ELSA-2025-10669

ELSA-2025-10669 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-07-09

Description

- [4.18.0-553.60.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.60.1_10]
- xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037]
- xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037]
- s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192]
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846}

[4.18.0-553.59.1_10]
- SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291]
- SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291]
- tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291]
- xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132]
- Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111}
- Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136}
- Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136}
- Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136}
- Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136}
- Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136}
- fix backport of 'filelock: Remove locks reliably when fcntl/close race is detected' (Scott Mayhew) [RHEL-89709]
- NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932]
- NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932]

Related CVEs

CVE-2022-49111

CVE-2022-49136

CVE-2022-49846

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.60.1.el8_10.src.rpm	e10cae2a60e2cc5460d8243311af7922073b76c6d3a15027af04b1e7d4249f5d	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.60.1.el8_10.src.rpm	e10cae2a60e2cc5460d8243311af7922073b76c6d3a15027af04b1e7d4249f5d	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.60.1.el8_10.src.rpm	e10cae2a60e2cc5460d8243311af7922073b76c6d3a15027af04b1e7d4249f5d	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.60.1.el8_10.src.rpm	e10cae2a60e2cc5460d8243311af7922073b76c6d3a15027af04b1e7d4249f5d	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.60.1.el8_10.src.rpm	e10cae2a60e2cc5460d8243311af7922073b76c6d3a15027af04b1e7d4249f5d	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.60.1.el8_10.src.rpm	e10cae2a60e2cc5460d8243311af7922073b76c6d3a15027af04b1e7d4249f5d	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.60.1.el8_10.x86_64.rpm	53fc749d1e457a94f18ae4377f60f74641e79ba8498c9a64472ab7a8ecdb789e	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.60.1.el8_10.x86_64.rpm	53fc749d1e457a94f18ae4377f60f74641e79ba8498c9a64472ab7a8ecdb789e	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.60.1.el8_10.x86_64.rpm	8a5b4e331f9c4a7454b2e125511dcf93876fa2ff6f4318b45a2b9ab859e4d493	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.60.1.el8_10.x86_64.rpm	8a5b4e331f9c4a7454b2e125511dcf93876fa2ff6f4318b45a2b9ab859e4d493	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.60.1.el8_10.noarch.rpm	b5c67d6fea0b128616ca651938d25fbe062d9c6dcc75fb6899b819bd2852dbc0	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.60.1.el8_10.noarch.rpm	b5c67d6fea0b128616ca651938d25fbe062d9c6dcc75fb6899b819bd2852dbc0	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.60.1.el8_10.x86_64.rpm	4d496847b039f88d3a3b09d50fe8cc94eb26422b6d4654c019ccdb11a7182706	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.60.1.el8_10.x86_64.rpm	4d496847b039f88d3a3b09d50fe8cc94eb26422b6d4654c019ccdb11a7182706	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.60.1.el8_10.x86_64.rpm	359d10fc53fdc9bb52a48af0d8e1bb9431766c1ec8d68aadd5127e3f768aab99	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.60.1.el8_10.x86_64.rpm	359d10fc53fdc9bb52a48af0d8e1bb9431766c1ec8d68aadd5127e3f768aab99	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.60.1.el8_10.x86_64.rpm	db9c42ae7adaf97395e623f308aead1df0ecfa900a1e4e1e3b43111d5875bf41	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.60.1.el8_10.x86_64.rpm	db9c42ae7adaf97395e623f308aead1df0ecfa900a1e4e1e3b43111d5875bf41	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.60.1.el8_10.x86_64.rpm	9b37c46849b39c49cb956fb1f70a626d48aaba723c2cd56079f81158dfd833fc	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.60.1.el8_10.x86_64.rpm	9b37c46849b39c49cb956fb1f70a626d48aaba723c2cd56079f81158dfd833fc	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.60.1.el8_10.x86_64.rpm	2465260dcf89022a33027c03b879f7673fb7df91408aa1a5cc3d9f55804dc8e2	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.60.1.el8_10.x86_64.rpm	2465260dcf89022a33027c03b879f7673fb7df91408aa1a5cc3d9f55804dc8e2	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.60.1.el8_10.x86_64.rpm	543a8b0b0c0190aa630e1d61db62915f0328ced22ba5ad10f1165bd9efcd9531	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.60.1.el8_10.x86_64.rpm	543a8b0b0c0190aa630e1d61db62915f0328ced22ba5ad10f1165bd9efcd9531	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.60.1.el8_10.x86_64.rpm	604d9f705919eb13c63173a0dec81be07a64e6dc8a666ecf31f54251d0cbda46	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.60.1.el8_10.x86_64.rpm	604d9f705919eb13c63173a0dec81be07a64e6dc8a666ecf31f54251d0cbda46	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.60.1.el8_10.x86_64.rpm	129e4774d05053aa4a2727a0accc661e51b0314af07434e6c6b54ecc4df5768e	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.60.1.el8_10.x86_64.rpm	129e4774d05053aa4a2727a0accc661e51b0314af07434e6c6b54ecc4df5768e	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.60.1.el8_10.noarch.rpm	adf3562633386b69ef2027a934a625250469fadd3114fdb89099441e70b372a8	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.60.1.el8_10.noarch.rpm	adf3562633386b69ef2027a934a625250469fadd3114fdb89099441e70b372a8	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.60.1.el8_10.x86_64.rpm	eda1d326d3595d2a5c6b80dcc75854fbbd21191bcc321c2bb7419eb7e155d6b5	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.60.1.el8_10.x86_64.rpm	eda1d326d3595d2a5c6b80dcc75854fbbd21191bcc321c2bb7419eb7e155d6b5	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.60.1.el8_10.x86_64.rpm	cc29e58ed5d3aa4a450c7db0f15370502f72e129840a58bd7390d5537248ce33	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.60.1.el8_10.x86_64.rpm	cc29e58ed5d3aa4a450c7db0f15370502f72e129840a58bd7390d5537248ce33	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.60.1.el8_10.x86_64.rpm	e3eeebe980b213aa03036cdb6ade54a14e64bdd21e6fd5311662dde938bcba3d	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.60.1.el8_10.x86_64.rpm	e3eeebe980b213aa03036cdb6ade54a14e64bdd21e6fd5311662dde938bcba3d	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.60.1.el8_10.x86_64.rpm	9c39a8f781f1e0ec6d833fbacfb11d4ffe6e10bd8da18d89978800101ece69cf	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.60.1.el8_10.x86_64.rpm	9c39a8f781f1e0ec6d833fbacfb11d4ffe6e10bd8da18d89978800101ece69cf	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.60.1.el8_10.x86_64.rpm	adef383b4d7cfc7ff400cc5ea1b033b67fb0bf7e686d40208f0906850f3b18bc	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.60.1.el8_10.x86_64.rpm	adef383b4d7cfc7ff400cc5ea1b033b67fb0bf7e686d40208f0906850f3b18bc	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.60.1.el8_10.x86_64.rpm	489ac047bb7c8b7d8961f5bfd57857486781b5c3d903d8101081ae23c63deac3	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.60.1.el8_10.x86_64.rpm	e261bb5970c93ebadfeeddf4b3bb4aef0544ebc2a52bdcb604dfd1ee5ed0a6f4	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.60.1.el8_10.x86_64.rpm	e261bb5970c93ebadfeeddf4b3bb4aef0544ebc2a52bdcb604dfd1ee5ed0a6f4	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.60.1.el8_10.x86_64.rpm	5ad64414adbe9a3237239ee2d916b1a2cff3239e85161b92c9cc53d0a24ab819	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.60.1.el8_10.x86_64.rpm	5ad64414adbe9a3237239ee2d916b1a2cff3239e85161b92c9cc53d0a24ab819	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team