ELSA-2025-11455

ELSA-2025-11455 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-07-21

Description

- [4.18.0-553.63.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.63.1_10]
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086}
- mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932}
- dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452]
- fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452]
- redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Cestmir Kalina) [RHEL-90099]
- kabi: freeze stablelist and stackprotector-related constants (Cestmir Kalina) [RHEL-90099]
- kabi: add redhat/kabi/asm-offsets (Cestmir Kalina) [RHEL-90099]
- kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Cestmir Kalina) [RHEL-90099]

Related CVEs

CVE-2024-50154

CVE-2025-38086

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.63.1.el8_10.src.rpm	97e0b9d80fbbe2cf08b18a22b66fa0d325468327174645304e382dfeba5dc685	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.63.1.el8_10.src.rpm	97e0b9d80fbbe2cf08b18a22b66fa0d325468327174645304e382dfeba5dc685	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.63.1.el8_10.src.rpm	97e0b9d80fbbe2cf08b18a22b66fa0d325468327174645304e382dfeba5dc685	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.63.1.el8_10.x86_64.rpm	74efa5c69e0e308a2abd7e7ac03916b616049e780c017d1cb82acbbcc8daa7bc	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.63.1.el8_10.x86_64.rpm	74efa5c69e0e308a2abd7e7ac03916b616049e780c017d1cb82acbbcc8daa7bc	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.63.1.el8_10.x86_64.rpm	3260e7e4747dfd73c5d4e75d7ee5772e531f4097f1516a1fb7bdced5ed492ca7	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.63.1.el8_10.x86_64.rpm	3260e7e4747dfd73c5d4e75d7ee5772e531f4097f1516a1fb7bdced5ed492ca7	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.63.1.el8_10.noarch.rpm	fc9b4c48468059e168db251bdcca7c9a2b388655f774999566ec2137004fb849	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.63.1.el8_10.noarch.rpm	fc9b4c48468059e168db251bdcca7c9a2b388655f774999566ec2137004fb849	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.63.1.el8_10.x86_64.rpm	fd9ba53717dd7b2fb16914306a8fe8767394d5283717dfe9e86dac1f0560fbbb	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.63.1.el8_10.x86_64.rpm	fd9ba53717dd7b2fb16914306a8fe8767394d5283717dfe9e86dac1f0560fbbb	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.63.1.el8_10.x86_64.rpm	327c9d646438ad15476b0baf6a2c43b620ef3670dffaff21339d8de67e68f3b6	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.63.1.el8_10.x86_64.rpm	327c9d646438ad15476b0baf6a2c43b620ef3670dffaff21339d8de67e68f3b6	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.63.1.el8_10.x86_64.rpm	b44b7e067226221063a98e464b867b3c85debb19b7611fc24aaf9403d4171aab	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.63.1.el8_10.x86_64.rpm	b44b7e067226221063a98e464b867b3c85debb19b7611fc24aaf9403d4171aab	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.63.1.el8_10.x86_64.rpm	51d79f3ce18dadc85ce8abc9542174b0dc4f4ace360d95a66df88ed6e87259e8	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.63.1.el8_10.x86_64.rpm	51d79f3ce18dadc85ce8abc9542174b0dc4f4ace360d95a66df88ed6e87259e8	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.63.1.el8_10.x86_64.rpm	64b20125094e591327233311f8de369fbefd9c8642fbd43e23cbb6318dbb6cf5	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.63.1.el8_10.x86_64.rpm	64b20125094e591327233311f8de369fbefd9c8642fbd43e23cbb6318dbb6cf5	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.63.1.el8_10.x86_64.rpm	c0f35b709da2110a8427ede8453a2de01f8d41c10924d53a7c9d61c710943b7f	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.63.1.el8_10.x86_64.rpm	c0f35b709da2110a8427ede8453a2de01f8d41c10924d53a7c9d61c710943b7f	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.63.1.el8_10.x86_64.rpm	456a1c9c4667b3327fc3484e12ba004ce83ccfd7fe46273c7c6595b4b507db1c	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.63.1.el8_10.x86_64.rpm	456a1c9c4667b3327fc3484e12ba004ce83ccfd7fe46273c7c6595b4b507db1c	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.63.1.el8_10.x86_64.rpm	53898118b5d9dc84b21c46c125f27a375ab04f1aefb40015b6e5df3641469e4a	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.63.1.el8_10.x86_64.rpm	53898118b5d9dc84b21c46c125f27a375ab04f1aefb40015b6e5df3641469e4a	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.63.1.el8_10.noarch.rpm	ba6a8feece22c41695514b1e31bf482177d24fd7d5694fabad5b682c4b2d5a76	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.63.1.el8_10.noarch.rpm	ba6a8feece22c41695514b1e31bf482177d24fd7d5694fabad5b682c4b2d5a76	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.63.1.el8_10.x86_64.rpm	1467c7f0308bd2a6c45bd40d47807e7d417a71bf9b51de6c0dbb216613a5cfe0	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.63.1.el8_10.x86_64.rpm	1467c7f0308bd2a6c45bd40d47807e7d417a71bf9b51de6c0dbb216613a5cfe0	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.63.1.el8_10.x86_64.rpm	df3e9f513e4ef517029177eda1be457adb4b9cb123d29a7036b4eb91e580b4fb	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.63.1.el8_10.x86_64.rpm	df3e9f513e4ef517029177eda1be457adb4b9cb123d29a7036b4eb91e580b4fb	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.63.1.el8_10.x86_64.rpm	9db9f0456c46729a9b695087512f5131c26d8e685e187539fc049a9650bf09d8	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.63.1.el8_10.x86_64.rpm	9db9f0456c46729a9b695087512f5131c26d8e685e187539fc049a9650bf09d8	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.63.1.el8_10.x86_64.rpm	00b78c6849058906be2dbfc22ddb8ca3c41769ba0633ecc2f07a2abf992e74b7	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.63.1.el8_10.x86_64.rpm	00b78c6849058906be2dbfc22ddb8ca3c41769ba0633ecc2f07a2abf992e74b7	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.63.1.el8_10.x86_64.rpm	20eb829e6a62bb18b329c333f4c6423ab2ca7fa19c19c7217032a8406e96d087	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.63.1.el8_10.x86_64.rpm	20eb829e6a62bb18b329c333f4c6423ab2ca7fa19c19c7217032a8406e96d087	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.63.1.el8_10.x86_64.rpm	e736522b24d2b8e66526f256c447841f84c54d22a2f4a5ac9478b02915ce4913	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.63.1.el8_10.x86_64.rpm	15d9f843cc6129b3a90b9c9b25c3509bfcc16aaba0472aac268ec61188928063	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.63.1.el8_10.x86_64.rpm	15d9f843cc6129b3a90b9c9b25c3509bfcc16aaba0472aac268ec61188928063	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.63.1.el8_10.x86_64.rpm	6c326f86e3b0a94eb4c314efa2f91a30467ecf04b67893a54caeced608d94cd1	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.63.1.el8_10.x86_64.rpm	6c326f86e3b0a94eb4c314efa2f91a30467ecf04b67893a54caeced608d94cd1	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team