ELBA-2025-12752-1

ELBA-2025-12752-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2025-08-05

Description

[4.18.0-553.66.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.66.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.66.1.el8_10]
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415]
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079}
- Revert 'smb: client: fix TCP timers deadlock after rmmod' (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077}
- Revert 'smb: client: Fix netns refcount imbalance causing leaks and use-after-free' (Paulo Alcantara) [RHEL-100698]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698]
- smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680}
- smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095}
- smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698]
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052}
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928}

[4.18.0-553.65.1.el8_10]
- x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422]
- ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020}

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.66.1.0.1.el8_10.src.rpm	d71c4cd9219716daea01fd24ad429e80377ea34aef7d16e9175f5eef94d239f4	-	ol8_x86_64_MODRHCK
	bpftool-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	05a91f516886abbf28c2273f44cae2132dcb154609ad5a12fbc94065366a8681	-	ol8_x86_64_MODRHCK
	kernel-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	7648a1aeba23fef7c0ef67a6d1a105d0567705508c72f52da26a8802de42d915	-	ol8_x86_64_MODRHCK
	kernel-abi-stablelists-4.18.0-553.66.1.0.1.el8_10.noarch.rpm	0b57f77bb5f03c94570b3aa2c78fc930cf90fb8504e07c456e0910760ce18f96	-	ol8_x86_64_MODRHCK
	kernel-core-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	a361fe5165522fa4049189576b42e301c59c575319509201e0b33066548dc406	-	ol8_x86_64_MODRHCK
	kernel-cross-headers-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	8783c873fb7946bf31e124b5987acbd353fccb97b1666dcd284a942dc18cc8fb	-	ol8_x86_64_MODRHCK
	kernel-debug-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	f05c1c34feff8cbad28ef583b6e0fc87ad102af073b774126043da20a0571b2f	-	ol8_x86_64_MODRHCK
	kernel-debug-core-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	600111fb8592a6a586b1b58b7c251b055c1878514c50726d1d05d45f1eafa49f	-	ol8_x86_64_MODRHCK
	kernel-debug-devel-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	79815a0ec2183a3faff69526a2fdcbf9e08ea7da1023a53881264ce8f1f8a4a0	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	b1724e769719c1ce9600cb03292342d4f5516280cbf3981cfade064bc86c9a10	-	ol8_x86_64_MODRHCK
	kernel-debug-modules-extra-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	86a2d845ac620fd1b1adf237290ae73911890d44ba9a0d3903bcea31051e984a	-	ol8_x86_64_MODRHCK
	kernel-devel-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	b5b110148d7a8cfc155c1f05b3e11753234b09cde3e95a87d3a9a066dc45b144	-	ol8_x86_64_MODRHCK
	kernel-doc-4.18.0-553.66.1.0.1.el8_10.noarch.rpm	774de2176239db0c4f791a9d152e1f38e3c3295b240e8403f1e366b0988e39b1	-	ol8_x86_64_MODRHCK
	kernel-headers-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	0769a20acfd27c5b2df8d9ee8296e37dd5bc7921381cb687524ebc6942323c92	-	ol8_x86_64_MODRHCK
	kernel-modules-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	cf303ccbb9c67c8ac1cadd79ab3c431d3b0b9f6398aa01024e5f26434d3fcdb7	-	ol8_x86_64_MODRHCK
	kernel-modules-extra-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	9db7cecb36edb0229a442b7178f95f6177dd415b95744801b11c941a2e89ee43	-	ol8_x86_64_MODRHCK
	kernel-tools-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	bd4dc68cb88096edc1b580eb4bc15bc37691c05c9457d967214702e0b5d48e5e	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	83420a61b2f8de4ab96fc0361dca271e95b630138bc1defce0e6e0250f53671b	-	ol8_x86_64_MODRHCK
	kernel-tools-libs-devel-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	e3172feb38b91ccbecbdead60a69fc92570e629d397d88c0599759650d5d38d7	-	ol8_x86_64_MODRHCK
	perf-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	855eeb345143b3cd019b3e4a747b70c7f09af521d6b30cb4a83b891133f75044	-	ol8_x86_64_MODRHCK
	python3-perf-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm	59d3f959b7f8a15a12c1f713902e98e0ff401de89883defbb71b184fd58a2b22	-	ol8_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team