ELSA-2025-15785

ELSA-2025-15785 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-09-15

Description

[4.18.0-553.75.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.75.1_10]
- Revert 'module, async: async_synchronize_full() on module init iff async is used' (Herton R. Krzesinski) [RHEL-99812]
- mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453]
- sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350}
- net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953}
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932}
- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392}
- drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449}
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713]
- vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160]
- xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655]
- xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655]
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125}
- net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125}
- PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671]

Related CVEs

CVE-2025-38449

CVE-2025-38350

CVE-2025-38392

CVE-2023-53125

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.75.1.el8_10.src.rpm	7ef5d3b29853bace5ea76584a1680ca88d59707ce57062be2afd5dc0107fef15	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.75.1.el8_10.src.rpm	7ef5d3b29853bace5ea76584a1680ca88d59707ce57062be2afd5dc0107fef15	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.75.1.el8_10.src.rpm	7ef5d3b29853bace5ea76584a1680ca88d59707ce57062be2afd5dc0107fef15	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.75.1.el8_10.aarch64.rpm	2ea1bc363e10040e711cc536c4fb7ddf5d39972aacdc7f96870cb48340cec569	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.75.1.el8_10.aarch64.rpm	2ea1bc363e10040e711cc536c4fb7ddf5d39972aacdc7f96870cb48340cec569	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.75.1.el8_10.aarch64.rpm	e3e9a2bf40677fde443ece565d87af7ea711687c577e24d1d0ee487f16fb485a	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.75.1.el8_10.aarch64.rpm	e3e9a2bf40677fde443ece565d87af7ea711687c577e24d1d0ee487f16fb485a	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.75.1.el8_10.aarch64.rpm	e462df8f90dffcb54e39160c24b186a9f0f6173f1ab10fd812b49e3f2396db12	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.75.1.el8_10.aarch64.rpm	e462df8f90dffcb54e39160c24b186a9f0f6173f1ab10fd812b49e3f2396db12	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.75.1.el8_10.aarch64.rpm	7c0ed360e28c7ef8bb1d6d12643bcadd2fb193afb4c1572bfa4ad4ec682f5659	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.75.1.el8_10.aarch64.rpm	7c0ed360e28c7ef8bb1d6d12643bcadd2fb193afb4c1572bfa4ad4ec682f5659	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.75.1.el8_10.aarch64.rpm	b9a3906a90bea542b3983e71683d209ccde6ecda06239278a4c54e6bc84451f3	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.75.1.el8_10.aarch64.rpm	b9a3906a90bea542b3983e71683d209ccde6ecda06239278a4c54e6bc84451f3	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.75.1.el8_10.aarch64.rpm	e53de507bc02c6211728e343ee7fc0b636f786c8d2b84ed211ff816ed597dc77	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.75.1.el8_10.aarch64.rpm	ac93d17108736c348482a18b4777e38d28179878dd8eebc85a4c8a2231e6d558	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.75.1.el8_10.aarch64.rpm	ac93d17108736c348482a18b4777e38d28179878dd8eebc85a4c8a2231e6d558	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.75.1.el8_10.aarch64.rpm	5ff33f71622cb3afc37b6c67f62b60c64e362fde2c923d9dc1542b839d18d47a	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.75.1.el8_10.aarch64.rpm	5ff33f71622cb3afc37b6c67f62b60c64e362fde2c923d9dc1542b839d18d47a	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.75.1.el8_10.src.rpm	7ef5d3b29853bace5ea76584a1680ca88d59707ce57062be2afd5dc0107fef15	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.75.1.el8_10.src.rpm	7ef5d3b29853bace5ea76584a1680ca88d59707ce57062be2afd5dc0107fef15	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.75.1.el8_10.src.rpm	7ef5d3b29853bace5ea76584a1680ca88d59707ce57062be2afd5dc0107fef15	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.75.1.el8_10.x86_64.rpm	84efb63481b6fc444c34276a8952c44ac3131e1e2a46b5599f82382efb295463	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.75.1.el8_10.x86_64.rpm	84efb63481b6fc444c34276a8952c44ac3131e1e2a46b5599f82382efb295463	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.75.1.el8_10.x86_64.rpm	90a96382748370e7992a17a9781c14ab0f5c8d30e397d92dd75c122b25ab57a2	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.75.1.el8_10.x86_64.rpm	90a96382748370e7992a17a9781c14ab0f5c8d30e397d92dd75c122b25ab57a2	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.75.1.el8_10.noarch.rpm	d6dc92846dee259ec97bd16d8bdf7b513b1706dd24844e4fc14e7c978db575c3	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.75.1.el8_10.noarch.rpm	d6dc92846dee259ec97bd16d8bdf7b513b1706dd24844e4fc14e7c978db575c3	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.75.1.el8_10.x86_64.rpm	586a726a25985409b3e172e64ed0611ecdb16e11aa6e7a7dd0a95d6b89c7a63b	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.75.1.el8_10.x86_64.rpm	586a726a25985409b3e172e64ed0611ecdb16e11aa6e7a7dd0a95d6b89c7a63b	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.75.1.el8_10.x86_64.rpm	016cce7b6714904ad70ac8f0aaa0c52824935d7731b49ed6c5e97f0043430d48	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.75.1.el8_10.x86_64.rpm	016cce7b6714904ad70ac8f0aaa0c52824935d7731b49ed6c5e97f0043430d48	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.75.1.el8_10.x86_64.rpm	0211b753f6f1816924a381df16be81342abca02767faaca2acaafb005ac418e6	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.75.1.el8_10.x86_64.rpm	0211b753f6f1816924a381df16be81342abca02767faaca2acaafb005ac418e6	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.75.1.el8_10.x86_64.rpm	19b6f9475c3e500b0c41cdb759294745dbe78a8ce0d9ea4ee236e4db0feeaa36	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.75.1.el8_10.x86_64.rpm	19b6f9475c3e500b0c41cdb759294745dbe78a8ce0d9ea4ee236e4db0feeaa36	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.75.1.el8_10.x86_64.rpm	0cc78ae19d5191359f2a072b1481a5afb523ddc0b6d87de86cb99ceb473e69b2	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.75.1.el8_10.x86_64.rpm	0cc78ae19d5191359f2a072b1481a5afb523ddc0b6d87de86cb99ceb473e69b2	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.75.1.el8_10.x86_64.rpm	ebacf76dc34dd9eac1a88df97beb81ae3705e8f778f1fb356bde18cb15c553b8	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.75.1.el8_10.x86_64.rpm	ebacf76dc34dd9eac1a88df97beb81ae3705e8f778f1fb356bde18cb15c553b8	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.75.1.el8_10.x86_64.rpm	900e9780ff1091a6ef727ee31fb6af3ca2b14c1bb3667e9e9b06dc77fc4af0e4	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.75.1.el8_10.x86_64.rpm	900e9780ff1091a6ef727ee31fb6af3ca2b14c1bb3667e9e9b06dc77fc4af0e4	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.75.1.el8_10.x86_64.rpm	146342e7759e0c41727c466db97c12a0d079414f0e09376f3c1f141bcc598af0	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.75.1.el8_10.x86_64.rpm	146342e7759e0c41727c466db97c12a0d079414f0e09376f3c1f141bcc598af0	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.75.1.el8_10.noarch.rpm	b9da86f7a2471ffd77ccb94fac66d8630adba88da7ed7c534418a9a770e6e039	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.75.1.el8_10.noarch.rpm	b9da86f7a2471ffd77ccb94fac66d8630adba88da7ed7c534418a9a770e6e039	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.75.1.el8_10.x86_64.rpm	126cb5f3f607e6d3d0bf5ceb091eb26ae8422df4c04f95bc1f091768a7b89d3f	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.75.1.el8_10.x86_64.rpm	126cb5f3f607e6d3d0bf5ceb091eb26ae8422df4c04f95bc1f091768a7b89d3f	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.75.1.el8_10.x86_64.rpm	99806302c5a700015b272467f6f664d2d03d53d47081aaaf69f76674f089f23a	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.75.1.el8_10.x86_64.rpm	99806302c5a700015b272467f6f664d2d03d53d47081aaaf69f76674f089f23a	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.75.1.el8_10.x86_64.rpm	22cb124f7717104a8adac3cd2bd93aa73a9d6abe556f939af72dd91cb5732be7	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.75.1.el8_10.x86_64.rpm	22cb124f7717104a8adac3cd2bd93aa73a9d6abe556f939af72dd91cb5732be7	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.75.1.el8_10.x86_64.rpm	ed903736b3d3bc72c2a286f7cc5543faafea80564913b44de924f3d74dd13a93	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.75.1.el8_10.x86_64.rpm	ed903736b3d3bc72c2a286f7cc5543faafea80564913b44de924f3d74dd13a93	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.75.1.el8_10.x86_64.rpm	a65712c3b0405533c66dedc6a7240aef169cb50eb004ff4a11a10682fa0c1147	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.75.1.el8_10.x86_64.rpm	a65712c3b0405533c66dedc6a7240aef169cb50eb004ff4a11a10682fa0c1147	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.75.1.el8_10.x86_64.rpm	267ca15b59feef7f65586d638a538e7f869f9f33e6a1ac291a543ba702ad9c70	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.75.1.el8_10.x86_64.rpm	cd9470129f5fe9fc89875a2eb91da7c8002a240d57624d62b865c33500d54083	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.75.1.el8_10.x86_64.rpm	cd9470129f5fe9fc89875a2eb91da7c8002a240d57624d62b865c33500d54083	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.75.1.el8_10.x86_64.rpm	6793bd5bd5e04bea63b793d43d159c7c0fbaf08ab829cdf8b13129be0fbd1ee3	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.75.1.el8_10.x86_64.rpm	6793bd5bd5e04bea63b793d43d159c7c0fbaf08ab829cdf8b13129be0fbd1ee3	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team