ELSA-2025-3026

ELSA-2025-3026 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-03-19

Description


[4.18.0-553.45.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.45.1_10]
- gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269]
- gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269]
- gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269]
- gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269]
- gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269]
- gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937}
- gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269]
- can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922}
- gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694]
- gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694]
- net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810]
- net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812]


Related CVEs


CVE-2023-52922

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.45.1.el8_10.src.rpma263ac250c266e83dc142c493bddcda018d228cd01dc097abd49ec82bf5adccb-ol8_aarch64_baseos_latest
kernel-4.18.0-553.45.1.el8_10.src.rpma263ac250c266e83dc142c493bddcda018d228cd01dc097abd49ec82bf5adccb-ol8_aarch64_codeready_builder
kernel-4.18.0-553.45.1.el8_10.src.rpma263ac250c266e83dc142c493bddcda018d228cd01dc097abd49ec82bf5adccb-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.45.1.el8_10.aarch64.rpmd1e04870882c0c3082eb7a9791d162da32c6a5e40a42c78512a9bbe0ea2bb36e-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.45.1.el8_10.aarch64.rpmd1e04870882c0c3082eb7a9791d162da32c6a5e40a42c78512a9bbe0ea2bb36e-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.45.1.el8_10.aarch64.rpmec72f6cf99275da70d5fad13a82bb633b7028a3a2872d9336185d250f97b04a0-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.45.1.el8_10.aarch64.rpmec72f6cf99275da70d5fad13a82bb633b7028a3a2872d9336185d250f97b04a0-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.45.1.el8_10.aarch64.rpmd71561f207a17d8f74e90a330b38cc595dbf917e062c429a30133b0cc1f31018-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.45.1.el8_10.aarch64.rpmd71561f207a17d8f74e90a330b38cc595dbf917e062c429a30133b0cc1f31018-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.45.1.el8_10.aarch64.rpm063da682625d4fce0716cd7745e7972405da0639ace2e26e4623963a663ee202-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.45.1.el8_10.aarch64.rpm063da682625d4fce0716cd7745e7972405da0639ace2e26e4623963a663ee202-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.45.1.el8_10.aarch64.rpmbe6e690f7af440fcd54547876d12962ce1d495aa3add332b8ab29275493959a6-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.45.1.el8_10.aarch64.rpmbe6e690f7af440fcd54547876d12962ce1d495aa3add332b8ab29275493959a6-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.45.1.el8_10.aarch64.rpma324b0eb30f3eb58019ad529279b8804878f35c35fb75e542dfaa30394225a67-ol8_aarch64_codeready_builder
perf-4.18.0-553.45.1.el8_10.aarch64.rpm49e29e151b9334187c3365ddbd1145cd83503f5d18fc7169fd8261df319c6953-ol8_aarch64_baseos_latest
perf-4.18.0-553.45.1.el8_10.aarch64.rpm49e29e151b9334187c3365ddbd1145cd83503f5d18fc7169fd8261df319c6953-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.45.1.el8_10.aarch64.rpm1677262fa72c104a982d185fdb8c13b8b9daab36ca290c2d19254a937694a398-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.45.1.el8_10.aarch64.rpm1677262fa72c104a982d185fdb8c13b8b9daab36ca290c2d19254a937694a398-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.45.1.el8_10.src.rpma263ac250c266e83dc142c493bddcda018d228cd01dc097abd49ec82bf5adccb-ol8_x86_64_baseos_latest
kernel-4.18.0-553.45.1.el8_10.src.rpma263ac250c266e83dc142c493bddcda018d228cd01dc097abd49ec82bf5adccb-ol8_x86_64_codeready_builder
kernel-4.18.0-553.45.1.el8_10.src.rpma263ac250c266e83dc142c493bddcda018d228cd01dc097abd49ec82bf5adccb-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.45.1.el8_10.x86_64.rpm22c3c306fc3e366a313d7dcd690c95aa88dec0d4418b8397fd8cfabcb09f4790-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.45.1.el8_10.x86_64.rpm22c3c306fc3e366a313d7dcd690c95aa88dec0d4418b8397fd8cfabcb09f4790-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.45.1.el8_10.x86_64.rpm74aabe552cc928a2c96f05bd61fa385d57dbb66bb907f7761ab1277c50faa425-ol8_x86_64_baseos_latest
kernel-4.18.0-553.45.1.el8_10.x86_64.rpm74aabe552cc928a2c96f05bd61fa385d57dbb66bb907f7761ab1277c50faa425-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.45.1.el8_10.noarch.rpm760617efa04f1bc33fb5ca1c475ee2dc7236d579c57c7791f3158a288ea36184-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.45.1.el8_10.noarch.rpm760617efa04f1bc33fb5ca1c475ee2dc7236d579c57c7791f3158a288ea36184-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.45.1.el8_10.x86_64.rpm29757e4a05ab0b6aa3998f3a92cabcf00e146f577c54528d2a50bc235fa44d31-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.45.1.el8_10.x86_64.rpm29757e4a05ab0b6aa3998f3a92cabcf00e146f577c54528d2a50bc235fa44d31-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.45.1.el8_10.x86_64.rpm6b1ba69e4ea40862ffbaa6e5741d2857cbe3f5b0593e94979ed04950e842dc83-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.45.1.el8_10.x86_64.rpm6b1ba69e4ea40862ffbaa6e5741d2857cbe3f5b0593e94979ed04950e842dc83-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.45.1.el8_10.x86_64.rpm5e63c6192c461a1b3585a7d8515d622ae80895b9f9d41559ab3b1bc1c997ed98-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.45.1.el8_10.x86_64.rpm5e63c6192c461a1b3585a7d8515d622ae80895b9f9d41559ab3b1bc1c997ed98-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.45.1.el8_10.x86_64.rpm0f9803a2b229167e5084d83e9b90e8d637c07e1e48e8c332166a240d93203685-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.45.1.el8_10.x86_64.rpm0f9803a2b229167e5084d83e9b90e8d637c07e1e48e8c332166a240d93203685-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.45.1.el8_10.x86_64.rpm922ab54f411dbf7bcdd277e76b889cc640a0ef4c74e3b872e60e5e256296c5e9-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.45.1.el8_10.x86_64.rpm922ab54f411dbf7bcdd277e76b889cc640a0ef4c74e3b872e60e5e256296c5e9-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.45.1.el8_10.x86_64.rpm27a302f233974a8a9ffbf3ae41b29199a0f8e136833e0a7d3549842ec64e86c0-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.45.1.el8_10.x86_64.rpm27a302f233974a8a9ffbf3ae41b29199a0f8e136833e0a7d3549842ec64e86c0-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.45.1.el8_10.x86_64.rpm07f48e13f80dddd48f13bbb60a832e20e690c179b6eee38e899b40b1550308df-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.45.1.el8_10.x86_64.rpm07f48e13f80dddd48f13bbb60a832e20e690c179b6eee38e899b40b1550308df-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.45.1.el8_10.x86_64.rpmcae4abfd70d1b61acb975f305a04699fdbcb03b68a6b7c8d5ad425cc0c2670d1-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.45.1.el8_10.x86_64.rpmcae4abfd70d1b61acb975f305a04699fdbcb03b68a6b7c8d5ad425cc0c2670d1-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.45.1.el8_10.noarch.rpm246a5b71094d5de58fa44e5049721c177bf592d08c3dafdb0f859ba87b7979cc-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.45.1.el8_10.noarch.rpm246a5b71094d5de58fa44e5049721c177bf592d08c3dafdb0f859ba87b7979cc-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.45.1.el8_10.x86_64.rpm381f30e103ad305b0679dc723283ea4ba2f361478be0f78aafd093e861f9af01-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.45.1.el8_10.x86_64.rpm381f30e103ad305b0679dc723283ea4ba2f361478be0f78aafd093e861f9af01-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.45.1.el8_10.x86_64.rpm9706b18c74be1bd59caaa4525ea93faca481c9ff327616a87064ee8a71fc8ecc-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.45.1.el8_10.x86_64.rpm9706b18c74be1bd59caaa4525ea93faca481c9ff327616a87064ee8a71fc8ecc-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.45.1.el8_10.x86_64.rpm7a4dd774c4bfc14f7ce7e348042a1c92a7bb9e02e404015bb6116cf694d5d310-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.45.1.el8_10.x86_64.rpm7a4dd774c4bfc14f7ce7e348042a1c92a7bb9e02e404015bb6116cf694d5d310-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.45.1.el8_10.x86_64.rpm8009d832ce107cf85f48828e982520c66e1e236a643f37a2955eca95ca7ad5f2-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.45.1.el8_10.x86_64.rpm8009d832ce107cf85f48828e982520c66e1e236a643f37a2955eca95ca7ad5f2-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.45.1.el8_10.x86_64.rpm8af732b8bbff9f84fc3db729c7127d88be126f8baa25e37e98c2770a83a245b2-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.45.1.el8_10.x86_64.rpm8af732b8bbff9f84fc3db729c7127d88be126f8baa25e37e98c2770a83a245b2-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.45.1.el8_10.x86_64.rpmd570b472f69f4c05667bef294f3098c116c92dfd28a04b6d33b38b5d3d57d88b-ol8_x86_64_codeready_builder
perf-4.18.0-553.45.1.el8_10.x86_64.rpmb9b72503cc21f1df9e802c7d78d7bc24a5738be715373abd20aba0a9ed10ad88-ol8_x86_64_baseos_latest
perf-4.18.0-553.45.1.el8_10.x86_64.rpmb9b72503cc21f1df9e802c7d78d7bc24a5738be715373abd20aba0a9ed10ad88-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.45.1.el8_10.x86_64.rpm2106513f4d6a2dfb5df7275b60b076c6f9c1e31bf41492aa827e66833e35af47-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.45.1.el8_10.x86_64.rpm2106513f4d6a2dfb5df7275b60b076c6f9c1e31bf41492aa827e66833e35af47-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete