ELSA-2026-1142

ELSA-2026-1142 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-01-26

Description

[4.18.0-553.97.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.97.1]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154}

[4.18.0-553.96.1]
- Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277}
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (John J Coleman) [RHEL-111354]
- xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354]
- x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354]

[4.18.0-553.95.1]
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819]
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324]

Related CVEs

CVE-2023-53673

CVE-2025-40154

CVE-2025-40248

CVE-2025-40277

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.97.1.el8_10.src.rpm	0afcc557e2926e3c623df5b417e1124f8cbebd86ddbe3a5768022088494d1319	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.97.1.el8_10.src.rpm	0afcc557e2926e3c623df5b417e1124f8cbebd86ddbe3a5768022088494d1319	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.97.1.el8_10.src.rpm	0afcc557e2926e3c623df5b417e1124f8cbebd86ddbe3a5768022088494d1319	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.97.1.el8_10.aarch64.rpm	3e887a3c2b3e97797a6067a43d1f15baf438aa64ebebef3d9bad602caa56c614	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.97.1.el8_10.aarch64.rpm	3e887a3c2b3e97797a6067a43d1f15baf438aa64ebebef3d9bad602caa56c614	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.97.1.el8_10.aarch64.rpm	5f6f726584aa1864b884d88a7d68752e29773a06b9c2696c6f94155cc8a2331c	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.97.1.el8_10.aarch64.rpm	5f6f726584aa1864b884d88a7d68752e29773a06b9c2696c6f94155cc8a2331c	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.97.1.el8_10.aarch64.rpm	d36d088dc494ff175ad0188c55596faca26b41a9cf7de7647363f88ab6f78e00	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.97.1.el8_10.aarch64.rpm	d36d088dc494ff175ad0188c55596faca26b41a9cf7de7647363f88ab6f78e00	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.97.1.el8_10.aarch64.rpm	ec4ca80be9efa77cc913f7c86504eef8a6a198d94eeced3564e9936f94045eb2	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.97.1.el8_10.aarch64.rpm	ec4ca80be9efa77cc913f7c86504eef8a6a198d94eeced3564e9936f94045eb2	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.97.1.el8_10.aarch64.rpm	0ebb7cf1fc75dfc3b79eca21996969f6a606411fa169a46652deb4bda06f3874	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.97.1.el8_10.aarch64.rpm	0ebb7cf1fc75dfc3b79eca21996969f6a606411fa169a46652deb4bda06f3874	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.97.1.el8_10.aarch64.rpm	ed23378755d1f5cb6ef4a3abc4c51886ea58d9756605954a832b72000f253f68	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.97.1.el8_10.aarch64.rpm	8e267ab9887f71433ba563fe2e89b4bb60e4863d124897ba4c224ad7cf96b115	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.97.1.el8_10.aarch64.rpm	8e267ab9887f71433ba563fe2e89b4bb60e4863d124897ba4c224ad7cf96b115	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.97.1.el8_10.aarch64.rpm	50d41ec0f7250c8c93a7bf032ad70f2d394ce383f2a97a15d989007a94961c82	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.97.1.el8_10.aarch64.rpm	50d41ec0f7250c8c93a7bf032ad70f2d394ce383f2a97a15d989007a94961c82	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.97.1.el8_10.src.rpm	0afcc557e2926e3c623df5b417e1124f8cbebd86ddbe3a5768022088494d1319	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.97.1.el8_10.src.rpm	0afcc557e2926e3c623df5b417e1124f8cbebd86ddbe3a5768022088494d1319	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.97.1.el8_10.src.rpm	0afcc557e2926e3c623df5b417e1124f8cbebd86ddbe3a5768022088494d1319	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.97.1.el8_10.x86_64.rpm	4c92d2000a8a11de3895fc0d9cce712ed5a32052934d8b653e3987b551c9f0a0	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.97.1.el8_10.x86_64.rpm	4c92d2000a8a11de3895fc0d9cce712ed5a32052934d8b653e3987b551c9f0a0	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.97.1.el8_10.x86_64.rpm	03f7cfb9530611a11c344e23bb4bd594a5acbe22a06d8e272a4fab3b6b2e6a43	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.97.1.el8_10.x86_64.rpm	03f7cfb9530611a11c344e23bb4bd594a5acbe22a06d8e272a4fab3b6b2e6a43	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.97.1.el8_10.noarch.rpm	86a23a2cc95663abef75deaf43b2c83f83d73c13b94103908875c8950e536268	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.97.1.el8_10.noarch.rpm	86a23a2cc95663abef75deaf43b2c83f83d73c13b94103908875c8950e536268	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.97.1.el8_10.x86_64.rpm	b59d7b0f663567cac61dfe31dd8ecbeedfc00266b6e639d69a2fa85eadb12eeb	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.97.1.el8_10.x86_64.rpm	b59d7b0f663567cac61dfe31dd8ecbeedfc00266b6e639d69a2fa85eadb12eeb	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.97.1.el8_10.x86_64.rpm	fab27f1edb368190bee94208f3d4f39fd10e33b71fac405be2f18f61d454b272	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.97.1.el8_10.x86_64.rpm	fab27f1edb368190bee94208f3d4f39fd10e33b71fac405be2f18f61d454b272	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.97.1.el8_10.x86_64.rpm	2b07e38826a74a22344554874513f389ac26da3af8976f8cf1922973b5cb84b6	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.97.1.el8_10.x86_64.rpm	2b07e38826a74a22344554874513f389ac26da3af8976f8cf1922973b5cb84b6	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.97.1.el8_10.x86_64.rpm	e752a06c6f4d406fb456d78515ad0804b25d9b4f1d2eb58475aaf73d7dfd2a78	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.97.1.el8_10.x86_64.rpm	e752a06c6f4d406fb456d78515ad0804b25d9b4f1d2eb58475aaf73d7dfd2a78	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.97.1.el8_10.x86_64.rpm	77f4f6c3375228955e4ca132a2208b8f5e1e393c816f92533aeb0d55cf5c195a	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.97.1.el8_10.x86_64.rpm	77f4f6c3375228955e4ca132a2208b8f5e1e393c816f92533aeb0d55cf5c195a	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.97.1.el8_10.x86_64.rpm	48627d1364d42deff5d46f609c1d3e8dbbd2995d7327aadc119c9a40ba242442	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.97.1.el8_10.x86_64.rpm	48627d1364d42deff5d46f609c1d3e8dbbd2995d7327aadc119c9a40ba242442	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.97.1.el8_10.x86_64.rpm	51999295308731cc9508a445d76f095e483a6efa23703dee99a8c575544839f2	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.97.1.el8_10.x86_64.rpm	51999295308731cc9508a445d76f095e483a6efa23703dee99a8c575544839f2	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.97.1.el8_10.x86_64.rpm	07d266480960b554e7f8839acb7d2791d8618ec155082d56ff144f64f8b7b33b	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.97.1.el8_10.x86_64.rpm	07d266480960b554e7f8839acb7d2791d8618ec155082d56ff144f64f8b7b33b	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.97.1.el8_10.noarch.rpm	d81d1e3e0842c0788a254a8b3ec40b58d5451991301e9ea145a088921e91481f	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.97.1.el8_10.noarch.rpm	d81d1e3e0842c0788a254a8b3ec40b58d5451991301e9ea145a088921e91481f	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.97.1.el8_10.x86_64.rpm	144988d1b4b1e4a94ac3228a5abb0c6255152aec1912ea4844c4c92793701b85	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.97.1.el8_10.x86_64.rpm	144988d1b4b1e4a94ac3228a5abb0c6255152aec1912ea4844c4c92793701b85	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.97.1.el8_10.x86_64.rpm	6b444d9d55f0983d149b0c6e97dfd1d7ca6485adcafa1f55ec0565366bcdef72	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.97.1.el8_10.x86_64.rpm	6b444d9d55f0983d149b0c6e97dfd1d7ca6485adcafa1f55ec0565366bcdef72	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.97.1.el8_10.x86_64.rpm	f6650429b59f894118d2f2e54eedd55df43dc15232674698ad671bedc16d5b52	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.97.1.el8_10.x86_64.rpm	f6650429b59f894118d2f2e54eedd55df43dc15232674698ad671bedc16d5b52	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.97.1.el8_10.x86_64.rpm	0924e67e8441ac6972784034b7d43d70e83e24b793d48e2baba3b3174cf31645	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.97.1.el8_10.x86_64.rpm	0924e67e8441ac6972784034b7d43d70e83e24b793d48e2baba3b3174cf31645	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.97.1.el8_10.x86_64.rpm	7055debb63ab0b1230f2d38d8aba5d26af98d8792ba507a037086fff0bf626fd	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.97.1.el8_10.x86_64.rpm	7055debb63ab0b1230f2d38d8aba5d26af98d8792ba507a037086fff0bf626fd	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.97.1.el8_10.x86_64.rpm	795d241026b041a2fab2e304b62bd9f7d8d58276885d9783f12828d024244a0a	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.97.1.el8_10.x86_64.rpm	acab2335f856d2525ee9a078da1763e4695489d3a862f1402564d05d3e261aaa	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.97.1.el8_10.x86_64.rpm	acab2335f856d2525ee9a078da1763e4695489d3a862f1402564d05d3e261aaa	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.97.1.el8_10.x86_64.rpm	b657a8dbc165baf2bc786edde219514efc70bbc218cfb450013fee668e81fa40	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.97.1.el8_10.x86_64.rpm	b657a8dbc165baf2bc786edde219514efc70bbc218cfb450013fee668e81fa40	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team