756b61c3604acdcfdde40c5965ad1e50d44-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.170.1.el8_10.x86_64.rpmc8d3a9735b7272b41d17977cae22306596afe5b195ac05207a1eccaef7abd07b-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.170.1.el8_10.x86_64.rpmc8d3a9735b7272b41d17977cae22306596afe5b195ac05207a1eccaef7abd07b-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.170.1.el8_10.x86_64.rpm5af9f50d81915801c46fdc8adf9b654257c76c3fc2b7bca3b3f75dc698ea3b92-ol8_x86_64_baseos_latest
kernel-4.18.0-553.170.1.el8_10.x86_64.rpm5af9f50d81915801c46fdc8adf9b654257c76c3fc2b7bca3b3f75dc698ea3b92-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.170.1.el8_10.noarch.rpm7f9eb161da25b74aaa55bcbcf180eb87a92cf1f132a4e30d02506e522ff6d3b6-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.170.1.el8_10.noarch.rpm7f9eb161da25b74aaa55bcbcf180eb87a92cf1f132a4e30d02506e522ff6d3b6-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.170.1.el8_10.x86_64.rpm6f7a502da3bc8f0ee82597a16f9b8d99d62a60bd048b72701d71326c23907a23-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.170.1.el8_10.x86_64.rpm6f7a502da3bc8f0ee82597a16f9b8d99d62a60bd048b72701d71326c23907a23-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.170.1.el8_10.x86_64.rpm6cc37cdb2200dd47dbaa0c311c18a4a02c542550b2f676d0304eeb232c303bcd-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.170.1.el8_10.x86_64.rpm6cc37cdb2200dd47dbaa0c311c18a4a02c542550b2f676d0304eeb232c303bcd-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.170.1.el8_10.x86_64.rpm451dca919ff2a5db4f66207a2b0ba84c7c4641824eb421e78d77de36e5061cfd-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.170.1.el8_10.x86_64.rpm451dca919ff2a5db4f66207a2b0ba84c7c4641824eb421e78d77de36e5061cfd-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.170.1.el8_10.x86_64.rpm2f2466a085f4d5a850792ed85ec322f23bbce6c0b9bccb7f418decc5bb571cec-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.170.1.el8_10.x86_64.rpm2f2466a085f4d5a850792ed85ec322f23bbce6c0b9bccb7f418decc5bb571cec-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.170.1.el8_10.x86_64.rpm1c17f844f80ddc4de0d299611eec2a6581c11fc9ee2775c0982608d781b800a1-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.170.1.el8_10.x86_64.rpm1c17f844f80ddc4de0d299611eec2a6581c11fc9ee2775c0982608d781b800a1-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.170.1.el8_10.x86_64.rpmfce1359bf57633563c507f82d07a48a068cafd7cd26761afad553ebddcf09451-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.170.1.el8_10.x86_64.rpmfce1359bf57633563c507f82d07a48a068cafd7cd26761afad553ebddcf09451-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.170.1.el8_10.x86_64.rpma66f29d835fdbab3ea68c63d2bed322f847f09f8a0b847f3baf992bcd4b663df-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.170.1.el8_10.x86_64.rpma66f29d835fdbab3ea68c63d2bed322f847f09f8a0b847f3baf992bcd4b663df-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.170.1.el8_10.x86_64.rpm937ad6cc469ed4baacb29299bea15581bf39c890f60996ea0b628a6a96cc81b7-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.170.1.el8_10.x86_64.rpm937ad6cc469ed4baacb29299bea15581bf39c890f60996ea0b628a6a96cc81b7-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.170.1.el8_10.noarch.rpm50e51e52b30977e83899bb1fbbc074a17bcd51abaa4c1bb334d67254f5d99c48-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.170.1.el8_10.noarch.rpm50e51e52b30977e83899bb1fbbc074a17bcd51abaa4c1bb334d67254f5d99c48-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.170.1.el8_10.x86_64.rpm913afd270253d0cccb6c72d53dd71868b39cb910d4a87f6a47ed9a3556a66818-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.170.1.el8_10.x86_64.rpm913afd270253d0cccb6c72d53dd71868b39cb910d4a87f6a47ed9a3556a66818-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.170.1.el8_10.x86_64.rpmfc06370161d9fe54b4e48633f512f0fbfe500c4d77839868d069eeff675e846c-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.170.1.el8_10.x86_64.rpmfc06370161d9fe54b4e48633f512f0fbfe500c4d77839868d069eeff675e846c-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.170.1.el8_10.x86_64.rpmeb4d91507e92c98db32dbd11ad42e7bf9c124a2d1356c7159da9a1dc2c14e97c-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.170.1.el8_10.x86_64.rpmeb4d91507e92c98db32dbd11ad42e7bf9c124a2d1356c7159da9a1dc2c14e97c-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.170.1.el8_10.x86_64.rpme0808778cda5274d254f1fb848ed8f533613a740e1f16eed0a6cd721760aec7f-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.170.1.el8_10.x86_64.rpme0808778cda5274d254f1fb848ed8f533613a740e1f16eed0a6cd721760aec7f-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.170.1.el8_10.x86_64.rpm8859bd33500962e4d6693730ec28a730e4afb2367681363fb81875421e0b3a4b-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.170.1.el8_10.x86_64.rpm8859bd33500962e4d6693730ec28a730e4afb2367681363fb81875421e0b3a4b-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.170.1.el8_10.x86_64.rpm6800489a2720dc024ae51e48abbf5e8ec49818a06b9d3c87dc12447340ed8d50-ol8_x86_64_codeready_builder
perf-4.18.0-553.170.1.el8_10.x86_64.rpm15ad8277789080aa6b9bfefd6dc33900f529c57444e94bcaab32063f8c582684-ol8_x86_64_baseos_latest
perf-4.18.0-553.170.1.el8_10.x86_64.rpm15ad8277789080aa6b9bfefd6dc33900f529c57444e94bcaab32063f8c582684-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.170.1.el8_10.x86_64.rpm42481bf4660889edad88fdd75d3b6ffd6c1c78e1b5b4faf30bb9dff9ff9c0d47-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.170.1.el8_10.x86_64.rpm42481bf4660889edad88fdd75d3b6ffd6c1c78e1b5b4faf30bb9dff9ff9c0d47-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights