ELSA-2025-0065

ELSA-2025-0065 - kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2025-01-09

Description

[4.18.0-553.34.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.34.1_10]
- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122}
- NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647]
- xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924]
- KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974]
- x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362]
- dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860]
- i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}
- i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}

Related CVEs

CVE-2024-53088

CVE-2024-53122

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.34.1.el8_10.src.rpm	c74fd221a81a2aaa27ad3c93b0126c72	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.34.1.el8_10.src.rpm	c74fd221a81a2aaa27ad3c93b0126c72	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.34.1.el8_10.src.rpm	c74fd221a81a2aaa27ad3c93b0126c72	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.34.1.el8_10.aarch64.rpm	c8d2c51427e2d18aa9f27cf17252e8a4	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.34.1.el8_10.aarch64.rpm	c8d2c51427e2d18aa9f27cf17252e8a4	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.34.1.el8_10.aarch64.rpm	bdc49b38f6010f9066d83f812f565221	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.34.1.el8_10.aarch64.rpm	bdc49b38f6010f9066d83f812f565221	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.34.1.el8_10.aarch64.rpm	621420e29e00927243eee714e0f65e2d	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.34.1.el8_10.aarch64.rpm	621420e29e00927243eee714e0f65e2d	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.34.1.el8_10.aarch64.rpm	db6e6e5f4d707085f9f311bfd780ce13	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.34.1.el8_10.aarch64.rpm	db6e6e5f4d707085f9f311bfd780ce13	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.34.1.el8_10.aarch64.rpm	fe83f4aa928242a39b86c83b753ae449	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.34.1.el8_10.aarch64.rpm	fe83f4aa928242a39b86c83b753ae449	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.34.1.el8_10.aarch64.rpm	3839a6634ef632d965e6f793a9177db3	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.34.1.el8_10.aarch64.rpm	7dd928c6ecf5b3cac6b29224f434098b	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.34.1.el8_10.aarch64.rpm	7dd928c6ecf5b3cac6b29224f434098b	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.34.1.el8_10.aarch64.rpm	8f1626aeffa099d25169a6d7926bea8f	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.34.1.el8_10.aarch64.rpm	8f1626aeffa099d25169a6d7926bea8f	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.34.1.el8_10.src.rpm	c74fd221a81a2aaa27ad3c93b0126c72	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.34.1.el8_10.src.rpm	c74fd221a81a2aaa27ad3c93b0126c72	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.34.1.el8_10.src.rpm	c74fd221a81a2aaa27ad3c93b0126c72	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.34.1.el8_10.x86_64.rpm	ce29ac6bab3b59d591075e8f8abdc677	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.34.1.el8_10.x86_64.rpm	ce29ac6bab3b59d591075e8f8abdc677	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.34.1.el8_10.x86_64.rpm	0108434296e492f39106d7063faede72	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.34.1.el8_10.x86_64.rpm	0108434296e492f39106d7063faede72	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.34.1.el8_10.noarch.rpm	6e38e6b8ec9d280ce6d80eabbecf201d	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.34.1.el8_10.noarch.rpm	6e38e6b8ec9d280ce6d80eabbecf201d	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.34.1.el8_10.x86_64.rpm	49f7525af48c28985dfead22c05c13f6	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.34.1.el8_10.x86_64.rpm	49f7525af48c28985dfead22c05c13f6	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.34.1.el8_10.x86_64.rpm	2fb30abe2b21b377ad0967badfd05cd5	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.34.1.el8_10.x86_64.rpm	2fb30abe2b21b377ad0967badfd05cd5	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.34.1.el8_10.x86_64.rpm	7058519864f13b4e7e7114d5d07ce0b7	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.34.1.el8_10.x86_64.rpm	7058519864f13b4e7e7114d5d07ce0b7	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.34.1.el8_10.x86_64.rpm	fc8dc64b63dea6fc19fe3ee851bc3589	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.34.1.el8_10.x86_64.rpm	fc8dc64b63dea6fc19fe3ee851bc3589	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.34.1.el8_10.x86_64.rpm	7257f0054035c606a62836fe725616da	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.34.1.el8_10.x86_64.rpm	7257f0054035c606a62836fe725616da	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.34.1.el8_10.x86_64.rpm	e8466bf35eb94c497c5873d1f060f1b6	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.34.1.el8_10.x86_64.rpm	e8466bf35eb94c497c5873d1f060f1b6	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.34.1.el8_10.x86_64.rpm	5ae311fcc854c2e8e709014a16cc34b1	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.34.1.el8_10.x86_64.rpm	5ae311fcc854c2e8e709014a16cc34b1	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.34.1.el8_10.x86_64.rpm	6f2b5efa1adba9786766a529b3f1522b	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.34.1.el8_10.x86_64.rpm	6f2b5efa1adba9786766a529b3f1522b	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.34.1.el8_10.noarch.rpm	d1b378469c0a1a45b6dad91e751fcb90	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.34.1.el8_10.noarch.rpm	d1b378469c0a1a45b6dad91e751fcb90	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.34.1.el8_10.x86_64.rpm	89f01048dd26e7164147233e207a8e7a	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.34.1.el8_10.x86_64.rpm	89f01048dd26e7164147233e207a8e7a	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.34.1.el8_10.x86_64.rpm	01883851fbaea5f36e29ee9ffbc29f76	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.34.1.el8_10.x86_64.rpm	01883851fbaea5f36e29ee9ffbc29f76	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.34.1.el8_10.x86_64.rpm	86b02aa56efbf40dcb46ba5c32e867cb	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.34.1.el8_10.x86_64.rpm	86b02aa56efbf40dcb46ba5c32e867cb	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.34.1.el8_10.x86_64.rpm	03fb454809b8ff7aa4bfc354a95f85f5	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.34.1.el8_10.x86_64.rpm	03fb454809b8ff7aa4bfc354a95f85f5	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.34.1.el8_10.x86_64.rpm	4716556950ae9c39bab803d08dd4dbd1	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.34.1.el8_10.x86_64.rpm	4716556950ae9c39bab803d08dd4dbd1	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.34.1.el8_10.x86_64.rpm	205ed69688e9332343bff8abdb282009	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.34.1.el8_10.x86_64.rpm	c6ff84bf347e23cfb2bb1734a7ad393b	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.34.1.el8_10.x86_64.rpm	c6ff84bf347e23cfb2bb1734a7ad393b	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.34.1.el8_10.x86_64.rpm	fec387a0cef1291038c1e658448a807d	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.34.1.el8_10.x86_64.rpm	fec387a0cef1291038c1e658448a807d	-	ol8_x86_64_u10_baseos_patch