Stay Connected:

ELSA-2025-19931

ELSA-2025-19931 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-11-10

Description


[4.18.0-553.83.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.83.1]
- fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367}
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781]
- i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781]
- i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781]
- bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781]
- bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781]
- qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757]
- fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215]
- jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215]
- jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215]
- s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611]
- mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}
- mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}


Related CVEs


CVE-2025-40300
CVE-2022-50367
CVE-2023-53178

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.83.1.el8_10.src.rpm068994ef6411d5fd75d24b129496d7f49c89b7f43b179e9e1037231546b93d22-ol8_aarch64_baseos_latest
kernel-4.18.0-553.83.1.el8_10.src.rpm068994ef6411d5fd75d24b129496d7f49c89b7f43b179e9e1037231546b93d22-ol8_aarch64_codeready_builder
kernel-4.18.0-553.83.1.el8_10.src.rpm068994ef6411d5fd75d24b129496d7f49c89b7f43b179e9e1037231546b93d22-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.83.1.el8_10.aarch64.rpm75fb758acee1a1d718103e33413c54ce905613ad1f0b772b614a6ebd0539c6ef-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.83.1.el8_10.aarch64.rpm75fb758acee1a1d718103e33413c54ce905613ad1f0b772b614a6ebd0539c6ef-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.83.1.el8_10.aarch64.rpm84e40bc51ce74dfe59f6fd5a6c62792269aa3fcfefd096dc348fc77f09de2cac-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.83.1.el8_10.aarch64.rpm84e40bc51ce74dfe59f6fd5a6c62792269aa3fcfefd096dc348fc77f09de2cac-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.83.1.el8_10.aarch64.rpmc40aec4f098d48fd2123bc7d47d9c7ceb191d18d8eb2c2d94b63afa12885a1d9-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.83.1.el8_10.aarch64.rpmc40aec4f098d48fd2123bc7d47d9c7ceb191d18d8eb2c2d94b63afa12885a1d9-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.83.1.el8_10.aarch64.rpm776727f4002efa68019be88665eff020de07e5b0709e21c199705bb944331f95-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.83.1.el8_10.aarch64.rpm776727f4002efa68019be88665eff020de07e5b0709e21c199705bb944331f95-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.83.1.el8_10.aarch64.rpm760698665c675b1753740fa5b7a6cca3f8e8fc8c7da0bebc48f3ba6d8f07c106-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.83.1.el8_10.aarch64.rpm760698665c675b1753740fa5b7a6cca3f8e8fc8c7da0bebc48f3ba6d8f07c106-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.83.1.el8_10.aarch64.rpm623e203c4a43387385f3faf8fe3ca0311c7366562be22f0cdf5e9ef40f4ccc31-ol8_aarch64_codeready_builder
perf-4.18.0-553.83.1.el8_10.aarch64.rpm571cd4e27161a3f3341844acdf6b466f4d7b7084c13b771562a567a67c5adcd9-ol8_aarch64_baseos_latest
perf-4.18.0-553.83.1.el8_10.aarch64.rpm571cd4e27161a3f3341844acdf6b466f4d7b7084c13b771562a567a67c5adcd9-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.83.1.el8_10.aarch64.rpm1eaf26559a0a87d646cfc3ed2dcd99b9e7baf40ec573e7f250d39e14e8bb214d-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.83.1.el8_10.aarch64.rpm1eaf26559a0a87d646cfc3ed2dcd99b9e7baf40ec573e7f250d39e14e8bb214d-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.83.1.el8_10.src.rpm068994ef6411d5fd75d24b129496d7f49c89b7f43b179e9e1037231546b93d22-ol8_x86_64_baseos_latest
kernel-4.18.0-553.83.1.el8_10.src.rpm068994ef6411d5fd75d24b129496d7f49c89b7f43b179e9e1037231546b93d22-ol8_x86_64_codeready_builder
kernel-4.18.0-553.83.1.el8_10.src.rpm068994ef6411d5fd75d24b129496d7f49c89b7f43b179e9e1037231546b93d22-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.83.1.el8_10.x86_64.rpmdcabd02e1aacf1b9495f7e56c6c253e0a81b1cfb1285903d2d0f62a14a4402b6-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.83.1.el8_10.x86_64.rpmdcabd02e1aacf1b9495f7e56c6c253e0a81b1cfb1285903d2d0f62a14a4402b6-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.83.1.el8_10.x86_64.rpm3515f07c3995d0c74ad2fd4177f031212aa2fada76d6c5fbd6b489eebd607e16-ol8_x86_64_baseos_latest
kernel-4.18.0-553.83.1.el8_10.x86_64.rpm3515f07c3995d0c74ad2fd4177f031212aa2fada76d6c5fbd6b489eebd607e16-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.83.1.el8_10.noarch.rpm329877bbe0c65a529c687fecec4325dd915d374834bd4307fdacc72df2ebec11-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.83.1.el8_10.noarch.rpm329877bbe0c65a529c687fecec4325dd915d374834bd4307fdacc72df2ebec11-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.83.1.el8_10.x86_64.rpme521f5b709592bbcf1552f2d0afbbce6613520d54c99f047127cf66d4ad29f34-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.83.1.el8_10.x86_64.rpme521f5b709592bbcf1552f2d0afbbce6613520d54c99f047127cf66d4ad29f34-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.83.1.el8_10.x86_64.rpm1a582d185c4a84fe4f6256f295a03a9a855251e7a005ee89d207e406018af03f-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.83.1.el8_10.x86_64.rpm1a582d185c4a84fe4f6256f295a03a9a855251e7a005ee89d207e406018af03f-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.83.1.el8_10.x86_64.rpmeba032d0ad3b24d202925d7b31b238fa52999d32dc1c19e98c60c9a4177ce611-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.83.1.el8_10.x86_64.rpmeba032d0ad3b24d202925d7b31b238fa52999d32dc1c19e98c60c9a4177ce611-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.83.1.el8_10.x86_64.rpm93c42b633e813c4634c7eadba33258fb8f128e4dc8a17718a34ba1b65e15a8aa-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.83.1.el8_10.x86_64.rpm93c42b633e813c4634c7eadba33258fb8f128e4dc8a17718a34ba1b65e15a8aa-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.83.1.el8_10.x86_64.rpm70ccdfb675e8bb3d569c97e23a809628065f8d9dbcdd8935c1ff273b5d03a068-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.83.1.el8_10.x86_64.rpm70ccdfb675e8bb3d569c97e23a809628065f8d9dbcdd8935c1ff273b5d03a068-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.83.1.el8_10.x86_64.rpm3098e90765b938ddc388dbb09e93a1ddbcc72eae5158f0eb8132b8de9771b9e9-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.83.1.el8_10.x86_64.rpm3098e90765b938ddc388dbb09e93a1ddbcc72eae5158f0eb8132b8de9771b9e9-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.83.1.el8_10.x86_64.rpm558b3fda72270f00ebf5aa71a333f1d77ca0ae88ef15dbb1b43bd8747c995f07-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.83.1.el8_10.x86_64.rpm558b3fda72270f00ebf5aa71a333f1d77ca0ae88ef15dbb1b43bd8747c995f07-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.83.1.el8_10.x86_64.rpm8c230e90c1b7744817d271a1c26a6a308d2eaca7b21801b70091e5dda92b2167-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.83.1.el8_10.x86_64.rpm8c230e90c1b7744817d271a1c26a6a308d2eaca7b21801b70091e5dda92b2167-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.83.1.el8_10.noarch.rpm4be5d6404df38250afe8c15e0d6dc088ed401bb29df2941324f1902977003dc6-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.83.1.el8_10.noarch.rpm4be5d6404df38250afe8c15e0d6dc088ed401bb29df2941324f1902977003dc6-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.83.1.el8_10.x86_64.rpmac47dfff388cd9f9b03c93c436209709a2e89ae29146f3df4221be9840df743a-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.83.1.el8_10.x86_64.rpmac47dfff388cd9f9b03c93c436209709a2e89ae29146f3df4221be9840df743a-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.83.1.el8_10.x86_64.rpm3ec98b226eda63ac7db6a78a89ef1fbf2c5df3f78a1e10f248b05b27c73239cd-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.83.1.el8_10.x86_64.rpm3ec98b226eda63ac7db6a78a89ef1fbf2c5df3f78a1e10f248b05b27c73239cd-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.83.1.el8_10.x86_64.rpmbbd5466758e159d3c853ad58ce25d76a3f72e90303cb8afb55aa95efdff64e0c-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.83.1.el8_10.x86_64.rpmbbd5466758e159d3c853ad58ce25d76a3f72e90303cb8afb55aa95efdff64e0c-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.83.1.el8_10.x86_64.rpmfbc31e645efb1dd78e49e93c68ae095e3b70be2da95756d4d9cfc95ad2a2474f-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.83.1.el8_10.x86_64.rpmfbc31e645efb1dd78e49e93c68ae095e3b70be2da95756d4d9cfc95ad2a2474f-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.83.1.el8_10.x86_64.rpma5d189ac3701486eb39435a633be0841adb4ec9931ae4433e57e695cf0990a2f-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.83.1.el8_10.x86_64.rpma5d189ac3701486eb39435a633be0841adb4ec9931ae4433e57e695cf0990a2f-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.83.1.el8_10.x86_64.rpme4d19fd11c5c196d3f5857bab8d40399573bc0449181c94cff45ac5252c14263-ol8_x86_64_codeready_builder
perf-4.18.0-553.83.1.el8_10.x86_64.rpm3d9cc86dbd02cb00de151a86b60a35315b158509ba78f4d0a7be66ff2875d872-ol8_x86_64_baseos_latest
perf-4.18.0-553.83.1.el8_10.x86_64.rpm3d9cc86dbd02cb00de151a86b60a35315b158509ba78f4d0a7be66ff2875d872-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.83.1.el8_10.x86_64.rpmc740afa8a58404e11a6609621c380ac08582e3998cd280693b589467a382bd34-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.83.1.el8_10.x86_64.rpmc740afa8a58404e11a6609621c380ac08582e3998cd280693b589467a382bd34-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights