Stay Connected:

ELSA-2025-21917

ELSA-2025-21917 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-11-24

Description


[4.18.0-553.85.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.85.1]
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970}
- i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971}
- i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799]
- i40e: remove i40e_status (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799]
- drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122]
- NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hajkova)


Related CVEs


CVE-2025-39697
CVE-2025-39971

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.85.1.el8_10.src.rpmdad901bfaa9be8411afaca28033233db85fd2daa76c17a3a9cf9353ffcd2a2e9-ol8_aarch64_baseos_latest
kernel-4.18.0-553.85.1.el8_10.src.rpmdad901bfaa9be8411afaca28033233db85fd2daa76c17a3a9cf9353ffcd2a2e9-ol8_aarch64_codeready_builder
kernel-4.18.0-553.85.1.el8_10.src.rpmdad901bfaa9be8411afaca28033233db85fd2daa76c17a3a9cf9353ffcd2a2e9-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.85.1.el8_10.aarch64.rpmc9be0cc2d7ed8cdca60099de4fdda3943fcc1bf8aeca7fe0d514f0f72ac67c75-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.85.1.el8_10.aarch64.rpmc9be0cc2d7ed8cdca60099de4fdda3943fcc1bf8aeca7fe0d514f0f72ac67c75-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.85.1.el8_10.aarch64.rpm2f241ad54e575b692f59ba1c1cd1ea2501554753b401f19bb7715e1c536d53de-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.85.1.el8_10.aarch64.rpm2f241ad54e575b692f59ba1c1cd1ea2501554753b401f19bb7715e1c536d53de-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.85.1.el8_10.aarch64.rpmd064bc1488b3ebff57cf0ec5bca6896b13684a8dcc1964c2ad4c6fe4f5d4797c-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.85.1.el8_10.aarch64.rpmd064bc1488b3ebff57cf0ec5bca6896b13684a8dcc1964c2ad4c6fe4f5d4797c-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.85.1.el8_10.aarch64.rpm8970e65c0dfc0ca67956f55b57a1f6720af5ff2d043d7f21355df538b6708471-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.85.1.el8_10.aarch64.rpm8970e65c0dfc0ca67956f55b57a1f6720af5ff2d043d7f21355df538b6708471-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.85.1.el8_10.aarch64.rpme606ac6e370000eabb5edfd2ab5fc58e059c8d84f29f563c229264029c125ab4-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.85.1.el8_10.aarch64.rpme606ac6e370000eabb5edfd2ab5fc58e059c8d84f29f563c229264029c125ab4-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.85.1.el8_10.aarch64.rpmed6e700f1f3e9d766b8028f58297ac10a1658d19d2a04dc99e922a161eaca294-ol8_aarch64_codeready_builder
perf-4.18.0-553.85.1.el8_10.aarch64.rpma096e24f5e983b4b6dd9598c4ba9c236282f56e8a0410aa9d1ff315e81e68eac-ol8_aarch64_baseos_latest
perf-4.18.0-553.85.1.el8_10.aarch64.rpma096e24f5e983b4b6dd9598c4ba9c236282f56e8a0410aa9d1ff315e81e68eac-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.85.1.el8_10.aarch64.rpmab65156ff733aa7a9083184f6d9db59f2e47e3c687930cbc2c259b7165b1edd0-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.85.1.el8_10.aarch64.rpmab65156ff733aa7a9083184f6d9db59f2e47e3c687930cbc2c259b7165b1edd0-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.85.1.el8_10.src.rpmdad901bfaa9be8411afaca28033233db85fd2daa76c17a3a9cf9353ffcd2a2e9-ol8_x86_64_baseos_latest
kernel-4.18.0-553.85.1.el8_10.src.rpmdad901bfaa9be8411afaca28033233db85fd2daa76c17a3a9cf9353ffcd2a2e9-ol8_x86_64_codeready_builder
kernel-4.18.0-553.85.1.el8_10.src.rpmdad901bfaa9be8411afaca28033233db85fd2daa76c17a3a9cf9353ffcd2a2e9-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.85.1.el8_10.x86_64.rpm6baaba3983f63687c759c33bbe21ad75565bd5eaca6bf126eb76efb8d751bd17-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.85.1.el8_10.x86_64.rpm6baaba3983f63687c759c33bbe21ad75565bd5eaca6bf126eb76efb8d751bd17-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.85.1.el8_10.x86_64.rpm3e0d7d192728c263b6b4f5d019d3acda89ef58fbdcee61bd96fc81bfceb64ea5-ol8_x86_64_baseos_latest
kernel-4.18.0-553.85.1.el8_10.x86_64.rpm3e0d7d192728c263b6b4f5d019d3acda89ef58fbdcee61bd96fc81bfceb64ea5-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.85.1.el8_10.noarch.rpmf8f54175b296fd645af8a535c5c719c548d8e55729df89fd7e6761ac62c0531e-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.85.1.el8_10.noarch.rpmf8f54175b296fd645af8a535c5c719c548d8e55729df89fd7e6761ac62c0531e-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.85.1.el8_10.x86_64.rpmd0d17abb328b7cabb2189d8b9081c2ad1112f10d89d9074cd99fceae09f34f22-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.85.1.el8_10.x86_64.rpmd0d17abb328b7cabb2189d8b9081c2ad1112f10d89d9074cd99fceae09f34f22-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.85.1.el8_10.x86_64.rpm7976b00065073c275218ed6c7757358d231d5de49959d2874d7deddd8d37dadc-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.85.1.el8_10.x86_64.rpm7976b00065073c275218ed6c7757358d231d5de49959d2874d7deddd8d37dadc-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.85.1.el8_10.x86_64.rpm14664f026e1c715cf9e77658bc822ced85d32b76e2d75610d643aacf2c7f83dd-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.85.1.el8_10.x86_64.rpm14664f026e1c715cf9e77658bc822ced85d32b76e2d75610d643aacf2c7f83dd-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.85.1.el8_10.x86_64.rpm452e10c3f5d793458fd33542b020c6575d00847bfe3d556d442692a0455f9353-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.85.1.el8_10.x86_64.rpm452e10c3f5d793458fd33542b020c6575d00847bfe3d556d442692a0455f9353-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.85.1.el8_10.x86_64.rpm4fd2fd9e1bf5db252ae1684baac9d7ba09ee4866bea3834096cba4aa4c318aa6-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.85.1.el8_10.x86_64.rpm4fd2fd9e1bf5db252ae1684baac9d7ba09ee4866bea3834096cba4aa4c318aa6-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.85.1.el8_10.x86_64.rpm9a59ab9344ad286ed4eaf869e87ec24a6d1c7215b12c48415ac5fde88ce74385-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.85.1.el8_10.x86_64.rpm9a59ab9344ad286ed4eaf869e87ec24a6d1c7215b12c48415ac5fde88ce74385-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.85.1.el8_10.x86_64.rpm03a49cdd0e4b1879d95aa5326961acb4b362facd48e5687c4c67285cb4e70156-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.85.1.el8_10.x86_64.rpm03a49cdd0e4b1879d95aa5326961acb4b362facd48e5687c4c67285cb4e70156-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.85.1.el8_10.x86_64.rpmd9eafb3644557466659b83af472fb9625ef66482d71f4c0a117ffcd16b840001-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.85.1.el8_10.x86_64.rpmd9eafb3644557466659b83af472fb9625ef66482d71f4c0a117ffcd16b840001-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.85.1.el8_10.noarch.rpm762e44d612ac1c4946750643b815279fd64150e3923dc25e4305bb870043c6fd-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.85.1.el8_10.noarch.rpm762e44d612ac1c4946750643b815279fd64150e3923dc25e4305bb870043c6fd-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.85.1.el8_10.x86_64.rpmf7efd7fc9b8ed34c9cec2373d63e46a2fa54b19c74ef90ec2daee02c47ccf6a8-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.85.1.el8_10.x86_64.rpmf7efd7fc9b8ed34c9cec2373d63e46a2fa54b19c74ef90ec2daee02c47ccf6a8-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.85.1.el8_10.x86_64.rpm0cfc5054bf96d0e574ade4b6e937c3d953c06c4b3a03ac942d2a6d22cd3fd01b-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.85.1.el8_10.x86_64.rpm0cfc5054bf96d0e574ade4b6e937c3d953c06c4b3a03ac942d2a6d22cd3fd01b-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.85.1.el8_10.x86_64.rpm78e5c38c8e55c3e6d75b1fc0f5353da092ec4bab0b0975fd79e9cfac8dc7adae-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.85.1.el8_10.x86_64.rpm78e5c38c8e55c3e6d75b1fc0f5353da092ec4bab0b0975fd79e9cfac8dc7adae-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.85.1.el8_10.x86_64.rpm3cea7a65c50892d5e153cade8bce26746467280ef542c28dbf81a71d38921c1d-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.85.1.el8_10.x86_64.rpm3cea7a65c50892d5e153cade8bce26746467280ef542c28dbf81a71d38921c1d-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.85.1.el8_10.x86_64.rpmb290254424397e3073788c4a7bee2ca17a3e66c44d41a855e4f7c4dd53af24f9-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.85.1.el8_10.x86_64.rpmb290254424397e3073788c4a7bee2ca17a3e66c44d41a855e4f7c4dd53af24f9-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.85.1.el8_10.x86_64.rpm6e38bf92b03e006c76d546e1f94f64cf0d0b1d906e688c7334040b07d9d66704-ol8_x86_64_codeready_builder
perf-4.18.0-553.85.1.el8_10.x86_64.rpmd3216a6fa4e403e4cd2a1a1bc0220926620f2cf86ea6d4cb1f9f2b8562630c7d-ol8_x86_64_baseos_latest
perf-4.18.0-553.85.1.el8_10.x86_64.rpmd3216a6fa4e403e4cd2a1a1bc0220926620f2cf86ea6d4cb1f9f2b8562630c7d-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.85.1.el8_10.x86_64.rpme3dd18dff57328436d40f23dc12b36c1489919130471a647d26e82b3ea46fec2-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.85.1.el8_10.x86_64.rpme3dd18dff57328436d40f23dc12b36c1489919130471a647d26e82b3ea46fec2-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights