Stay Connected:

ELSA-2025-16372

ELSA-2025-16372 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-09-22

Description


[4.18.0-553.76.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.76.1_10]
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498}
- xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193]
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461}


Related CVEs


CVE-2025-38461
CVE-2025-38498
CVE-2025-38556

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.76.1.el8_10.src.rpm02f4bbf27bd431576986387ef3b2e40db260d8142ad4d4838c4006dd86b5cc12-ol8_aarch64_baseos_latest
kernel-4.18.0-553.76.1.el8_10.src.rpm02f4bbf27bd431576986387ef3b2e40db260d8142ad4d4838c4006dd86b5cc12-ol8_aarch64_codeready_builder
kernel-4.18.0-553.76.1.el8_10.src.rpm02f4bbf27bd431576986387ef3b2e40db260d8142ad4d4838c4006dd86b5cc12-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.76.1.el8_10.aarch64.rpmfe181a3178833ba0ee01d8f94aedcaaff1573556c6eb2916e19d5c72fffd3d59-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.76.1.el8_10.aarch64.rpmfe181a3178833ba0ee01d8f94aedcaaff1573556c6eb2916e19d5c72fffd3d59-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.76.1.el8_10.aarch64.rpm59a7c6d26671f6264a2514bd8ad3931c82557975d4ceb05cc893ec52a4b0b7bd-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.76.1.el8_10.aarch64.rpm59a7c6d26671f6264a2514bd8ad3931c82557975d4ceb05cc893ec52a4b0b7bd-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.76.1.el8_10.aarch64.rpm30040786ad7dbec56d90cf04a5a9021deb0a3e929aaaf20ec470a7a337c5bc62-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.76.1.el8_10.aarch64.rpm30040786ad7dbec56d90cf04a5a9021deb0a3e929aaaf20ec470a7a337c5bc62-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.76.1.el8_10.aarch64.rpmb033660573005a6ad4ec101a0286001736b7bc1be226fed96ebc772edb771d57-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.76.1.el8_10.aarch64.rpmb033660573005a6ad4ec101a0286001736b7bc1be226fed96ebc772edb771d57-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.76.1.el8_10.aarch64.rpm3fe9f0099db0094068e651f377377bc249c453fe88fc7570876312ed6f0f7042-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.76.1.el8_10.aarch64.rpm3fe9f0099db0094068e651f377377bc249c453fe88fc7570876312ed6f0f7042-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.76.1.el8_10.aarch64.rpm9aefd4cb5e3360cb1ffc33e3f664fa82cffc208cd2f55261c4423b49ef512c93-ol8_aarch64_codeready_builder
perf-4.18.0-553.76.1.el8_10.aarch64.rpmdcefd8a11eba301c396a195a3edf34e727c3258d5d3242e31f0a7c5b5bd8faef-ol8_aarch64_baseos_latest
perf-4.18.0-553.76.1.el8_10.aarch64.rpmdcefd8a11eba301c396a195a3edf34e727c3258d5d3242e31f0a7c5b5bd8faef-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.76.1.el8_10.aarch64.rpmcfe6251a7666c9e7226abb23077be66763800c5a42b2feb782f0a799929c3b9f-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.76.1.el8_10.aarch64.rpmcfe6251a7666c9e7226abb23077be66763800c5a42b2feb782f0a799929c3b9f-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.76.1.el8_10.src.rpm02f4bbf27bd431576986387ef3b2e40db260d8142ad4d4838c4006dd86b5cc12-ol8_x86_64_baseos_latest
kernel-4.18.0-553.76.1.el8_10.src.rpm02f4bbf27bd431576986387ef3b2e40db260d8142ad4d4838c4006dd86b5cc12-ol8_x86_64_codeready_builder
kernel-4.18.0-553.76.1.el8_10.src.rpm02f4bbf27bd431576986387ef3b2e40db260d8142ad4d4838c4006dd86b5cc12-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.76.1.el8_10.x86_64.rpm819f50a8c64bbd9905f94f3d9d40b63c9cdfed36f457cedbb4e825f85fbc7f8b-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.76.1.el8_10.x86_64.rpm819f50a8c64bbd9905f94f3d9d40b63c9cdfed36f457cedbb4e825f85fbc7f8b-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.76.1.el8_10.x86_64.rpm1900b467e000c7c3aa1e0baf406ec962ac2493696c25c41991a413c92c7f16fe-ol8_x86_64_baseos_latest
kernel-4.18.0-553.76.1.el8_10.x86_64.rpm1900b467e000c7c3aa1e0baf406ec962ac2493696c25c41991a413c92c7f16fe-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.76.1.el8_10.noarch.rpm6c0d6317c7f997661e897242adb8d98698d6cc15da91171e91f566db60695a30-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.76.1.el8_10.noarch.rpm6c0d6317c7f997661e897242adb8d98698d6cc15da91171e91f566db60695a30-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.76.1.el8_10.x86_64.rpma7a413cb801b251f7b38d6db73aa3b379a534318ff0189d4c150fc796e4edab3-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.76.1.el8_10.x86_64.rpma7a413cb801b251f7b38d6db73aa3b379a534318ff0189d4c150fc796e4edab3-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.76.1.el8_10.x86_64.rpm24bc33d1bcd00ce681b83a4d17d4678518a3fd34d3c3d120f2960cfc4b72d0ca-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.76.1.el8_10.x86_64.rpm24bc33d1bcd00ce681b83a4d17d4678518a3fd34d3c3d120f2960cfc4b72d0ca-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.76.1.el8_10.x86_64.rpmc332269ed5745f41656f6860ed23b2adcc1dbf118848c8570a6c2ac871a6e54b-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.76.1.el8_10.x86_64.rpmc332269ed5745f41656f6860ed23b2adcc1dbf118848c8570a6c2ac871a6e54b-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.76.1.el8_10.x86_64.rpmcc150ed010d62f8392d66e78807e8e381aa94c48d31b3742fc227bef31e07c26-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.76.1.el8_10.x86_64.rpmcc150ed010d62f8392d66e78807e8e381aa94c48d31b3742fc227bef31e07c26-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.76.1.el8_10.x86_64.rpm5795de06734685284fbd72e9b9bafd4ed30e032c8c7d20ce18a717cc01810e1f-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.76.1.el8_10.x86_64.rpm5795de06734685284fbd72e9b9bafd4ed30e032c8c7d20ce18a717cc01810e1f-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.76.1.el8_10.x86_64.rpmd79107a32de35565543438351b22a918d043d038bfd2203aac5d8c855c9736a2-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.76.1.el8_10.x86_64.rpmd79107a32de35565543438351b22a918d043d038bfd2203aac5d8c855c9736a2-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.76.1.el8_10.x86_64.rpmf74cfefb0b045c83b0dda8b2b1356063e92d36af929fc20fd0e0dc873dc2b96b-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.76.1.el8_10.x86_64.rpmf74cfefb0b045c83b0dda8b2b1356063e92d36af929fc20fd0e0dc873dc2b96b-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.76.1.el8_10.x86_64.rpmf83f2dc9850dd8ab33ead3fae3fc6567c0aecec0711b378e52decd09df1fb62f-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.76.1.el8_10.x86_64.rpmf83f2dc9850dd8ab33ead3fae3fc6567c0aecec0711b378e52decd09df1fb62f-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.76.1.el8_10.noarch.rpm545a409a5c1769059e58ec81c9935929d25396e182b564b1da95daa78db76f8f-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.76.1.el8_10.noarch.rpm545a409a5c1769059e58ec81c9935929d25396e182b564b1da95daa78db76f8f-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.76.1.el8_10.x86_64.rpm49f2a5e81b25b6b01bc7f99a0574cbe4ff88b529812ad87831d17890d4571d8b-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.76.1.el8_10.x86_64.rpm49f2a5e81b25b6b01bc7f99a0574cbe4ff88b529812ad87831d17890d4571d8b-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.76.1.el8_10.x86_64.rpm683cdb868d9a2555f0f8dee76312d8acac2e6bfc1ed82c804c4e49ae1278a1ad-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.76.1.el8_10.x86_64.rpm683cdb868d9a2555f0f8dee76312d8acac2e6bfc1ed82c804c4e49ae1278a1ad-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.76.1.el8_10.x86_64.rpmb006b4d0fe45cf31922bfebb6b30b0c6ce735a026193f641f10a228ee7777766-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.76.1.el8_10.x86_64.rpmb006b4d0fe45cf31922bfebb6b30b0c6ce735a026193f641f10a228ee7777766-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.76.1.el8_10.x86_64.rpmd23aa2e9f2ea451d321dcb8bf57953f568cb8f16ebb7be29c25c765c8c0da3cb-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.76.1.el8_10.x86_64.rpmd23aa2e9f2ea451d321dcb8bf57953f568cb8f16ebb7be29c25c765c8c0da3cb-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.76.1.el8_10.x86_64.rpmf5d4864007edc5f29f372d2f813ba3c0c3dda4d78947a580c0bf104f107e59bf-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.76.1.el8_10.x86_64.rpmf5d4864007edc5f29f372d2f813ba3c0c3dda4d78947a580c0bf104f107e59bf-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.76.1.el8_10.x86_64.rpm81e1d4b9027a00327e0abc2dba3b9e3088711526827b01b932427420c4105309-ol8_x86_64_codeready_builder
perf-4.18.0-553.76.1.el8_10.x86_64.rpmf671cbea1a3cc60526601adfa17974a88065c64823d96d8f6a5efb0f57660c53-ol8_x86_64_baseos_latest
perf-4.18.0-553.76.1.el8_10.x86_64.rpmf671cbea1a3cc60526601adfa17974a88065c64823d96d8f6a5efb0f57660c53-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.76.1.el8_10.x86_64.rpm5a9fc4e0a049f341eaef0b40d7a80ac23a95bb7e1fb42e665fcf7020c27d3c89-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.76.1.el8_10.x86_64.rpm5a9fc4e0a049f341eaef0b40d7a80ac23a95bb7e1fb42e665fcf7020c27d3c89-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights