ELSA-2025-3893

ELSA-2025-3893 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2025-04-15

Description

[4.18.0-553.50.1_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.50.1_10]
- perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119]
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150}
- scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052]
- ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852]
- ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852]
- ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852]

[4.18.0-553.49.1_10]
- net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244]
- redhat: drop Y issues from changelog (Jan Stancek)
- md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673]
- md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673]
- md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673]
- md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673]
- md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673]
- raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499]
- x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241}
- x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241}

[4.18.0-553.48.1_10]
- rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves)
- gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208]
- gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208]
- gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208]
- gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208]
- gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208]
- gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208]
- gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208]
- gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208]

Related CVEs

CVE-2024-53241

CVE-2024-53150

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.50.1.el8_10.src.rpm	07ee4b87a47b1aaaf64eb254f7d7b92500a5e375fb730c29f1f2a3ba87441bee	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.50.1.el8_10.src.rpm	07ee4b87a47b1aaaf64eb254f7d7b92500a5e375fb730c29f1f2a3ba87441bee	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.50.1.el8_10.src.rpm	07ee4b87a47b1aaaf64eb254f7d7b92500a5e375fb730c29f1f2a3ba87441bee	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.50.1.el8_10.aarch64.rpm	1d8d5f61895a7c7b85cedf034b439300eda9236b7b3e2b42816b77a8164e194c	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.50.1.el8_10.aarch64.rpm	1d8d5f61895a7c7b85cedf034b439300eda9236b7b3e2b42816b77a8164e194c	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.50.1.el8_10.aarch64.rpm	a6d2cfe86f83818c47789d9b9bea0c0c78d7f7ab3c3185e097b5a425dd670887	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.50.1.el8_10.aarch64.rpm	a6d2cfe86f83818c47789d9b9bea0c0c78d7f7ab3c3185e097b5a425dd670887	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.50.1.el8_10.aarch64.rpm	9af2c174f8f87b78de06bab4b62223530e1ed15a585774f11f21b27dd3b8598c	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.50.1.el8_10.aarch64.rpm	9af2c174f8f87b78de06bab4b62223530e1ed15a585774f11f21b27dd3b8598c	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.50.1.el8_10.aarch64.rpm	5048b911b1d4f33a61da583ca3441b442e4b7683f975a1cfe2382333de0de52a	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.50.1.el8_10.aarch64.rpm	5048b911b1d4f33a61da583ca3441b442e4b7683f975a1cfe2382333de0de52a	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.50.1.el8_10.aarch64.rpm	fb71ee68054705d29f2dd14142fb482088109c6bfdffd5514b70f1f8abe3e1ec	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.50.1.el8_10.aarch64.rpm	fb71ee68054705d29f2dd14142fb482088109c6bfdffd5514b70f1f8abe3e1ec	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.50.1.el8_10.aarch64.rpm	bb50a101352e7de0e31560231102c93c65bca0cc1a4c2e1123771e3e7f48dc4c	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.50.1.el8_10.aarch64.rpm	fe2bef89497946c1ee243443b6fe997938f14682ba18290ce98e963aff303578	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.50.1.el8_10.aarch64.rpm	fe2bef89497946c1ee243443b6fe997938f14682ba18290ce98e963aff303578	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.50.1.el8_10.aarch64.rpm	8e5bdcceb93028f7a710ee1aa2fa20048084f862e43c74d3337619eb32d686b4	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.50.1.el8_10.aarch64.rpm	8e5bdcceb93028f7a710ee1aa2fa20048084f862e43c74d3337619eb32d686b4	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.50.1.el8_10.src.rpm	07ee4b87a47b1aaaf64eb254f7d7b92500a5e375fb730c29f1f2a3ba87441bee	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.50.1.el8_10.src.rpm	07ee4b87a47b1aaaf64eb254f7d7b92500a5e375fb730c29f1f2a3ba87441bee	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.50.1.el8_10.src.rpm	07ee4b87a47b1aaaf64eb254f7d7b92500a5e375fb730c29f1f2a3ba87441bee	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.50.1.el8_10.x86_64.rpm	05529e300cf49a60de0152666039896c6dafa2824ef5fa0dedcdeac76dc76d32	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.50.1.el8_10.x86_64.rpm	05529e300cf49a60de0152666039896c6dafa2824ef5fa0dedcdeac76dc76d32	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.50.1.el8_10.x86_64.rpm	1b922e90aa2b847de89552d789b032de43de659e18eaf01c779a89187e46ec28	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.50.1.el8_10.x86_64.rpm	1b922e90aa2b847de89552d789b032de43de659e18eaf01c779a89187e46ec28	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.50.1.el8_10.noarch.rpm	9526db067c6d05b063535df812fb71ec0d90a1fd02b6e30e0bd239d1857fd0f5	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.50.1.el8_10.noarch.rpm	9526db067c6d05b063535df812fb71ec0d90a1fd02b6e30e0bd239d1857fd0f5	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.50.1.el8_10.x86_64.rpm	7bbb7abc555897282aade265050d7c7a813310df52b006a00d3281400eaf6a21	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.50.1.el8_10.x86_64.rpm	7bbb7abc555897282aade265050d7c7a813310df52b006a00d3281400eaf6a21	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.50.1.el8_10.x86_64.rpm	8439f3ef72a2d1cb9b287d4260c996270df24728757b0af1f3497005fde8465e	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.50.1.el8_10.x86_64.rpm	8439f3ef72a2d1cb9b287d4260c996270df24728757b0af1f3497005fde8465e	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.50.1.el8_10.x86_64.rpm	f0bcfc83b8df79e86ecc172e265135502b1c183ee3f3b99cf044e4266158e077	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.50.1.el8_10.x86_64.rpm	f0bcfc83b8df79e86ecc172e265135502b1c183ee3f3b99cf044e4266158e077	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.50.1.el8_10.x86_64.rpm	daa9fe0dc3ede3a95418b6d1c8df906ec2b0f378dda67275c80a6b65c8202db0	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.50.1.el8_10.x86_64.rpm	daa9fe0dc3ede3a95418b6d1c8df906ec2b0f378dda67275c80a6b65c8202db0	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.50.1.el8_10.x86_64.rpm	0474694cdd6d7d8d77cbbbfd2c9d1d0befaa70550c314567db9bf1f822111403	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.50.1.el8_10.x86_64.rpm	0474694cdd6d7d8d77cbbbfd2c9d1d0befaa70550c314567db9bf1f822111403	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.50.1.el8_10.x86_64.rpm	25ad06a2eb073ef76260417f1c141ae2d3b04ca33fcd225c44f6a6095879a249	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.50.1.el8_10.x86_64.rpm	25ad06a2eb073ef76260417f1c141ae2d3b04ca33fcd225c44f6a6095879a249	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.50.1.el8_10.x86_64.rpm	a16f17703089484920464826da9927f5c5ac5900953ff6eba73758a8dc10e9d9	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.50.1.el8_10.x86_64.rpm	a16f17703089484920464826da9927f5c5ac5900953ff6eba73758a8dc10e9d9	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.50.1.el8_10.x86_64.rpm	4c0d0e26388cd2481b1b8efd684eb6e80611f8308641be2eb6b65bab80d38c00	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.50.1.el8_10.x86_64.rpm	4c0d0e26388cd2481b1b8efd684eb6e80611f8308641be2eb6b65bab80d38c00	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.50.1.el8_10.noarch.rpm	4ffe7b9cf3d7d6967b285f9cc753b8f7ae13593456fb928577f9fe54548539aa	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.50.1.el8_10.noarch.rpm	4ffe7b9cf3d7d6967b285f9cc753b8f7ae13593456fb928577f9fe54548539aa	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.50.1.el8_10.x86_64.rpm	265304e917dc138715ae5e12d8d33a22f88de1e508b1c85d8cf62661fd95b2f4	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.50.1.el8_10.x86_64.rpm	265304e917dc138715ae5e12d8d33a22f88de1e508b1c85d8cf62661fd95b2f4	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.50.1.el8_10.x86_64.rpm	16957362edf65842e5219c39e423028a510ad5be6dbc704f20a945aa7d4b3dd2	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.50.1.el8_10.x86_64.rpm	16957362edf65842e5219c39e423028a510ad5be6dbc704f20a945aa7d4b3dd2	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.50.1.el8_10.x86_64.rpm	ab717e652d4dad3dc57ee8f519627f210cb4a291d3e97b3cb7c7d9b1e67e1f8f	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.50.1.el8_10.x86_64.rpm	ab717e652d4dad3dc57ee8f519627f210cb4a291d3e97b3cb7c7d9b1e67e1f8f	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.50.1.el8_10.x86_64.rpm	4fa054877cdb1b1ea4a831a2fd39b6df6e3a3d9393ee43be32622d520671bf69	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.50.1.el8_10.x86_64.rpm	4fa054877cdb1b1ea4a831a2fd39b6df6e3a3d9393ee43be32622d520671bf69	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.50.1.el8_10.x86_64.rpm	eb7a9b10552890f31dfa977bedf445f8206491f9bb9776cec677afcceb03bccb	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.50.1.el8_10.x86_64.rpm	eb7a9b10552890f31dfa977bedf445f8206491f9bb9776cec677afcceb03bccb	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.50.1.el8_10.x86_64.rpm	fb6c1fb9536354be756ef7dd00d0440d95db87f2fa880a278de94d1a5c471f30	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.50.1.el8_10.x86_64.rpm	b9b0ad60de0a2add049be3bbbd21212c35dfb29c1f965ce832e4a533502a7136	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.50.1.el8_10.x86_64.rpm	b9b0ad60de0a2add049be3bbbd21212c35dfb29c1f965ce832e4a533502a7136	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.50.1.el8_10.x86_64.rpm	cf55dd58a0e28cd45a3570e0d55da58fa5e14a19e4af0a698754a1f9a829bf95	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.50.1.el8_10.x86_64.rpm	cf55dd58a0e28cd45a3570e0d55da58fa5e14a19e4af0a698754a1f9a829bf95	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team