ELSA-2025-11298

ELSA-2025-11298 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-07-16

Description

- [4.18.0-553.62.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.62.1_10]
- s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557]
- mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410]
- driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410]
- driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410]
- Revert 'drivers: core: synchronize really_probe() and dev_uevent()' (Mark Langsdorf) [RHEL-84410]
- cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410]
- cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410]
- cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410]
- cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410]
- file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410]
- cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410]
- cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410]
- cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410]
- locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410]
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788}
- media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002}
- media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980}
- cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058}
- Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723]
- fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578]
- fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578]
- mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578]

[4.18.0-553.61.1_10]
- s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409]
- ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738}
- ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150}
- net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004}
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991}

Related CVEs

CVE-2025-22004

CVE-2022-49788

CVE-2025-23150

CVE-2022-49058

CVE-2024-58002

CVE-2025-37738

CVE-2024-57980

CVE-2025-21991

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.62.1.el8_10.src.rpm	837011da67030e939af88285da32a4d668625e7266c2c6c68fc52bc6fade5fa6	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.62.1.el8_10.src.rpm	837011da67030e939af88285da32a4d668625e7266c2c6c68fc52bc6fade5fa6	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.62.1.el8_10.src.rpm	837011da67030e939af88285da32a4d668625e7266c2c6c68fc52bc6fade5fa6	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.62.1.el8_10.src.rpm	837011da67030e939af88285da32a4d668625e7266c2c6c68fc52bc6fade5fa6	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.62.1.el8_10.src.rpm	837011da67030e939af88285da32a4d668625e7266c2c6c68fc52bc6fade5fa6	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.62.1.el8_10.src.rpm	837011da67030e939af88285da32a4d668625e7266c2c6c68fc52bc6fade5fa6	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.62.1.el8_10.x86_64.rpm	232f346a7bf29275e5f01668e00a70e40b08df994764529c74d2ac5eab04e851	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.62.1.el8_10.x86_64.rpm	232f346a7bf29275e5f01668e00a70e40b08df994764529c74d2ac5eab04e851	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.62.1.el8_10.x86_64.rpm	d4af8186e4c8e298ccb1677dbbeaae1bc755921e924097440f245165372d8c21	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.62.1.el8_10.x86_64.rpm	d4af8186e4c8e298ccb1677dbbeaae1bc755921e924097440f245165372d8c21	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.62.1.el8_10.noarch.rpm	93220ddbe0910a8c509be067f355a84b77e55d43d48fefe2a07ff8d23089d9a9	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.62.1.el8_10.noarch.rpm	93220ddbe0910a8c509be067f355a84b77e55d43d48fefe2a07ff8d23089d9a9	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.62.1.el8_10.x86_64.rpm	afb69fe7de61845edb068279e8ed27c4179fc455d883491f2f54edace18a9347	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.62.1.el8_10.x86_64.rpm	afb69fe7de61845edb068279e8ed27c4179fc455d883491f2f54edace18a9347	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.62.1.el8_10.x86_64.rpm	0b4deff955b43740951d05f04862c925b8f16df432c7db2d995a6de4ab37ea0f	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.62.1.el8_10.x86_64.rpm	0b4deff955b43740951d05f04862c925b8f16df432c7db2d995a6de4ab37ea0f	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.62.1.el8_10.x86_64.rpm	853bf69cdcc9e95a00d4b21aa76e1f68b2daa6e8d5d7fcb12376e4a876e257b1	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.62.1.el8_10.x86_64.rpm	853bf69cdcc9e95a00d4b21aa76e1f68b2daa6e8d5d7fcb12376e4a876e257b1	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.62.1.el8_10.x86_64.rpm	32c1b89116f6499695835bf303eec05d5908f9ce973b07720cd808b03b307fc5	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.62.1.el8_10.x86_64.rpm	32c1b89116f6499695835bf303eec05d5908f9ce973b07720cd808b03b307fc5	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.62.1.el8_10.x86_64.rpm	27070bc7ffbdb81dde0079a48927e137fd26f4a8df210e6212ea2002f1cdb03f	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.62.1.el8_10.x86_64.rpm	27070bc7ffbdb81dde0079a48927e137fd26f4a8df210e6212ea2002f1cdb03f	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.62.1.el8_10.x86_64.rpm	78f628d3223636e859e0cc9ab0ca6fe6f8c9716c6c85869b0d2760b0f24e3501	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.62.1.el8_10.x86_64.rpm	78f628d3223636e859e0cc9ab0ca6fe6f8c9716c6c85869b0d2760b0f24e3501	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.62.1.el8_10.x86_64.rpm	8f6a3db0ef9e3e868a370203de02dfdd708a8ec5b2c6c59588a8b70eda044d3e	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.62.1.el8_10.x86_64.rpm	8f6a3db0ef9e3e868a370203de02dfdd708a8ec5b2c6c59588a8b70eda044d3e	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.62.1.el8_10.x86_64.rpm	9a1415ef1f11de534d893e0e68700f62c0d5b6373d123a47bac787b4b0d20879	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.62.1.el8_10.x86_64.rpm	9a1415ef1f11de534d893e0e68700f62c0d5b6373d123a47bac787b4b0d20879	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.62.1.el8_10.noarch.rpm	45ecc9522283d825d78a2dc2257ace09c9e89c1bf8d1461392b2884251257ca7	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.62.1.el8_10.noarch.rpm	45ecc9522283d825d78a2dc2257ace09c9e89c1bf8d1461392b2884251257ca7	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.62.1.el8_10.x86_64.rpm	c0aef575020d8b0cacd09d063353b09c9dd5ced8144949e3a222d9b4cd3c1de9	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.62.1.el8_10.x86_64.rpm	c0aef575020d8b0cacd09d063353b09c9dd5ced8144949e3a222d9b4cd3c1de9	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.62.1.el8_10.x86_64.rpm	ffca228fc1a6035a9e3d8a17cb30d3c5f717cabb8ff6dc8d544fa9481d3e9d6c	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.62.1.el8_10.x86_64.rpm	ffca228fc1a6035a9e3d8a17cb30d3c5f717cabb8ff6dc8d544fa9481d3e9d6c	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.62.1.el8_10.x86_64.rpm	e3f4caf6e7d8e665be490860cd06247eeddec14c099aa7b05a4d0c9206fde013	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.62.1.el8_10.x86_64.rpm	e3f4caf6e7d8e665be490860cd06247eeddec14c099aa7b05a4d0c9206fde013	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.62.1.el8_10.x86_64.rpm	d5e2b403373e25a1beab03c898c700b7d2401cd746a4ab6bc89ab46702eece07	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.62.1.el8_10.x86_64.rpm	d5e2b403373e25a1beab03c898c700b7d2401cd746a4ab6bc89ab46702eece07	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.62.1.el8_10.x86_64.rpm	88f2b5af8c96165567be1e4592a6b3fc1d50a3798fcd80d8e6c165d2463a4899	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.62.1.el8_10.x86_64.rpm	88f2b5af8c96165567be1e4592a6b3fc1d50a3798fcd80d8e6c165d2463a4899	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.62.1.el8_10.x86_64.rpm	8606026ecba50544665b4b01ad6ea5803573d82eec4b4545efa268195240969f	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.62.1.el8_10.x86_64.rpm	a79ae9064a18fb3ff0e79c21d5d6d8f5791e3d1bb26d6d3edb9952967cab3478	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.62.1.el8_10.x86_64.rpm	a79ae9064a18fb3ff0e79c21d5d6d8f5791e3d1bb26d6d3edb9952967cab3478	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.62.1.el8_10.x86_64.rpm	6d7984c82d6c731c6c058ccad85c6c38aea9c47c0e93c306b4e2f2eb34448c9c	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.62.1.el8_10.x86_64.rpm	6d7984c82d6c731c6c058ccad85c6c38aea9c47c0e93c306b4e2f2eb34448c9c	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team