ELSA-2025-3260

ELSA-2025-3260 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-03-26

Description

[4.18.0-553.46.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.46.1_10]
- s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934]
- s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934]
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832]
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785}
- nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085]

Related CVEs

CVE-2025-21785

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.46.1.el8_10.src.rpm	98237a528eeb4185f516acbce94151e8e0a2bc9f84d89374db7deabad8830b4b	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.46.1.el8_10.src.rpm	98237a528eeb4185f516acbce94151e8e0a2bc9f84d89374db7deabad8830b4b	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.46.1.el8_10.src.rpm	98237a528eeb4185f516acbce94151e8e0a2bc9f84d89374db7deabad8830b4b	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.46.1.el8_10.aarch64.rpm	8241e4e9f4500b8a2e05a91fa71b0fd88d05f8c465e9e1aeab5d89a1232d85f0	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.46.1.el8_10.aarch64.rpm	8241e4e9f4500b8a2e05a91fa71b0fd88d05f8c465e9e1aeab5d89a1232d85f0	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.46.1.el8_10.aarch64.rpm	d57ed5cf1a58f4fc725648fd5bf9ea89c3a7f375b7c6d965288cc016bd492e1d	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.46.1.el8_10.aarch64.rpm	d57ed5cf1a58f4fc725648fd5bf9ea89c3a7f375b7c6d965288cc016bd492e1d	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.46.1.el8_10.aarch64.rpm	8c52928be89a28c80e7e8eca0bede3e39b97859d1c30ba7dfa26afc6fc54088c	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.46.1.el8_10.aarch64.rpm	8c52928be89a28c80e7e8eca0bede3e39b97859d1c30ba7dfa26afc6fc54088c	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.46.1.el8_10.aarch64.rpm	22815e6d6d33dfb0523493331a18e4a67126ee36999b2864f721732312e56215	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.46.1.el8_10.aarch64.rpm	22815e6d6d33dfb0523493331a18e4a67126ee36999b2864f721732312e56215	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.46.1.el8_10.aarch64.rpm	5890c1c18e457651a4b5d1f38d47672f3a6d708c905eaa59b7bfa22da30bbcb9	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.46.1.el8_10.aarch64.rpm	5890c1c18e457651a4b5d1f38d47672f3a6d708c905eaa59b7bfa22da30bbcb9	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.46.1.el8_10.aarch64.rpm	0ac22593c2ed7bc9fe6528c1e3b632097ca2c421bdbeea4e0a54f8b3ddfdef05	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.46.1.el8_10.aarch64.rpm	90c05a085fa634ff16c917355b87e94d7b2ac863f55bd893ec52b35999e93eae	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.46.1.el8_10.aarch64.rpm	90c05a085fa634ff16c917355b87e94d7b2ac863f55bd893ec52b35999e93eae	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.46.1.el8_10.aarch64.rpm	e7d19a75e74967e2f1bbb411d4eee21f134020a2f9b42c25802b843b54c71971	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.46.1.el8_10.aarch64.rpm	e7d19a75e74967e2f1bbb411d4eee21f134020a2f9b42c25802b843b54c71971	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.46.1.el8_10.src.rpm	98237a528eeb4185f516acbce94151e8e0a2bc9f84d89374db7deabad8830b4b	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.46.1.el8_10.src.rpm	98237a528eeb4185f516acbce94151e8e0a2bc9f84d89374db7deabad8830b4b	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.46.1.el8_10.src.rpm	98237a528eeb4185f516acbce94151e8e0a2bc9f84d89374db7deabad8830b4b	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.46.1.el8_10.x86_64.rpm	7357aa708884d76bd7f52a9a2aadd51101ef35d6602b46addd394dc84a61f026	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.46.1.el8_10.x86_64.rpm	7357aa708884d76bd7f52a9a2aadd51101ef35d6602b46addd394dc84a61f026	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.46.1.el8_10.x86_64.rpm	06d6a40e434022c7b4e499c30163e5c2a86a11abb07f58bbce2325f70e2eb26a	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.46.1.el8_10.x86_64.rpm	06d6a40e434022c7b4e499c30163e5c2a86a11abb07f58bbce2325f70e2eb26a	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.46.1.el8_10.noarch.rpm	31cec5dfe06fe52dae69f31913d196a8598e18b0ebc6fdb8c5eb702aaf74e2b8	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.46.1.el8_10.noarch.rpm	31cec5dfe06fe52dae69f31913d196a8598e18b0ebc6fdb8c5eb702aaf74e2b8	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.46.1.el8_10.x86_64.rpm	bda2c117556810e7b0eac444f42588afb8c7760269c69f99ba1bccc4d6c1adb0	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.46.1.el8_10.x86_64.rpm	bda2c117556810e7b0eac444f42588afb8c7760269c69f99ba1bccc4d6c1adb0	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.46.1.el8_10.x86_64.rpm	a0c143dcf687a74b86246cd0c3091573b6c09a26c7a6257ce23d1720f99471c9	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.46.1.el8_10.x86_64.rpm	a0c143dcf687a74b86246cd0c3091573b6c09a26c7a6257ce23d1720f99471c9	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.46.1.el8_10.x86_64.rpm	e05e9c8f28abc4a76f1d75ef9bfe9d2b2031cf14a19d1b888444b18a8d64ca2a	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.46.1.el8_10.x86_64.rpm	e05e9c8f28abc4a76f1d75ef9bfe9d2b2031cf14a19d1b888444b18a8d64ca2a	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.46.1.el8_10.x86_64.rpm	4afc421d2d198a5e8842a23fbc9fc9061f85a368e6ffb871e6bcce4098e1d645	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.46.1.el8_10.x86_64.rpm	4afc421d2d198a5e8842a23fbc9fc9061f85a368e6ffb871e6bcce4098e1d645	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.46.1.el8_10.x86_64.rpm	7a775be5e3052c046c7f8e9eefaadf9a7d13ac0c32bd93f1726ec9becc2bdc8e	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.46.1.el8_10.x86_64.rpm	7a775be5e3052c046c7f8e9eefaadf9a7d13ac0c32bd93f1726ec9becc2bdc8e	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.46.1.el8_10.x86_64.rpm	6aaa71f2e5e9b22affa6e48afd8eccca298d76091878ce4f312136b617dc3a22	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.46.1.el8_10.x86_64.rpm	6aaa71f2e5e9b22affa6e48afd8eccca298d76091878ce4f312136b617dc3a22	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.46.1.el8_10.x86_64.rpm	c477508c4aa62940719080d3915d43ceb2d361b71c4f0d28afee23e8014631ac	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.46.1.el8_10.x86_64.rpm	c477508c4aa62940719080d3915d43ceb2d361b71c4f0d28afee23e8014631ac	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.46.1.el8_10.x86_64.rpm	49ff95d03033a86a4cb16f8c673d225911ce639f70cfdbbd2d53f5fe1c206fe0	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.46.1.el8_10.x86_64.rpm	49ff95d03033a86a4cb16f8c673d225911ce639f70cfdbbd2d53f5fe1c206fe0	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.46.1.el8_10.noarch.rpm	353158dbb9904988ffb7888314f24918d6c104720b0135021ca7acefcde62b87	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.46.1.el8_10.noarch.rpm	353158dbb9904988ffb7888314f24918d6c104720b0135021ca7acefcde62b87	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.46.1.el8_10.x86_64.rpm	2f9801223f845d7dd3808946915527d844264a2c744c8db4c24172ea49b60cab	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.46.1.el8_10.x86_64.rpm	2f9801223f845d7dd3808946915527d844264a2c744c8db4c24172ea49b60cab	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.46.1.el8_10.x86_64.rpm	f577c68a0028718cd13628a6dbadefb63896a0bf2fb80ae95dbe39f2811221de	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.46.1.el8_10.x86_64.rpm	f577c68a0028718cd13628a6dbadefb63896a0bf2fb80ae95dbe39f2811221de	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.46.1.el8_10.x86_64.rpm	221b9b9e4edc293189705aad180e184ce6d5e32b3f29172e190af26e20c764bc	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.46.1.el8_10.x86_64.rpm	221b9b9e4edc293189705aad180e184ce6d5e32b3f29172e190af26e20c764bc	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.46.1.el8_10.x86_64.rpm	e4cde780905fdc5dbd372810440b2ff950eb290afaa2d2b4b226ec062cf98861	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.46.1.el8_10.x86_64.rpm	e4cde780905fdc5dbd372810440b2ff950eb290afaa2d2b4b226ec062cf98861	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.46.1.el8_10.x86_64.rpm	e0e7dcd67551d025154bb5566264a68b197632209e37e803e0516fde34b74196	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.46.1.el8_10.x86_64.rpm	e0e7dcd67551d025154bb5566264a68b197632209e37e803e0516fde34b74196	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.46.1.el8_10.x86_64.rpm	a252545aa9303909a360c29e8ba9558b600cdca2875ba804ee5fb8331b79417f	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.46.1.el8_10.x86_64.rpm	69c2e03ca4f677f4ea1d2cf1505c0e14205eb68c7188b3209d6ec40e5555ef0b	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.46.1.el8_10.x86_64.rpm	69c2e03ca4f677f4ea1d2cf1505c0e14205eb68c7188b3209d6ec40e5555ef0b	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.46.1.el8_10.x86_64.rpm	93f46c126644c2c6ba46a57fe9b48209f6461a3c0f716ae9461ca04d016888f7	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.46.1.el8_10.x86_64.rpm	93f46c126644c2c6ba46a57fe9b48209f6461a3c0f716ae9461ca04d016888f7	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team