Stay Connected:

ELBA-2026-6037-1

ELBA-2026-6037-1 - kernel bug fix update

Type:BUG
Impact:NA
Release Date:2026-04-01

Description


[4.18.0-553.115.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.115.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.115.1]
- x86/microcode/AMD: Revert 'Backport AMD microcode commits for better microcode loading support' (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]

[4.18.0-553.114.1]
- s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}

[4.18.0-553.113.1]
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]

[4.18.0-553.112.1]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() & get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]




Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (x86_64) kernel-4.18.0-553.115.1.0.1.el8_10.src.rpmeb00b6a4a25850a78bf53267a7cbacb7ac580e72d48b13e0a5b6ac888a22d69a-ol8_x86_64_MODRHCK
bpftool-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm35f41799123fda12b41d19d076bff173fe0e8390a71a71e44162b235ec2d1e55-ol8_x86_64_MODRHCK
kernel-4.18.0-553.115.1.0.1.el8_10.x86_64.rpma058903faa996985772b0bb4ed87ca4b3f70aa6285966be72931b47071bed458-ol8_x86_64_MODRHCK
kernel-abi-stablelists-4.18.0-553.115.1.0.1.el8_10.noarch.rpm7a80e6053e6659a2f1c24eec55049a531b2932edc933f1c20b0c2b3e80e8d2c4-ol8_x86_64_MODRHCK
kernel-core-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm826ae15bbe0f1927d257aa78894a5b98eb0e8b57626410e9619e29427b028a6c-ol8_x86_64_MODRHCK
kernel-cross-headers-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm12a2dbc1d2b14d84a7950e937431447fb61fbd2a720afc9fb8445a0a69048e5c-ol8_x86_64_MODRHCK
kernel-debug-4.18.0-553.115.1.0.1.el8_10.x86_64.rpmb3aff6c91d888286d81ecc05acbc2fbbba73e6fde6f3c11fe6ffa039bd4add93-ol8_x86_64_MODRHCK
kernel-debug-core-4.18.0-553.115.1.0.1.el8_10.x86_64.rpmc8d2353962b50ad8b8a2649997a375c87ca606ec4a8e2939c809b2911b38a0c6-ol8_x86_64_MODRHCK
kernel-debug-devel-4.18.0-553.115.1.0.1.el8_10.x86_64.rpmbd361a620ed93044cd4b71a62bb3e3cd29490183b7a9e2e3aed688ce170ff15e-ol8_x86_64_MODRHCK
kernel-debug-modules-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm43f8d1caf070845579c0855be691099b7c06312a29a97255bc3e73858e145881-ol8_x86_64_MODRHCK
kernel-debug-modules-extra-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm0666cfa16a06c787953b95e2ee070348b2be4aa0124dea2515fdb165e82fbf9e-ol8_x86_64_MODRHCK
kernel-devel-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm51d75f3c4b54b92f27d4b12fc449f31775451fe4a08f7f3e53f9eed57d4b9db5-ol8_x86_64_MODRHCK
kernel-doc-4.18.0-553.115.1.0.1.el8_10.noarch.rpm3d0fce638d1df4945bd309c9c9ad78aed16e3756610ce0701a8b023c914bbb28-ol8_x86_64_MODRHCK
kernel-headers-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm28d71594d47ab8fc02903b40e429c716d08fe5585658809c5971c880fe04f1b8-ol8_x86_64_MODRHCK
kernel-modules-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm312b69da18287c15e53f1d7137741f0ee8e7cc178184f1715f12417de149993c-ol8_x86_64_MODRHCK
kernel-modules-extra-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm962ff9c56b823183a203579b14e6ab59f05f0148a954f9a07ad15652b453baed-ol8_x86_64_MODRHCK
kernel-tools-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm6f95c0f1d4b661e3ad9cd0b0e0331c5c4303d34c86dbea9f186d853fda9a704f-ol8_x86_64_MODRHCK
kernel-tools-libs-4.18.0-553.115.1.0.1.el8_10.x86_64.rpme9aa76d36534bf8346f99111f7407ee1aabc2e5b60ffb0359ec0a2a3a5d0cafa-ol8_x86_64_MODRHCK
kernel-tools-libs-devel-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm47c5ca0940a4e7b4bb6a6b6d2dad67e758557f9c1cc264c43a84f8c154dc0316-ol8_x86_64_MODRHCK
perf-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm54c294eb219c9908464faf812a6cc2abbdb2955a67834bd553bca8a3b7c04941-ol8_x86_64_MODRHCK
python3-perf-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm7611870e22177c52c03e4d6fbf9e5ff61e47b66b6cb407f4f0d21627c412daf4-ol8_x86_64_MODRHCK



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights