ELSA-2025-1068

ELSA-2025-1068 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-02-06

Description

[4.18.0-553.37.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.37.1_10]
- arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275}
- scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275]
- scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275]
- scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275]
- NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889]

Related CVEs

CVE-2024-26935

CVE-2024-50275

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.37.1.el8_10.src.rpm	908c8620f2410cf099b5aa3afcd857591084a90edd9119faa7dc59ca00d5e9b8	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.37.1.el8_10.src.rpm	908c8620f2410cf099b5aa3afcd857591084a90edd9119faa7dc59ca00d5e9b8	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.37.1.el8_10.src.rpm	908c8620f2410cf099b5aa3afcd857591084a90edd9119faa7dc59ca00d5e9b8	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.37.1.el8_10.aarch64.rpm	3fac4a323cc7fce9b8b96d98128c994a381b0ae9d5848c8c404410efa4d454c7	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.37.1.el8_10.aarch64.rpm	3fac4a323cc7fce9b8b96d98128c994a381b0ae9d5848c8c404410efa4d454c7	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.37.1.el8_10.aarch64.rpm	96f9043460beac925cb58984908cac8519f256455914a140cb8772247c8fae37	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.37.1.el8_10.aarch64.rpm	96f9043460beac925cb58984908cac8519f256455914a140cb8772247c8fae37	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.37.1.el8_10.aarch64.rpm	f9b838569e480b2b16ad9ba3f856fcfa39f344d6ad28829d5b91e3fc7124802d	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.37.1.el8_10.aarch64.rpm	f9b838569e480b2b16ad9ba3f856fcfa39f344d6ad28829d5b91e3fc7124802d	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.37.1.el8_10.aarch64.rpm	a6de14d071b608810a5c881a44e0690f6a50d9a2650057899bf86f296621f511	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.37.1.el8_10.aarch64.rpm	a6de14d071b608810a5c881a44e0690f6a50d9a2650057899bf86f296621f511	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.37.1.el8_10.aarch64.rpm	6f74b86600d0db739cefdd56b8a876d244d871beb4e352ee51e5a79087524d62	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.37.1.el8_10.aarch64.rpm	6f74b86600d0db739cefdd56b8a876d244d871beb4e352ee51e5a79087524d62	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.37.1.el8_10.aarch64.rpm	5f6607301c97225eb259497a5e0c5b67219c3ef2af597adad47118a08e8b3686	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.37.1.el8_10.aarch64.rpm	f9b5dd746b3036c594dfdb1b8006f33007d608650f09b4aacf994492f31e1cfc	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.37.1.el8_10.aarch64.rpm	f9b5dd746b3036c594dfdb1b8006f33007d608650f09b4aacf994492f31e1cfc	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.37.1.el8_10.aarch64.rpm	046c3753a423aa9f77af94c6f90606058b641e0e31fb360e9acf7c58a3bbe019	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.37.1.el8_10.aarch64.rpm	046c3753a423aa9f77af94c6f90606058b641e0e31fb360e9acf7c58a3bbe019	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.37.1.el8_10.src.rpm	908c8620f2410cf099b5aa3afcd857591084a90edd9119faa7dc59ca00d5e9b8	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.37.1.el8_10.src.rpm	908c8620f2410cf099b5aa3afcd857591084a90edd9119faa7dc59ca00d5e9b8	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.37.1.el8_10.src.rpm	908c8620f2410cf099b5aa3afcd857591084a90edd9119faa7dc59ca00d5e9b8	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.37.1.el8_10.x86_64.rpm	b74f0c3adce89fee7fa9ef4b4e69c316934981e4e2db53981ebb6856b34d2ce2	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.37.1.el8_10.x86_64.rpm	b74f0c3adce89fee7fa9ef4b4e69c316934981e4e2db53981ebb6856b34d2ce2	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.37.1.el8_10.x86_64.rpm	7f372138a64ad9f96b78d67f3e655aedd22bb4c71747aa3fa0ab6cfe6911b536	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.37.1.el8_10.x86_64.rpm	7f372138a64ad9f96b78d67f3e655aedd22bb4c71747aa3fa0ab6cfe6911b536	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.37.1.el8_10.noarch.rpm	d3d0b9141cc2335855cd37bd6d71cd4a52f3be079457c39a8249d0b7e1c446ef	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.37.1.el8_10.noarch.rpm	d3d0b9141cc2335855cd37bd6d71cd4a52f3be079457c39a8249d0b7e1c446ef	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.37.1.el8_10.x86_64.rpm	320d88b373fcf628b9871d033395afe2142b63b6234b0066b071aa710e3cd202	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.37.1.el8_10.x86_64.rpm	320d88b373fcf628b9871d033395afe2142b63b6234b0066b071aa710e3cd202	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.37.1.el8_10.x86_64.rpm	4c2c2cf4d4822e9f3a46631fcaade4f6b0f793be7d80db062d29d99a94df56da	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.37.1.el8_10.x86_64.rpm	4c2c2cf4d4822e9f3a46631fcaade4f6b0f793be7d80db062d29d99a94df56da	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.37.1.el8_10.x86_64.rpm	eb8dadb34ed949039515922efa341f993188665eecc2fea23fea8f3c2e1c8689	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.37.1.el8_10.x86_64.rpm	eb8dadb34ed949039515922efa341f993188665eecc2fea23fea8f3c2e1c8689	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.37.1.el8_10.x86_64.rpm	b04a264738c20b9ad25274502c4df7e81da826c3f0a5696d392b11f240d95b32	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.37.1.el8_10.x86_64.rpm	b04a264738c20b9ad25274502c4df7e81da826c3f0a5696d392b11f240d95b32	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.37.1.el8_10.x86_64.rpm	a011d0cc4abb61726cd506eae56c844a1672346dce51e6519defead58038d586	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.37.1.el8_10.x86_64.rpm	a011d0cc4abb61726cd506eae56c844a1672346dce51e6519defead58038d586	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.37.1.el8_10.x86_64.rpm	4006115fd597098c331a3bdb14a7f631f4388e23d82cc21738cb278be9e856c9	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.37.1.el8_10.x86_64.rpm	4006115fd597098c331a3bdb14a7f631f4388e23d82cc21738cb278be9e856c9	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.37.1.el8_10.x86_64.rpm	8b4a184d19e1c90552885a47c9aa9344f65d3751dbafe4552613f88a4444f1d3	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.37.1.el8_10.x86_64.rpm	8b4a184d19e1c90552885a47c9aa9344f65d3751dbafe4552613f88a4444f1d3	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.37.1.el8_10.x86_64.rpm	8fccf89332a39478fef96564b742c33dc4e3cc377b992a89ae3531e9687c0cae	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.37.1.el8_10.x86_64.rpm	8fccf89332a39478fef96564b742c33dc4e3cc377b992a89ae3531e9687c0cae	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.37.1.el8_10.noarch.rpm	ecfa625987c4d10077d471d3fc57fc69208eb1b35e3544d2924baf3f363e6056	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.37.1.el8_10.noarch.rpm	ecfa625987c4d10077d471d3fc57fc69208eb1b35e3544d2924baf3f363e6056	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.37.1.el8_10.x86_64.rpm	895e02fbd71567f3f93b7a23b23a8bdd22beac9beda1c6d3c58deca28bc0b421	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.37.1.el8_10.x86_64.rpm	895e02fbd71567f3f93b7a23b23a8bdd22beac9beda1c6d3c58deca28bc0b421	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.37.1.el8_10.x86_64.rpm	414dd5e4fc6603e22cc43d2b61767cc624a808ab3c877f5d4d19d09f07ad770f	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.37.1.el8_10.x86_64.rpm	414dd5e4fc6603e22cc43d2b61767cc624a808ab3c877f5d4d19d09f07ad770f	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.37.1.el8_10.x86_64.rpm	ccc5c24f7edce11a5183c6acce759e57564aa0164f1f60de9766fb9d6ea15cb3	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.37.1.el8_10.x86_64.rpm	ccc5c24f7edce11a5183c6acce759e57564aa0164f1f60de9766fb9d6ea15cb3	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.37.1.el8_10.x86_64.rpm	3c02f2c2296ed798f43148cdabf31e07bfd532a7edbe90fccf2fba1e5588e07b	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.37.1.el8_10.x86_64.rpm	3c02f2c2296ed798f43148cdabf31e07bfd532a7edbe90fccf2fba1e5588e07b	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.37.1.el8_10.x86_64.rpm	999350f7cac302d3c809df3d3d1bfc6746a62fd04f359cf9e8bdadb218621047	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.37.1.el8_10.x86_64.rpm	999350f7cac302d3c809df3d3d1bfc6746a62fd04f359cf9e8bdadb218621047	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.37.1.el8_10.x86_64.rpm	6a24557d3745a49ec3066960f5625a02c0a2a64847a9244118db9aced1e44b40	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.37.1.el8_10.x86_64.rpm	a97af9142d7715f1143b72f3b686065db675f86e7985ff0caca672eb50372dfd	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.37.1.el8_10.x86_64.rpm	a97af9142d7715f1143b72f3b686065db675f86e7985ff0caca672eb50372dfd	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.37.1.el8_10.x86_64.rpm	ebae32a4823749488d87dbad70f8a5edf3d43eac6c78cc42687c54a2202a2b0a	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.37.1.el8_10.x86_64.rpm	ebae32a4823749488d87dbad70f8a5edf3d43eac6c78cc42687c54a2202a2b0a	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team