ELSA-2026-2264

ELSA-2026-2264 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-02-09

Description


[4.18.0-553.104.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.104.1]
- Revert 'audit: Avoid excessive dput/dget in audit_context setup and reset paths' (Alexandra Hajkova) [RHEL-145856]

[4.18.0-553.103.1]
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}

[4.18.0-553.102.1]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]

[4.18.0-553.101.1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]


Related CVEs


CVE-2022-50673
CVE-2025-38403
CVE-2025-40135
CVE-2025-40158
CVE-2025-40170
CVE-2025-40269
CVE-2025-68349
CVE-2026-22998

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.104.1.el8_10.src.rpm580b93eabd0e368a5d3eba1b5966ae1156152054281cb0156488ecc28587e4fa-ol8_aarch64_baseos_latest
kernel-4.18.0-553.104.1.el8_10.src.rpm580b93eabd0e368a5d3eba1b5966ae1156152054281cb0156488ecc28587e4fa-ol8_aarch64_codeready_builder
kernel-4.18.0-553.104.1.el8_10.src.rpm580b93eabd0e368a5d3eba1b5966ae1156152054281cb0156488ecc28587e4fa-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.104.1.el8_10.aarch64.rpm8b8bb10bd3513e28ddfb47a3a3ae2c3f1b8cc181d67962509635bca1bfbc0744-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.104.1.el8_10.aarch64.rpm8b8bb10bd3513e28ddfb47a3a3ae2c3f1b8cc181d67962509635bca1bfbc0744-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.104.1.el8_10.aarch64.rpme81830cee758304767a934f193f883e90ac0d0c87326524f58b6391cd571d25f-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.104.1.el8_10.aarch64.rpme81830cee758304767a934f193f883e90ac0d0c87326524f58b6391cd571d25f-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.104.1.el8_10.aarch64.rpm510a3f7b9030dbd59e789b32de3f339b88f7be7f73bcd536c36c2d3cc51208d6-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.104.1.el8_10.aarch64.rpm510a3f7b9030dbd59e789b32de3f339b88f7be7f73bcd536c36c2d3cc51208d6-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.104.1.el8_10.aarch64.rpm055aeda1794a064ce5e0dae625fb7a4852585aa40084d761970ac114d3ff6314-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.104.1.el8_10.aarch64.rpm055aeda1794a064ce5e0dae625fb7a4852585aa40084d761970ac114d3ff6314-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.104.1.el8_10.aarch64.rpm7cbc4b1a348d9bc256ed8dbe8c86c9bebf647c66e0a696a82f3e2918efa21ee9-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.104.1.el8_10.aarch64.rpm7cbc4b1a348d9bc256ed8dbe8c86c9bebf647c66e0a696a82f3e2918efa21ee9-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.aarch64.rpmfdf02e8602c15e662405e44726269ef15661f1622f95504b3e0960f16f30c194-ol8_aarch64_codeready_builder
perf-4.18.0-553.104.1.el8_10.aarch64.rpm15f0656608a3611d5918f34dfc1829aa9eb476637353284433402a1df8551e88-ol8_aarch64_baseos_latest
perf-4.18.0-553.104.1.el8_10.aarch64.rpm15f0656608a3611d5918f34dfc1829aa9eb476637353284433402a1df8551e88-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.104.1.el8_10.aarch64.rpme81581a7f970316eb0434332582eee515c27cd686077e2d176fb74dde3286a1a-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.104.1.el8_10.aarch64.rpme81581a7f970316eb0434332582eee515c27cd686077e2d176fb74dde3286a1a-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.104.1.el8_10.src.rpm580b93eabd0e368a5d3eba1b5966ae1156152054281cb0156488ecc28587e4fa-ol8_x86_64_baseos_latest
kernel-4.18.0-553.104.1.el8_10.src.rpm580b93eabd0e368a5d3eba1b5966ae1156152054281cb0156488ecc28587e4fa-ol8_x86_64_codeready_builder
kernel-4.18.0-553.104.1.el8_10.src.rpm580b93eabd0e368a5d3eba1b5966ae1156152054281cb0156488ecc28587e4fa-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.104.1.el8_10.x86_64.rpm4e8fc918e48e432e27f0e5f11aaebf16e4661fd3d1028b7c8101d7ade9cc007f-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.104.1.el8_10.x86_64.rpm4e8fc918e48e432e27f0e5f11aaebf16e4661fd3d1028b7c8101d7ade9cc007f-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.104.1.el8_10.x86_64.rpm2ea5b981ffd06e459fc9f63aebed1730fb3995cabd38dd8e6ac802bc35dccd6a-ol8_x86_64_baseos_latest
kernel-4.18.0-553.104.1.el8_10.x86_64.rpm2ea5b981ffd06e459fc9f63aebed1730fb3995cabd38dd8e6ac802bc35dccd6a-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch.rpm6181c92c4ff19c1b6564e1a7766d27ac42971cfc15f6f1e6184d2b52c0776510-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.104.1.el8_10.noarch.rpm6181c92c4ff19c1b6564e1a7766d27ac42971cfc15f6f1e6184d2b52c0776510-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.104.1.el8_10.x86_64.rpm0f62d7502db2e41e17b66dd8f9f73428bec96bc4e8247676d94d26f11a6a2dbf-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.104.1.el8_10.x86_64.rpm0f62d7502db2e41e17b66dd8f9f73428bec96bc4e8247676d94d26f11a6a2dbf-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64.rpmc9568084613b205ec47a512dd146076f3128683835883ddefa559df41a53ae97-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.104.1.el8_10.x86_64.rpmc9568084613b205ec47a512dd146076f3128683835883ddefa559df41a53ae97-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.104.1.el8_10.x86_64.rpm938df4d043bf9cd7eca38ef0cced0cf7ed8f2dfb310e038785f03f22f7f8f196-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.104.1.el8_10.x86_64.rpm938df4d043bf9cd7eca38ef0cced0cf7ed8f2dfb310e038785f03f22f7f8f196-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64.rpma0fc79b5312fb96d3c3da9cd1ebd7f817712d3eff4390440b5dc0f3059d2be23-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.104.1.el8_10.x86_64.rpma0fc79b5312fb96d3c3da9cd1ebd7f817712d3eff4390440b5dc0f3059d2be23-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64.rpmea455a565b1907e547a42c9785fafc4f05eda83ff89a338c2a09ffb11ceb07de-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.104.1.el8_10.x86_64.rpmea455a565b1907e547a42c9785fafc4f05eda83ff89a338c2a09ffb11ceb07de-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64.rpm095012f791bc17faceb6be75bf6b39cd053b6ca9dfaf585932d962380321ceb1-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.104.1.el8_10.x86_64.rpm095012f791bc17faceb6be75bf6b39cd053b6ca9dfaf585932d962380321ceb1-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64.rpm2b2100537c2d9b01858654e49a1f2fdb7619d8c5235ba4ccb5156666ed783ac0-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.104.1.el8_10.x86_64.rpm2b2100537c2d9b01858654e49a1f2fdb7619d8c5235ba4ccb5156666ed783ac0-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.104.1.el8_10.x86_64.rpm9a8ca0687ff189e6f84dd90191116f4d69e2a13898e053013c300268157b726b-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.104.1.el8_10.x86_64.rpm9a8ca0687ff189e6f84dd90191116f4d69e2a13898e053013c300268157b726b-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.104.1.el8_10.noarch.rpm98b271cd56a04199e38adab7f7a2293548d25b2a0cbb7a20569e71444f3cd9d7-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.104.1.el8_10.noarch.rpm98b271cd56a04199e38adab7f7a2293548d25b2a0cbb7a20569e71444f3cd9d7-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.104.1.el8_10.x86_64.rpmaa26d89a502fe4af9b6961d9e9080e41da0b23c585efaf1ef2ae1d804b58b021-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.104.1.el8_10.x86_64.rpmaa26d89a502fe4af9b6961d9e9080e41da0b23c585efaf1ef2ae1d804b58b021-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.104.1.el8_10.x86_64.rpm7bc38b195f07e957706b4b5388ceadfbc5cd84e77097e9ce994d90bbc57110ed-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.104.1.el8_10.x86_64.rpm7bc38b195f07e957706b4b5388ceadfbc5cd84e77097e9ce994d90bbc57110ed-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64.rpm7a4b681aad2cd94acce81d71ca0ee07164b1a553fdfe5baf6330a7711469e656-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.104.1.el8_10.x86_64.rpm7a4b681aad2cd94acce81d71ca0ee07164b1a553fdfe5baf6330a7711469e656-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.104.1.el8_10.x86_64.rpm862e909459665322129e3bc162170ca70a9d724281ce7a8068b3bde8dd809224-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.104.1.el8_10.x86_64.rpm862e909459665322129e3bc162170ca70a9d724281ce7a8068b3bde8dd809224-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64.rpm6e664fd5330169ee37aaeae849659a379904ab4a55028321a593ef80abd75259-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.104.1.el8_10.x86_64.rpm6e664fd5330169ee37aaeae849659a379904ab4a55028321a593ef80abd75259-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.104.1.el8_10.x86_64.rpm4ba03fa4eca519a8535f4f526d96c9b01f2baca5c45cd66cd46605478b12b0f3-ol8_x86_64_codeready_builder
perf-4.18.0-553.104.1.el8_10.x86_64.rpmbba6a57d117a7cb08649ddc6e90cc69359071430e0ad71d0244763f831690e30-ol8_x86_64_baseos_latest
perf-4.18.0-553.104.1.el8_10.x86_64.rpmbba6a57d117a7cb08649ddc6e90cc69359071430e0ad71d0244763f831690e30-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.104.1.el8_10.x86_64.rpm27b8fbcda56d8362d4717d31e3200381dc74d5df8afa5a40dc47137407aa69d8-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.104.1.el8_10.x86_64.rpm27b8fbcda56d8362d4717d31e3200381dc74d5df8afa5a40dc47137407aa69d8-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete