Stay Connected:

ELSA-2026-13577

ELSA-2026-13577 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-05-05

Description


[4.18.0-553.123.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.123.1]
- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187]
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401}

[4.18.0-553.122.1]
- nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724}
- net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252}
- kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252}

[4.18.0-553.121.1]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402}


Related CVEs


CVE-2024-41073
CVE-2025-40252
CVE-2025-68724
CVE-2026-23401
CVE-2026-31402
CVE-2026-31431

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.123.1.el8_10.src.rpmc05e9f6223a8d6e9fb325d2192402f69456fd1bae4026ebd3b7c8af21c1c762c-ol8_aarch64_baseos_latest
kernel-4.18.0-553.123.1.el8_10.src.rpmc05e9f6223a8d6e9fb325d2192402f69456fd1bae4026ebd3b7c8af21c1c762c-ol8_aarch64_codeready_builder
kernel-4.18.0-553.123.1.el8_10.src.rpmc05e9f6223a8d6e9fb325d2192402f69456fd1bae4026ebd3b7c8af21c1c762c-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.123.1.el8_10.aarch64.rpm23b868233bd2a2e06ea9833eeca86239954dcabb3fd105f52bf2b7865f19e681-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.123.1.el8_10.aarch64.rpm23b868233bd2a2e06ea9833eeca86239954dcabb3fd105f52bf2b7865f19e681-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.123.1.el8_10.aarch64.rpma836fb90e8c9802cc434c20d1fcd5fd36da21a81e7533e8ccb96c4575863f3fd-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.123.1.el8_10.aarch64.rpma836fb90e8c9802cc434c20d1fcd5fd36da21a81e7533e8ccb96c4575863f3fd-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.123.1.el8_10.aarch64.rpm806cacf65bae72bce02557dd1268f046d035fc0d86e791401b400ef50ea8ae95-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.123.1.el8_10.aarch64.rpm806cacf65bae72bce02557dd1268f046d035fc0d86e791401b400ef50ea8ae95-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.123.1.el8_10.aarch64.rpm248e284ce1f22611757a27210864323d63c579afcede5191ba0142015a088ea5-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.123.1.el8_10.aarch64.rpm248e284ce1f22611757a27210864323d63c579afcede5191ba0142015a088ea5-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.123.1.el8_10.aarch64.rpm9f89179058fbfea8513da4bd9a2c688ccebedaf9d98bf96a6c6631e3dd63644f-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.123.1.el8_10.aarch64.rpm9f89179058fbfea8513da4bd9a2c688ccebedaf9d98bf96a6c6631e3dd63644f-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.123.1.el8_10.aarch64.rpm18aba864d1413e275aa736a7b186570940590d351d1e1f28e1fd7965bf904b8a-ol8_aarch64_codeready_builder
perf-4.18.0-553.123.1.el8_10.aarch64.rpm4a788365b7a4d2cf989b18d6178a3b390e8f9044a7c782a4d17891e61e7c5529-ol8_aarch64_baseos_latest
perf-4.18.0-553.123.1.el8_10.aarch64.rpm4a788365b7a4d2cf989b18d6178a3b390e8f9044a7c782a4d17891e61e7c5529-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.123.1.el8_10.aarch64.rpm6ce6321859e9fdd46df5467dcce595c59b178181ff779d9b02816734d5e56798-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.123.1.el8_10.aarch64.rpm6ce6321859e9fdd46df5467dcce595c59b178181ff779d9b02816734d5e56798-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.123.1.el8_10.src.rpmc05e9f6223a8d6e9fb325d2192402f69456fd1bae4026ebd3b7c8af21c1c762c-ol8_x86_64_baseos_latest
kernel-4.18.0-553.123.1.el8_10.src.rpmc05e9f6223a8d6e9fb325d2192402f69456fd1bae4026ebd3b7c8af21c1c762c-ol8_x86_64_codeready_builder
kernel-4.18.0-553.123.1.el8_10.src.rpmc05e9f6223a8d6e9fb325d2192402f69456fd1bae4026ebd3b7c8af21c1c762c-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.123.1.el8_10.x86_64.rpmd658a3422e9163e3916b42ff407fc11e76573436d6abe8dd1ee13b87ac198c7f-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.123.1.el8_10.x86_64.rpmd658a3422e9163e3916b42ff407fc11e76573436d6abe8dd1ee13b87ac198c7f-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.123.1.el8_10.x86_64.rpmc39cbefb7d43e84c172eae0d2e282050c5924a30ac9d0eac00d2a7f8d777b3db-ol8_x86_64_baseos_latest
kernel-4.18.0-553.123.1.el8_10.x86_64.rpmc39cbefb7d43e84c172eae0d2e282050c5924a30ac9d0eac00d2a7f8d777b3db-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.123.1.el8_10.noarch.rpmdc500b742657a174e09bfca7ad16ce1375dec59e41054405f9e849a7e8bebb8b-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.123.1.el8_10.noarch.rpmdc500b742657a174e09bfca7ad16ce1375dec59e41054405f9e849a7e8bebb8b-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.123.1.el8_10.x86_64.rpm39e497b592f781180a038e7f746022d168c7e1673d0d6b18592c3035a0efe24a-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.123.1.el8_10.x86_64.rpm39e497b592f781180a038e7f746022d168c7e1673d0d6b18592c3035a0efe24a-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.123.1.el8_10.x86_64.rpm8d35fbc237465286bc072a117eae1ce65da6c3e5db8d5e3770cc5e65122f7a3c-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.123.1.el8_10.x86_64.rpm8d35fbc237465286bc072a117eae1ce65da6c3e5db8d5e3770cc5e65122f7a3c-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.123.1.el8_10.x86_64.rpmeecb434022370c004289f84c6f4cdfc99e6586c282c2bd4f8d31ee91e469768b-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.123.1.el8_10.x86_64.rpmeecb434022370c004289f84c6f4cdfc99e6586c282c2bd4f8d31ee91e469768b-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.123.1.el8_10.x86_64.rpm64fe126aefdb13722115cbbc40b39e71e47d282c445d2ce15068009dfe201dfa-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.123.1.el8_10.x86_64.rpm64fe126aefdb13722115cbbc40b39e71e47d282c445d2ce15068009dfe201dfa-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.123.1.el8_10.x86_64.rpm9145e24308a9b7811ed98255a8f7af4eb112a6a48902f6f23d55f2ee089952f2-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.123.1.el8_10.x86_64.rpm9145e24308a9b7811ed98255a8f7af4eb112a6a48902f6f23d55f2ee089952f2-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.123.1.el8_10.x86_64.rpmd294e288e376a9ea99bee38a7a64cbca9dfa7905553ab398165baf0b3f4d37c2-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.123.1.el8_10.x86_64.rpmd294e288e376a9ea99bee38a7a64cbca9dfa7905553ab398165baf0b3f4d37c2-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.123.1.el8_10.x86_64.rpmb92b41458c2e436e73216dc922105cd5dad507b74ac8037d40b404e444489c0e-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.123.1.el8_10.x86_64.rpmb92b41458c2e436e73216dc922105cd5dad507b74ac8037d40b404e444489c0e-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.123.1.el8_10.x86_64.rpmc6b1c312094a90dba7ffcc18ceef704ce6e744128894736fef99511bde661d15-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.123.1.el8_10.x86_64.rpmc6b1c312094a90dba7ffcc18ceef704ce6e744128894736fef99511bde661d15-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.123.1.el8_10.noarch.rpm2809335de219e2a5970910f5e918a5e5df28e80bdde79f2012d1298a169e08ca-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.123.1.el8_10.noarch.rpm2809335de219e2a5970910f5e918a5e5df28e80bdde79f2012d1298a169e08ca-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.123.1.el8_10.x86_64.rpm0a9ddcf2acf61b61dbe50777f6224bdc9ec4ab5d6de13be7e39df85e9beb1fe4-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.123.1.el8_10.x86_64.rpm0a9ddcf2acf61b61dbe50777f6224bdc9ec4ab5d6de13be7e39df85e9beb1fe4-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.123.1.el8_10.x86_64.rpmabf1bbf10c8c1fab57d721a9f0a7221f2ad88436ff989f0469f8fbe2151b556b-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.123.1.el8_10.x86_64.rpmabf1bbf10c8c1fab57d721a9f0a7221f2ad88436ff989f0469f8fbe2151b556b-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.123.1.el8_10.x86_64.rpmbdc289a10494f89e2dbcb1e9aa19fb50bbbc8a16eea114da3485d28a4af64dc9-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.123.1.el8_10.x86_64.rpmbdc289a10494f89e2dbcb1e9aa19fb50bbbc8a16eea114da3485d28a4af64dc9-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.123.1.el8_10.x86_64.rpm1187790ee135622a3a837177ffdf825aa4d90a16091c969eeda36e4f0e75d28b-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.123.1.el8_10.x86_64.rpm1187790ee135622a3a837177ffdf825aa4d90a16091c969eeda36e4f0e75d28b-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.123.1.el8_10.x86_64.rpma571d4576b989f5a28f67b892be94bfe643f0e3714848d876c74fbfb82fe408e-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.123.1.el8_10.x86_64.rpma571d4576b989f5a28f67b892be94bfe643f0e3714848d876c74fbfb82fe408e-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.123.1.el8_10.x86_64.rpmd56629cbb8592e43281ae7897814ea56abe34849eab9424eff1d76a387ba3d9a-ol8_x86_64_codeready_builder
perf-4.18.0-553.123.1.el8_10.x86_64.rpmfa6f51756d6cc07f1d47dff922d81887fc14eb8f73b6dcdc22b2f2451c8de789-ol8_x86_64_baseos_latest
perf-4.18.0-553.123.1.el8_10.x86_64.rpmfa6f51756d6cc07f1d47dff922d81887fc14eb8f73b6dcdc22b2f2451c8de789-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.123.1.el8_10.x86_64.rpme9e59c2a857db87eae3cd8f55eae74df57e7f65e339da1c14017cde7bfcfa0ec-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.123.1.el8_10.x86_64.rpme9e59c2a857db87eae3cd8f55eae74df57e7f65e339da1c14017cde7bfcfa0ec-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights