ELSA-2026-27353

ELSA-2026-27353 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-22

Description

[4.18.0-553.136.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.136.1]
- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- net/sched: act_pedit: free pedit keys on bail from offset check (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- net/sched: act_pedit: rate limit datapath messages (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- net/sched: act_pedit: remove extra check for key type (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- net/sched: act_pedit: check static offsets a priori (Ivan Vecera) [RHEL-177582] {CVE-2026-46331}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180103] {CVE-2026-46135}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172764] {CVE-2026-43056}

[4.18.0-553.135.1]
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (Jose Exposito) [RHEL-178825] {CVE-2026-31488}
- sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Juri Lelli) [RHEL-178520]
- RDMA/mana_ib: Validate rx_hash_key_len to prevent buffer overflow (Gaurav Goklani) [RHEL-180089] {CVE-2026-46145}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (Jaroslav Kysela) [RHEL-179304] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173939] {CVE-2026-43279}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (Xin Long) [RHEL-168063] {CVE-2026-31419}

Related CVEs

CVE-2026-31419

CVE-2026-31488

CVE-2026-43056

CVE-2026-43279

CVE-2026-46090

CVE-2026-46135

CVE-2026-46145

CVE-2026-46331

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.136.1.el8_10.src.rpm	5edf91c90a2dd60b96b0fdd06dff17098ed7a452d06df1f4a4f79a4a6ba40725	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.136.1.el8_10.src.rpm	5edf91c90a2dd60b96b0fdd06dff17098ed7a452d06df1f4a4f79a4a6ba40725	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.136.1.el8_10.src.rpm	5edf91c90a2dd60b96b0fdd06dff17098ed7a452d06df1f4a4f79a4a6ba40725	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.136.1.el8_10.aarch64.rpm	d8ec9f17ac849d335e2f7a65c0ebb38c5db15dfc6a73ae37dd7943d65cba33ad	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.136.1.el8_10.aarch64.rpm	d8ec9f17ac849d335e2f7a65c0ebb38c5db15dfc6a73ae37dd7943d65cba33ad	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.136.1.el8_10.aarch64.rpm	bc8941558592db14ec3cccbe1d7e2e6bd1bf502188803187f6569d7faa60343e	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.136.1.el8_10.aarch64.rpm	bc8941558592db14ec3cccbe1d7e2e6bd1bf502188803187f6569d7faa60343e	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.136.1.el8_10.aarch64.rpm	b8a1e00f7f6aef046baeddb87342583936819cec2ed337c0af974c12aaf45f0c	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.136.1.el8_10.aarch64.rpm	b8a1e00f7f6aef046baeddb87342583936819cec2ed337c0af974c12aaf45f0c	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.136.1.el8_10.aarch64.rpm	5e05c6b0e027d1954242a31da0a2745636ede098b0a29ad1d2ad26d881d73975	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.136.1.el8_10.aarch64.rpm	5e05c6b0e027d1954242a31da0a2745636ede098b0a29ad1d2ad26d881d73975	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.136.1.el8_10.aarch64.rpm	f443744fec465f426c87c116cb10e5bb1c521a3966b8b020d5f38076dd66de13	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.136.1.el8_10.aarch64.rpm	f443744fec465f426c87c116cb10e5bb1c521a3966b8b020d5f38076dd66de13	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.aarch64.rpm	995881fa74d9f488acb45d4f3e7783b0bdce07551a51f5b76261e389320bda8b	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.136.1.el8_10.aarch64.rpm	473c224e2b5ca882e1cc0cfa1d69e52f6c7bfef018282c6fbc96c1d882358b40	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.136.1.el8_10.aarch64.rpm	473c224e2b5ca882e1cc0cfa1d69e52f6c7bfef018282c6fbc96c1d882358b40	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.136.1.el8_10.aarch64.rpm	effe391e44eec22713cebdc027e8778aeec7449e298263a4325c64710707c531	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.136.1.el8_10.aarch64.rpm	effe391e44eec22713cebdc027e8778aeec7449e298263a4325c64710707c531	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.136.1.el8_10.src.rpm	5edf91c90a2dd60b96b0fdd06dff17098ed7a452d06df1f4a4f79a4a6ba40725	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.136.1.el8_10.src.rpm	5edf91c90a2dd60b96b0fdd06dff17098ed7a452d06df1f4a4f79a4a6ba40725	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.136.1.el8_10.src.rpm	5edf91c90a2dd60b96b0fdd06dff17098ed7a452d06df1f4a4f79a4a6ba40725	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.136.1.el8_10.x86_64.rpm	09fe5e63fce65cdaefb4f34240f4fb6c88401ebb6bef3e2527a8ebde1cf6961c	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.136.1.el8_10.x86_64.rpm	09fe5e63fce65cdaefb4f34240f4fb6c88401ebb6bef3e2527a8ebde1cf6961c	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.136.1.el8_10.x86_64.rpm	f9915d8e90fed0063d42daef2854816157dc5a9fda9399736ac385b8decabfde	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.136.1.el8_10.x86_64.rpm	f9915d8e90fed0063d42daef2854816157dc5a9fda9399736ac385b8decabfde	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch.rpm	d07945c91aef5d3aec3a8d5a2dd5684c5246ff5a634fbfc87547526d589f2412	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.136.1.el8_10.noarch.rpm	d07945c91aef5d3aec3a8d5a2dd5684c5246ff5a634fbfc87547526d589f2412	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.136.1.el8_10.x86_64.rpm	f4db5cbf9839f1c1fa5c70f46b31bc4b62b60d269e0f2447a01f1ab867ac2225	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.136.1.el8_10.x86_64.rpm	f4db5cbf9839f1c1fa5c70f46b31bc4b62b60d269e0f2447a01f1ab867ac2225	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64.rpm	1aa58e95c2be635d848e933e0e7ce779b87b5f67e1376991515f5361af6cd043	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.136.1.el8_10.x86_64.rpm	1aa58e95c2be635d848e933e0e7ce779b87b5f67e1376991515f5361af6cd043	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.136.1.el8_10.x86_64.rpm	3f4bee6488b3aed21e3a610a318bef6c322d42cbef31cff7cc67c84e3e4863ec	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.136.1.el8_10.x86_64.rpm	3f4bee6488b3aed21e3a610a318bef6c322d42cbef31cff7cc67c84e3e4863ec	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64.rpm	40503b06320dabedfd22c05d25fd1d775441ccab3e0c0b38dc38013843234822	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.136.1.el8_10.x86_64.rpm	40503b06320dabedfd22c05d25fd1d775441ccab3e0c0b38dc38013843234822	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64.rpm	fd0a408972577f76d9827aaf9bff592306cda30d5064c78fcc9ad1c22032e6c2	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.136.1.el8_10.x86_64.rpm	fd0a408972577f76d9827aaf9bff592306cda30d5064c78fcc9ad1c22032e6c2	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64.rpm	b2b4fdb4fb8c86d9e22ad434ad6e292c938c3a356d8e06f498079e356d02a48b	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.136.1.el8_10.x86_64.rpm	b2b4fdb4fb8c86d9e22ad434ad6e292c938c3a356d8e06f498079e356d02a48b	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64.rpm	fece631d7a4d3cb5bff12ded95bbe30c6c84884842f1b6d7abc5234c733bef58	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.136.1.el8_10.x86_64.rpm	fece631d7a4d3cb5bff12ded95bbe30c6c84884842f1b6d7abc5234c733bef58	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.136.1.el8_10.x86_64.rpm	b910f1ca0939652b7dfbcbd9c46366d4789fa70e4038eef3a9336992c628d569	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.136.1.el8_10.x86_64.rpm	b910f1ca0939652b7dfbcbd9c46366d4789fa70e4038eef3a9336992c628d569	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.136.1.el8_10.noarch.rpm	815ae2690c6c90f2d04bb0bfebd69da0b9f578afaad3e01f17d84ae4597979b9	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.136.1.el8_10.noarch.rpm	815ae2690c6c90f2d04bb0bfebd69da0b9f578afaad3e01f17d84ae4597979b9	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.136.1.el8_10.x86_64.rpm	86a59ce1bdab56147f8ee5dfb2cb723e7ad2e54182aa69d7886032b7d97c7809	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.136.1.el8_10.x86_64.rpm	86a59ce1bdab56147f8ee5dfb2cb723e7ad2e54182aa69d7886032b7d97c7809	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.136.1.el8_10.x86_64.rpm	078863145e229e94ec8161c39273402ac329a35668cb1276aadaaafb74559906	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.136.1.el8_10.x86_64.rpm	078863145e229e94ec8161c39273402ac329a35668cb1276aadaaafb74559906	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64.rpm	96dae42983b6835a5a79d43def3c27ba9dc6dd32827e0f9455d983afb74cdbdc	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.136.1.el8_10.x86_64.rpm	96dae42983b6835a5a79d43def3c27ba9dc6dd32827e0f9455d983afb74cdbdc	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.136.1.el8_10.x86_64.rpm	db69e442dd0269b61685807bf68d140ff84d840b8ad997b9c6b054a350e5b105	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.136.1.el8_10.x86_64.rpm	db69e442dd0269b61685807bf68d140ff84d840b8ad997b9c6b054a350e5b105	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64.rpm	bc90532d5197a485afbe7d254705828e2c808f51e42f5031597ca521b47c5aa2	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.136.1.el8_10.x86_64.rpm	bc90532d5197a485afbe7d254705828e2c808f51e42f5031597ca521b47c5aa2	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.136.1.el8_10.x86_64.rpm	47e9e6ee8e1158e82d9ba0c72966a7dfc02ed8228fa98be08d83cc39a4c98fa4	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.136.1.el8_10.x86_64.rpm	fc4e439726acb9b59a9cbfc2c17baf101645c3de38724908d28c69aeb0e67227	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.136.1.el8_10.x86_64.rpm	fc4e439726acb9b59a9cbfc2c17baf101645c3de38724908d28c69aeb0e67227	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.136.1.el8_10.x86_64.rpm	897b0e146873178fd74b8ebe09ca6eae9ca88719a513a0c64fc95a5e2dc2308c	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.136.1.el8_10.x86_64.rpm	897b0e146873178fd74b8ebe09ca6eae9ca88719a513a0c64fc95a5e2dc2308c	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team