Stay Connected:

ELSA-2025-22388

ELSA-2025-22388 - kernel security update

Type:SECURITY
Impact:MODERATE
Release Date:2025-12-01

Description


[4.18.0-553.87.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.87.1]
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664]
- tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955}
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883}

[4.18.0-553.86.1]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825}
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237]
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898}
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724}
- nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513}
- arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921]
- perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921]
- perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921]
- tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921]
- powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921]
- powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921]
- powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921]


Related CVEs


CVE-2023-53513
CVE-2025-38724
CVE-2025-39825
CVE-2025-39883
CVE-2025-39898
CVE-2025-39955

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.87.1.el8_10.src.rpm539d9af24e89c3ce9be9f32aab20926fe577a1e36e274c0d6dec0cf48971b59f-ol8_aarch64_baseos_latest
kernel-4.18.0-553.87.1.el8_10.src.rpm539d9af24e89c3ce9be9f32aab20926fe577a1e36e274c0d6dec0cf48971b59f-ol8_aarch64_codeready_builder
kernel-4.18.0-553.87.1.el8_10.src.rpm539d9af24e89c3ce9be9f32aab20926fe577a1e36e274c0d6dec0cf48971b59f-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.87.1.el8_10.aarch64.rpmf918fd21625c2257ff261c4054a397d96f800701796929c8ca93136130a0672b-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.87.1.el8_10.aarch64.rpmf918fd21625c2257ff261c4054a397d96f800701796929c8ca93136130a0672b-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.87.1.el8_10.aarch64.rpm54dd66a4a6e9f39d4611d573d0eb70339bf047e7c4df246c0e5840e22cd459ed-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.87.1.el8_10.aarch64.rpm54dd66a4a6e9f39d4611d573d0eb70339bf047e7c4df246c0e5840e22cd459ed-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.87.1.el8_10.aarch64.rpm05578ea474412e848f743e45431d6e45142a17f6a22d3faa3b8b72d32b871c63-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.87.1.el8_10.aarch64.rpm05578ea474412e848f743e45431d6e45142a17f6a22d3faa3b8b72d32b871c63-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.87.1.el8_10.aarch64.rpm6ce64fe1c788a48baec211ce3b510ff06e75ab7fcff51fe98775b18c2356befc-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.87.1.el8_10.aarch64.rpm6ce64fe1c788a48baec211ce3b510ff06e75ab7fcff51fe98775b18c2356befc-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.87.1.el8_10.aarch64.rpm8c9b6f1252df6840dfe48f11abc61ff1c1791f54459a1b0847b4da6a9553cddc-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.87.1.el8_10.aarch64.rpm8c9b6f1252df6840dfe48f11abc61ff1c1791f54459a1b0847b4da6a9553cddc-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.87.1.el8_10.aarch64.rpmfb0222d6c6d146007b69a6aa996d8e54174f4ae47644dc4a25f421f4574d9b4d-ol8_aarch64_codeready_builder
perf-4.18.0-553.87.1.el8_10.aarch64.rpmfb849133dc36d0b912842abbc5c1c102831d8e1343a61d1b7754499d2d2643a0-ol8_aarch64_baseos_latest
perf-4.18.0-553.87.1.el8_10.aarch64.rpmfb849133dc36d0b912842abbc5c1c102831d8e1343a61d1b7754499d2d2643a0-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.87.1.el8_10.aarch64.rpm29c7d0b12ea7386b006797f9ab17ce66ffebb699cfd586cddc8884bac4439d33-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.87.1.el8_10.aarch64.rpm29c7d0b12ea7386b006797f9ab17ce66ffebb699cfd586cddc8884bac4439d33-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.87.1.el8_10.src.rpm539d9af24e89c3ce9be9f32aab20926fe577a1e36e274c0d6dec0cf48971b59f-ol8_x86_64_baseos_latest
kernel-4.18.0-553.87.1.el8_10.src.rpm539d9af24e89c3ce9be9f32aab20926fe577a1e36e274c0d6dec0cf48971b59f-ol8_x86_64_codeready_builder
kernel-4.18.0-553.87.1.el8_10.src.rpm539d9af24e89c3ce9be9f32aab20926fe577a1e36e274c0d6dec0cf48971b59f-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.87.1.el8_10.x86_64.rpm7ba780a230046fcfd181862e3c8c4afaa8521844216ea03c284ba4ce01419f02-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.87.1.el8_10.x86_64.rpm7ba780a230046fcfd181862e3c8c4afaa8521844216ea03c284ba4ce01419f02-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.87.1.el8_10.x86_64.rpm1a58772663b84999e6ee29bbc4c416b0372606b1f5b0a492abe39defd57fabc3-ol8_x86_64_baseos_latest
kernel-4.18.0-553.87.1.el8_10.x86_64.rpm1a58772663b84999e6ee29bbc4c416b0372606b1f5b0a492abe39defd57fabc3-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.87.1.el8_10.noarch.rpm7af3b5e18b328fadadca95d688ed61dcb11f7b8bec30b86cc32812c30166b61a-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.87.1.el8_10.noarch.rpm7af3b5e18b328fadadca95d688ed61dcb11f7b8bec30b86cc32812c30166b61a-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.87.1.el8_10.x86_64.rpmb7fe331e21ee5f6fcbbd16e5cda8835460cc1dc32d79625a68b6943f6e5698d2-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.87.1.el8_10.x86_64.rpmb7fe331e21ee5f6fcbbd16e5cda8835460cc1dc32d79625a68b6943f6e5698d2-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.87.1.el8_10.x86_64.rpm3640282cd006d23e2472debcec14a3ccb73ee931c2a01843874d4b530a62c78b-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.87.1.el8_10.x86_64.rpm3640282cd006d23e2472debcec14a3ccb73ee931c2a01843874d4b530a62c78b-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.87.1.el8_10.x86_64.rpm305e995e85f9b741765795ee811718aad360736e75ab12dd8f6d9b959556f5d0-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.87.1.el8_10.x86_64.rpm305e995e85f9b741765795ee811718aad360736e75ab12dd8f6d9b959556f5d0-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.87.1.el8_10.x86_64.rpmfe183729ff21311af8b8cb331c04bd06773c8957bd1fc1baea8e1ae401f225af-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.87.1.el8_10.x86_64.rpmfe183729ff21311af8b8cb331c04bd06773c8957bd1fc1baea8e1ae401f225af-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.87.1.el8_10.x86_64.rpm9237668798e6d889564c21e6f817abe2e62a447506c93b4968bfb43b0c0fdfe7-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.87.1.el8_10.x86_64.rpm9237668798e6d889564c21e6f817abe2e62a447506c93b4968bfb43b0c0fdfe7-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.87.1.el8_10.x86_64.rpmcf69cb94511efb8b669d140395f32434bf758d327d3a5b518eda653f2df859ee-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.87.1.el8_10.x86_64.rpmcf69cb94511efb8b669d140395f32434bf758d327d3a5b518eda653f2df859ee-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.87.1.el8_10.x86_64.rpm20101f9976283509aa1f8a34dd62d0f2d093572f1f25af89bd810916d2dc2d7f-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.87.1.el8_10.x86_64.rpm20101f9976283509aa1f8a34dd62d0f2d093572f1f25af89bd810916d2dc2d7f-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.87.1.el8_10.x86_64.rpmae23480d47c4c819cd22a01636ce9fceaa09af29ba55d1dfe615db5bbb4bd4a2-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.87.1.el8_10.x86_64.rpmae23480d47c4c819cd22a01636ce9fceaa09af29ba55d1dfe615db5bbb4bd4a2-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.87.1.el8_10.noarch.rpm6fd847f94f8052ba597f40d3e91d9bcebcdd19b73d4ca3d7bd650404fabed8ef-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.87.1.el8_10.noarch.rpm6fd847f94f8052ba597f40d3e91d9bcebcdd19b73d4ca3d7bd650404fabed8ef-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.87.1.el8_10.x86_64.rpma9510c1c5a59d7c2a80b754c2d01c3ff11d400094ae24f96d678c037550f24b6-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.87.1.el8_10.x86_64.rpma9510c1c5a59d7c2a80b754c2d01c3ff11d400094ae24f96d678c037550f24b6-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.87.1.el8_10.x86_64.rpma9abf80152ddee1c4bd12e597f32af08d2bf99da38dc83c288a1149b5c5378cb-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.87.1.el8_10.x86_64.rpma9abf80152ddee1c4bd12e597f32af08d2bf99da38dc83c288a1149b5c5378cb-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.87.1.el8_10.x86_64.rpm1a6725c4de074053b00d4a852009dbf492a087c52d9643fb20dc4aeb5d20d765-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.87.1.el8_10.x86_64.rpm1a6725c4de074053b00d4a852009dbf492a087c52d9643fb20dc4aeb5d20d765-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.87.1.el8_10.x86_64.rpm8e4de3a97ee8e3c5e1a667ea623840a9008a3bd6996eb266d8b6a696aab26053-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.87.1.el8_10.x86_64.rpm8e4de3a97ee8e3c5e1a667ea623840a9008a3bd6996eb266d8b6a696aab26053-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.87.1.el8_10.x86_64.rpm87bc65ae92a54a2717dc6109bdef738ce4c120c95d1c3dbe44a9330bde149570-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.87.1.el8_10.x86_64.rpm87bc65ae92a54a2717dc6109bdef738ce4c120c95d1c3dbe44a9330bde149570-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.87.1.el8_10.x86_64.rpmc16a9a1ee1d8e36e12f5694140c3548115c58a69e5718b8679043c229a7f1ca2-ol8_x86_64_codeready_builder
perf-4.18.0-553.87.1.el8_10.x86_64.rpm160a3523ad77abeb0350e8e92032360484015b36d133924e90a3dc2305ff4fb7-ol8_x86_64_baseos_latest
perf-4.18.0-553.87.1.el8_10.x86_64.rpm160a3523ad77abeb0350e8e92032360484015b36d133924e90a3dc2305ff4fb7-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.87.1.el8_10.x86_64.rpmb77c5ebc24543ceaa28aa465d8883a33b9afff6b1ea5777643d9a49bc8c1771e-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.87.1.el8_10.x86_64.rpmb77c5ebc24543ceaa28aa465d8883a33b9afff6b1ea5777643d9a49bc8c1771e-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights