ELSA-2025-21398

ELSA-2025-21398 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-11-17

Description

[4.18.0-553.84.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.84.1]
- cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775]
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718}
- NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005]

Related CVEs

CVE-2025-39718

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.84.1.el8_10.src.rpm	5e7efdc45895cd498288496de3d489f48e9e3e84d79bf07953499b330d07aaad	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.84.1.el8_10.src.rpm	5e7efdc45895cd498288496de3d489f48e9e3e84d79bf07953499b330d07aaad	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.84.1.el8_10.src.rpm	5e7efdc45895cd498288496de3d489f48e9e3e84d79bf07953499b330d07aaad	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.84.1.el8_10.aarch64.rpm	a36765820107dcfdfebc7e83636c357a685a092ec38a00f2f9cb77684bf69463	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.84.1.el8_10.aarch64.rpm	a36765820107dcfdfebc7e83636c357a685a092ec38a00f2f9cb77684bf69463	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.84.1.el8_10.aarch64.rpm	e9fb199907b64e5df06d63fb7fd5b0f55666098064fd61c9f48018dfa8fdb7a3	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.84.1.el8_10.aarch64.rpm	e9fb199907b64e5df06d63fb7fd5b0f55666098064fd61c9f48018dfa8fdb7a3	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.84.1.el8_10.aarch64.rpm	7dcf1916759f13ba2d587aeed5f7ba580234a2f5556c70817fc096b40eb64ae0	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.84.1.el8_10.aarch64.rpm	7dcf1916759f13ba2d587aeed5f7ba580234a2f5556c70817fc096b40eb64ae0	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.84.1.el8_10.aarch64.rpm	113e1bb94114f136d3afb58ad2b5161ad46f0facbbebbf74496fee5acaabef06	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.84.1.el8_10.aarch64.rpm	113e1bb94114f136d3afb58ad2b5161ad46f0facbbebbf74496fee5acaabef06	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.84.1.el8_10.aarch64.rpm	964b150710ac74e5883affa9cf27d38b1b35c162ae28477da19bb644de6068ab	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.84.1.el8_10.aarch64.rpm	964b150710ac74e5883affa9cf27d38b1b35c162ae28477da19bb644de6068ab	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.84.1.el8_10.aarch64.rpm	63232802aa222b81791701815b719482d47eb4937b6d2df993d2eeb7e0b14a70	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.84.1.el8_10.aarch64.rpm	d063e878b9cf4e62c899305cb3bd1634408bbb9929c5e3380b2c51516c30ab44	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.84.1.el8_10.aarch64.rpm	d063e878b9cf4e62c899305cb3bd1634408bbb9929c5e3380b2c51516c30ab44	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.84.1.el8_10.aarch64.rpm	5597db20cbaf05b0fc56f8e52797ea65ad06f828450b79de00b06ec49c921511	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.84.1.el8_10.aarch64.rpm	5597db20cbaf05b0fc56f8e52797ea65ad06f828450b79de00b06ec49c921511	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.84.1.el8_10.src.rpm	5e7efdc45895cd498288496de3d489f48e9e3e84d79bf07953499b330d07aaad	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.84.1.el8_10.src.rpm	5e7efdc45895cd498288496de3d489f48e9e3e84d79bf07953499b330d07aaad	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.84.1.el8_10.src.rpm	5e7efdc45895cd498288496de3d489f48e9e3e84d79bf07953499b330d07aaad	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.84.1.el8_10.x86_64.rpm	e845ba820e1dd34819a87c1f039195a56bebf0610a260fa0b4c563f48253058a	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.84.1.el8_10.x86_64.rpm	e845ba820e1dd34819a87c1f039195a56bebf0610a260fa0b4c563f48253058a	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.84.1.el8_10.x86_64.rpm	b23f4595bd77c72f8a2de10576c0b2f0fd62bc1473207f8de277ccd919a7c7a1	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.84.1.el8_10.x86_64.rpm	b23f4595bd77c72f8a2de10576c0b2f0fd62bc1473207f8de277ccd919a7c7a1	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.84.1.el8_10.noarch.rpm	649d268f177d191c795387936405307f0f2cd5fc251ec915248a3b7c4d7f5c84	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.84.1.el8_10.noarch.rpm	649d268f177d191c795387936405307f0f2cd5fc251ec915248a3b7c4d7f5c84	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.84.1.el8_10.x86_64.rpm	c34a872eecfec0798863651145219fed17ff995011bea486ec53ce5d6ab9ace2	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.84.1.el8_10.x86_64.rpm	c34a872eecfec0798863651145219fed17ff995011bea486ec53ce5d6ab9ace2	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.84.1.el8_10.x86_64.rpm	00b5d828063ca14b2d9ac6e649007ad0313fc8131a096cd662d1057f6792e436	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.84.1.el8_10.x86_64.rpm	00b5d828063ca14b2d9ac6e649007ad0313fc8131a096cd662d1057f6792e436	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.84.1.el8_10.x86_64.rpm	c4ae17ff7e7558d7951d14bec89980724ab3c69bc89a86739cd19d47b665c004	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.84.1.el8_10.x86_64.rpm	c4ae17ff7e7558d7951d14bec89980724ab3c69bc89a86739cd19d47b665c004	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.84.1.el8_10.x86_64.rpm	79f89fb07575728ad5b49dfa49cbb6555d26f9218b1e0725009449f55bd07ee8	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.84.1.el8_10.x86_64.rpm	79f89fb07575728ad5b49dfa49cbb6555d26f9218b1e0725009449f55bd07ee8	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.84.1.el8_10.x86_64.rpm	0555b214a043d70ddd4cedeb2a4f8aed22a3523f8f89705c60fb24f3eb14fdc9	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.84.1.el8_10.x86_64.rpm	0555b214a043d70ddd4cedeb2a4f8aed22a3523f8f89705c60fb24f3eb14fdc9	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.84.1.el8_10.x86_64.rpm	d3289170bae506a04f52be7f7c89adf3402fb6e3af27d8ea39d68fcc93bbfa40	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.84.1.el8_10.x86_64.rpm	d3289170bae506a04f52be7f7c89adf3402fb6e3af27d8ea39d68fcc93bbfa40	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.84.1.el8_10.x86_64.rpm	fd216499a5906a6a3b5160c68b069458c9fbeaf783fadb2e054910752e5220c4	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.84.1.el8_10.x86_64.rpm	fd216499a5906a6a3b5160c68b069458c9fbeaf783fadb2e054910752e5220c4	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.84.1.el8_10.x86_64.rpm	f9a5e6d1ab92d511d009bf0beb71c088a73cc81cddea600072592c7bfb85c262	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.84.1.el8_10.x86_64.rpm	f9a5e6d1ab92d511d009bf0beb71c088a73cc81cddea600072592c7bfb85c262	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.84.1.el8_10.noarch.rpm	00f6183beded66cefc2e331328e6d9ea741d0818b6e98bffb4ae07743077fa42	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.84.1.el8_10.noarch.rpm	00f6183beded66cefc2e331328e6d9ea741d0818b6e98bffb4ae07743077fa42	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.84.1.el8_10.x86_64.rpm	24d380299e0eb957130ed2865d86d606c3b3e3954c7b7afb5954da6391b61e6e	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.84.1.el8_10.x86_64.rpm	24d380299e0eb957130ed2865d86d606c3b3e3954c7b7afb5954da6391b61e6e	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.84.1.el8_10.x86_64.rpm	4613b22f890794b55246131aa6c7d7c78760dd5283c23bbc0b8838764fb5f810	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.84.1.el8_10.x86_64.rpm	4613b22f890794b55246131aa6c7d7c78760dd5283c23bbc0b8838764fb5f810	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.84.1.el8_10.x86_64.rpm	5e50d76850953093b9885ae593d45ff32eb21b962a25a72f9a6b081ae2fb1cb0	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.84.1.el8_10.x86_64.rpm	5e50d76850953093b9885ae593d45ff32eb21b962a25a72f9a6b081ae2fb1cb0	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.84.1.el8_10.x86_64.rpm	48df74d815c87cdbc80bea066164a4f63c857a5836ea80e68e4f4ce715cc58bb	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.84.1.el8_10.x86_64.rpm	48df74d815c87cdbc80bea066164a4f63c857a5836ea80e68e4f4ce715cc58bb	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.84.1.el8_10.x86_64.rpm	883f19b34669fdafc3a2533d630b421592cc77abf5323ac59dccf962b4706f81	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.84.1.el8_10.x86_64.rpm	883f19b34669fdafc3a2533d630b421592cc77abf5323ac59dccf962b4706f81	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.84.1.el8_10.x86_64.rpm	d6f733835c7989e5534daa27dd8ead8bbc4dca20e484ec1b5068e45f674f6659	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.84.1.el8_10.x86_64.rpm	b07c9cd638d58bf938d3e022cca20122ad459f6528111cc3faffa4cfca26c40f	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.84.1.el8_10.x86_64.rpm	b07c9cd638d58bf938d3e022cca20122ad459f6528111cc3faffa4cfca26c40f	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.84.1.el8_10.x86_64.rpm	38d3909b6b24e9effa29762831a8804e3017190a0434ef423be24bc133949f7f	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.84.1.el8_10.x86_64.rpm	38d3909b6b24e9effa29762831a8804e3017190a0434ef423be24bc133949f7f	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team