Stay Connected:

ELSA-2025-13589

ELSA-2025-13589 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-08-11

Description


[4.18.0-553.69.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.69.1_10]
- Revert 'sch_htb: make htb_qlen_notify() idempotent' (Denys Vlasenko) [RHEL-108140]
- Revert 'sch_drr: make drr_qlen_notify() idempotent' (Denys Vlasenko) [RHEL-108140]
- Revert 'sch_qfq: make qfq_qlen_notify() idempotent' (Denys Vlasenko) [RHEL-108140]
- Revert 'codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()' (Denys Vlasenko) [RHEL-108140]
- Revert 'sch_htb: make htb_deactivate() idempotent' (Denys Vlasenko) [RHEL-108140]
- Revert 'net/sched: Always pass notifications when child class becomes empty' (Denys Vlasenko) [RHEL-108140]
- Revert 'sch_cbq: make cbq_qlen_notify() idempotent' (Denys Vlasenko) [RHEL-108140]

[4.18.0-553.68.1_10]
- ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759}
- md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991]
- md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991]
- md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991]
- md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991]
- md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991]
- md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991]
- md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928]
- md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928]
- md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928]
- md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928]
- raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928]
- md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928]
- sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376]
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670}
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159}
- net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644}

[4.18.0-553.67.1_10]
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727}
- redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek)
- ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912]


Related CVEs


CVE-2021-47670
CVE-2025-38159
CVE-2025-21727
CVE-2024-56644
CVE-2025-21759
CVE-2025-38085

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.69.1.el8_10.src.rpmffb8071ed0af6f1fcb656a3652d9dfabda276e43671c3ca6f66b7365d22888ee-ol8_aarch64_baseos_latest
kernel-4.18.0-553.69.1.el8_10.src.rpmffb8071ed0af6f1fcb656a3652d9dfabda276e43671c3ca6f66b7365d22888ee-ol8_aarch64_codeready_builder
kernel-4.18.0-553.69.1.el8_10.src.rpmffb8071ed0af6f1fcb656a3652d9dfabda276e43671c3ca6f66b7365d22888ee-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.69.1.el8_10.aarch64.rpmf1b77cbd07e3d94d0fefeb105f5f9895a508e0bc94cdb799c65a9e6e7d30d11c-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.69.1.el8_10.aarch64.rpmf1b77cbd07e3d94d0fefeb105f5f9895a508e0bc94cdb799c65a9e6e7d30d11c-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.69.1.el8_10.aarch64.rpm113813799d4c8f8f8cd2f5674adff04bb338027ad204c278f5673efecfabc9a1-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.69.1.el8_10.aarch64.rpm113813799d4c8f8f8cd2f5674adff04bb338027ad204c278f5673efecfabc9a1-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.69.1.el8_10.aarch64.rpm7a3e60b7e6e20a2a7f330caf9114c7975905ba96f5593e912322d607be4347f8-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.69.1.el8_10.aarch64.rpm7a3e60b7e6e20a2a7f330caf9114c7975905ba96f5593e912322d607be4347f8-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.69.1.el8_10.aarch64.rpm93b4b8067535f3154d38dc1f1ebed1eaf961ee00716565e05ea3a12b0d2d9f7a-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.69.1.el8_10.aarch64.rpm93b4b8067535f3154d38dc1f1ebed1eaf961ee00716565e05ea3a12b0d2d9f7a-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.69.1.el8_10.aarch64.rpm93199dc805068545a49a877cfd161c8dd216d02f0a28b30e07a1cdb2cd42c792-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.69.1.el8_10.aarch64.rpm93199dc805068545a49a877cfd161c8dd216d02f0a28b30e07a1cdb2cd42c792-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.69.1.el8_10.aarch64.rpm3515bade119bb91698e110bff1aeaa8b3651a6d0b9a8ca793cd09cacca38fb7e-ol8_aarch64_codeready_builder
perf-4.18.0-553.69.1.el8_10.aarch64.rpm9d4306cf237f135f66b97874b23c1d093c06b74bd9c95d1cd36fa488ee1d32c5-ol8_aarch64_baseos_latest
perf-4.18.0-553.69.1.el8_10.aarch64.rpm9d4306cf237f135f66b97874b23c1d093c06b74bd9c95d1cd36fa488ee1d32c5-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.69.1.el8_10.aarch64.rpmd86d79d6354c3278795da69f00f352c00b69a2e9f708581cc611fced0b4f1cbf-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.69.1.el8_10.aarch64.rpmd86d79d6354c3278795da69f00f352c00b69a2e9f708581cc611fced0b4f1cbf-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.69.1.el8_10.src.rpmffb8071ed0af6f1fcb656a3652d9dfabda276e43671c3ca6f66b7365d22888ee-ol8_x86_64_baseos_latest
kernel-4.18.0-553.69.1.el8_10.src.rpmffb8071ed0af6f1fcb656a3652d9dfabda276e43671c3ca6f66b7365d22888ee-ol8_x86_64_codeready_builder
kernel-4.18.0-553.69.1.el8_10.src.rpmffb8071ed0af6f1fcb656a3652d9dfabda276e43671c3ca6f66b7365d22888ee-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.69.1.el8_10.x86_64.rpmbc59faf1ff19e5ce1df35584a939f8368a6276006d48555a5fc3068591b37d10-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.69.1.el8_10.x86_64.rpmbc59faf1ff19e5ce1df35584a939f8368a6276006d48555a5fc3068591b37d10-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.69.1.el8_10.x86_64.rpm020a5ceaac42f260e2c5c3dc0b87255f2a15a663b2a9e0103900b5f6d103eb7c-ol8_x86_64_baseos_latest
kernel-4.18.0-553.69.1.el8_10.x86_64.rpm020a5ceaac42f260e2c5c3dc0b87255f2a15a663b2a9e0103900b5f6d103eb7c-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.69.1.el8_10.noarch.rpm795265c5a2ab0f5cc29b71174f7afaffb67495e5924ad69e5fcb03e89ced6060-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.69.1.el8_10.noarch.rpm795265c5a2ab0f5cc29b71174f7afaffb67495e5924ad69e5fcb03e89ced6060-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.69.1.el8_10.x86_64.rpmd8eb43b022c9b737f16ed34cd7d657aae943dd17ed82bbc0e0ecae1a0780706a-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.69.1.el8_10.x86_64.rpmd8eb43b022c9b737f16ed34cd7d657aae943dd17ed82bbc0e0ecae1a0780706a-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.69.1.el8_10.x86_64.rpmc94f3bf28c98a76370ff46eb72dff22888eef007ea307c6722047eafa9e7a5cc-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.69.1.el8_10.x86_64.rpmc94f3bf28c98a76370ff46eb72dff22888eef007ea307c6722047eafa9e7a5cc-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.69.1.el8_10.x86_64.rpm769a756d29541bb45cb32747e8f88935f6017177770ae1151422e5f586e2a4cb-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.69.1.el8_10.x86_64.rpm769a756d29541bb45cb32747e8f88935f6017177770ae1151422e5f586e2a4cb-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.69.1.el8_10.x86_64.rpm0c9e001900ce0fcaafcafb0a7008ba7e00c826a111e3b374c3e723efbf119b56-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.69.1.el8_10.x86_64.rpm0c9e001900ce0fcaafcafb0a7008ba7e00c826a111e3b374c3e723efbf119b56-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.69.1.el8_10.x86_64.rpmbcdb540410a57bd4424192a9da718b5d27e0de2173d6a3de1f3fad9bc7ab0a77-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.69.1.el8_10.x86_64.rpmbcdb540410a57bd4424192a9da718b5d27e0de2173d6a3de1f3fad9bc7ab0a77-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.69.1.el8_10.x86_64.rpm72c18a83e7241cf317ad42fba739e5c09160af219360af9edf25a124ea9f6817-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.69.1.el8_10.x86_64.rpm72c18a83e7241cf317ad42fba739e5c09160af219360af9edf25a124ea9f6817-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.69.1.el8_10.x86_64.rpmc34384932f74ad8f6369d3e04c9e2331651126b7fb02a594bbf2f0b4dc0fdd96-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.69.1.el8_10.x86_64.rpmc34384932f74ad8f6369d3e04c9e2331651126b7fb02a594bbf2f0b4dc0fdd96-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.69.1.el8_10.x86_64.rpmf3ad6b5ab3f29ed1ae74a09dfbb81a58199669bbe54caf0c46cb76a10540273b-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.69.1.el8_10.x86_64.rpmf3ad6b5ab3f29ed1ae74a09dfbb81a58199669bbe54caf0c46cb76a10540273b-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.69.1.el8_10.noarch.rpm5f7cd48642b74a0b000f072a079dfacfd2fd0e0edf43d984a6f4bfcc68632873-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.69.1.el8_10.noarch.rpm5f7cd48642b74a0b000f072a079dfacfd2fd0e0edf43d984a6f4bfcc68632873-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.69.1.el8_10.x86_64.rpm04cddc8fab819e5e9e5037a957497d35167f4813c5deaa96e6a3abf629a230c3-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.69.1.el8_10.x86_64.rpm04cddc8fab819e5e9e5037a957497d35167f4813c5deaa96e6a3abf629a230c3-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.69.1.el8_10.x86_64.rpmc5378032ae975a3ad0b8151f03e89d020b1f84f37c074976a4c8455c368b07f3-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.69.1.el8_10.x86_64.rpmc5378032ae975a3ad0b8151f03e89d020b1f84f37c074976a4c8455c368b07f3-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.69.1.el8_10.x86_64.rpmca1ccbbaf50b5ca934088f9ac168ebffc24b40793aec87968980a56e1ffe0ee8-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.69.1.el8_10.x86_64.rpmca1ccbbaf50b5ca934088f9ac168ebffc24b40793aec87968980a56e1ffe0ee8-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.69.1.el8_10.x86_64.rpm95ac692391d0bcc2b13b71ba1d1ca05aa6f0132e8f8e17c29666c86ea40c65a7-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.69.1.el8_10.x86_64.rpm95ac692391d0bcc2b13b71ba1d1ca05aa6f0132e8f8e17c29666c86ea40c65a7-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.69.1.el8_10.x86_64.rpmecde8073a45c3f70564406d5839ad64fcfd1d14d62f78f14f5b7b34d56a4ad54-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.69.1.el8_10.x86_64.rpmecde8073a45c3f70564406d5839ad64fcfd1d14d62f78f14f5b7b34d56a4ad54-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.69.1.el8_10.x86_64.rpm1bd5ed67f011c950712e60f474d8e91b6f8fb124db9a57fdd31c8115af6f405e-ol8_x86_64_codeready_builder
perf-4.18.0-553.69.1.el8_10.x86_64.rpm75f7bd68174200d347820009e7909f3d51163a1339cff7f6f6b63a46c853e5f3-ol8_x86_64_baseos_latest
perf-4.18.0-553.69.1.el8_10.x86_64.rpm75f7bd68174200d347820009e7909f3d51163a1339cff7f6f6b63a46c853e5f3-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.69.1.el8_10.x86_64.rpm52eb07b614a44fd78925996b45258d931cbed1cc9f3c606cadc53009193f6bc7-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.69.1.el8_10.x86_64.rpm52eb07b614a44fd78925996b45258d931cbed1cc9f3c606cadc53009193f6bc7-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights