ELSA-2026-36349

ELSA-2026-36349 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-13

Description

[4.18.0-553.141.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.141.1]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112}

[4.18.0-553.140.1]
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263}
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227}
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450}
- vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759]

[4.18.0-553.139.1]
- NFS: improve 'Server wrote zero bytes' error (Olga Kornievskaia) [RHEL-147665]

[4.18.0-553.138.1]
- redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788]
- redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788]
- redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788]
- x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788]
- redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984}
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216}

Related CVEs

CVE-2025-10263

CVE-2026-43198

CVE-2026-43450

CVE-2026-46209

CVE-2026-46227

CVE-2026-46259

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.141.1.el8_10.src.rpm	4c2113e9c8ef67eefe1e1f33a9e67b2fbc10769a3f16e8afb5c2357c6e6cc849	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.141.1.el8_10.src.rpm	4c2113e9c8ef67eefe1e1f33a9e67b2fbc10769a3f16e8afb5c2357c6e6cc849	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.141.1.el8_10.src.rpm	4c2113e9c8ef67eefe1e1f33a9e67b2fbc10769a3f16e8afb5c2357c6e6cc849	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.141.1.el8_10.aarch64.rpm	9090af69f2f70816b0b869ca4af76458c51bbd015a91aebdc36e69c7e21a7702	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.141.1.el8_10.aarch64.rpm	9090af69f2f70816b0b869ca4af76458c51bbd015a91aebdc36e69c7e21a7702	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.141.1.el8_10.aarch64.rpm	ead312e73fbbce373528c75f98b10db9d8cf7255a44f222e4f325bc61b987978	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.141.1.el8_10.aarch64.rpm	ead312e73fbbce373528c75f98b10db9d8cf7255a44f222e4f325bc61b987978	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.141.1.el8_10.aarch64.rpm	cd385c0a745a147c8480e7cda086a2d4e4483907376f97a4d2aba34d7943464d	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.141.1.el8_10.aarch64.rpm	cd385c0a745a147c8480e7cda086a2d4e4483907376f97a4d2aba34d7943464d	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.141.1.el8_10.aarch64.rpm	e6a89ccde1c447e19cff38e06046b816c639c27b93c54807b2ec3f9197c47b86	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.141.1.el8_10.aarch64.rpm	e6a89ccde1c447e19cff38e06046b816c639c27b93c54807b2ec3f9197c47b86	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.141.1.el8_10.aarch64.rpm	0d294c5ec44fe107fe642265a0e0fda15ac7d2fdb75c4920464ab0b2ce96becc	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.141.1.el8_10.aarch64.rpm	0d294c5ec44fe107fe642265a0e0fda15ac7d2fdb75c4920464ab0b2ce96becc	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.141.1.el8_10.aarch64.rpm	48257fe58552b629ef6b8f8f531510a559939e18c3a85f22b4f4f6598d80eb7e	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.141.1.el8_10.aarch64.rpm	419747742814e2f311f08a10a81b57a128214a178b072ba9fcf5444e47a1dea6	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.141.1.el8_10.aarch64.rpm	419747742814e2f311f08a10a81b57a128214a178b072ba9fcf5444e47a1dea6	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.141.1.el8_10.aarch64.rpm	8391d750086622bb6d13441ec9e4ef43e7890c338a2a676908284d9d633f45fd	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.141.1.el8_10.aarch64.rpm	8391d750086622bb6d13441ec9e4ef43e7890c338a2a676908284d9d633f45fd	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.141.1.el8_10.src.rpm	4c2113e9c8ef67eefe1e1f33a9e67b2fbc10769a3f16e8afb5c2357c6e6cc849	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.141.1.el8_10.src.rpm	4c2113e9c8ef67eefe1e1f33a9e67b2fbc10769a3f16e8afb5c2357c6e6cc849	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.141.1.el8_10.src.rpm	4c2113e9c8ef67eefe1e1f33a9e67b2fbc10769a3f16e8afb5c2357c6e6cc849	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.141.1.el8_10.x86_64.rpm	6be32d3ec1437f6918840a7bb38445cbd1852962620f54055c31730e7f75d065	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.141.1.el8_10.x86_64.rpm	6be32d3ec1437f6918840a7bb38445cbd1852962620f54055c31730e7f75d065	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.141.1.el8_10.x86_64.rpm	fca91ca3bc85a7bcdf57c820ad6fd5a1d73c7e631eebacd713fa3c8a5fe82890	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.141.1.el8_10.x86_64.rpm	fca91ca3bc85a7bcdf57c820ad6fd5a1d73c7e631eebacd713fa3c8a5fe82890	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.141.1.el8_10.noarch.rpm	60a462ac41f12546833fb5a4cd1d114cbdad372c17c1f7b421e56884eb157391	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.141.1.el8_10.noarch.rpm	60a462ac41f12546833fb5a4cd1d114cbdad372c17c1f7b421e56884eb157391	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.141.1.el8_10.x86_64.rpm	645011c4727e4b8d07bb378b29e11d471cf6cbd40b06c25bc1ec6202c1eb91b9	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.141.1.el8_10.x86_64.rpm	645011c4727e4b8d07bb378b29e11d471cf6cbd40b06c25bc1ec6202c1eb91b9	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.141.1.el8_10.x86_64.rpm	bc3551939ec5dba29eb23fd2e9a5e35929bc89c25c449067475dc97eb497e611	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.141.1.el8_10.x86_64.rpm	bc3551939ec5dba29eb23fd2e9a5e35929bc89c25c449067475dc97eb497e611	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.141.1.el8_10.x86_64.rpm	29c6805a70f44eadfb756ad2b25336d2bd8f9f6c2ede0ce048b219f86f31870e	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.141.1.el8_10.x86_64.rpm	29c6805a70f44eadfb756ad2b25336d2bd8f9f6c2ede0ce048b219f86f31870e	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.141.1.el8_10.x86_64.rpm	4e212c71271fd4c35ece06f5858c70bbbe48e15120e09c40d1fb91e00cdd713b	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.141.1.el8_10.x86_64.rpm	4e212c71271fd4c35ece06f5858c70bbbe48e15120e09c40d1fb91e00cdd713b	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.141.1.el8_10.x86_64.rpm	bb24c7a21d9f10df83415589cd2b2279b176b24895708d61b721c6340a053847	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.141.1.el8_10.x86_64.rpm	bb24c7a21d9f10df83415589cd2b2279b176b24895708d61b721c6340a053847	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.141.1.el8_10.x86_64.rpm	de8a27b940ba13d78fcd21fc09c4880e523324107fdf28aa9797e0822ede1f6f	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.141.1.el8_10.x86_64.rpm	de8a27b940ba13d78fcd21fc09c4880e523324107fdf28aa9797e0822ede1f6f	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.141.1.el8_10.x86_64.rpm	e4667196245f4be23ee8b085fca88946607c4e816c2052bbf40336599eda8e5b	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.141.1.el8_10.x86_64.rpm	e4667196245f4be23ee8b085fca88946607c4e816c2052bbf40336599eda8e5b	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.141.1.el8_10.x86_64.rpm	ebe002e94ad5141e67983061e976c00bba0372b47c2239b4706fdf09f2917bb2	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.141.1.el8_10.x86_64.rpm	ebe002e94ad5141e67983061e976c00bba0372b47c2239b4706fdf09f2917bb2	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.141.1.el8_10.noarch.rpm	5d461ec1919262977bcd1069713bcab14299affd637b2bf1f7b23857a4e7eb24	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.141.1.el8_10.noarch.rpm	5d461ec1919262977bcd1069713bcab14299affd637b2bf1f7b23857a4e7eb24	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.141.1.el8_10.x86_64.rpm	03428732513e5be1bf98977bfd29fc4a95805a971bc71b8e32784c85eb18b2a0	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.141.1.el8_10.x86_64.rpm	03428732513e5be1bf98977bfd29fc4a95805a971bc71b8e32784c85eb18b2a0	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.141.1.el8_10.x86_64.rpm	fa0d4874860d365b0ce77c457447bbd201fa77ed8d7ae2314f17bb30e3c71db4	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.141.1.el8_10.x86_64.rpm	fa0d4874860d365b0ce77c457447bbd201fa77ed8d7ae2314f17bb30e3c71db4	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.141.1.el8_10.x86_64.rpm	fc87f6009ad04aaf6db0c2621a61254d549e816fedc785dcdb8af4e1fdd3899b	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.141.1.el8_10.x86_64.rpm	fc87f6009ad04aaf6db0c2621a61254d549e816fedc785dcdb8af4e1fdd3899b	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.141.1.el8_10.x86_64.rpm	1abbc8bb2004423027dc567e24f5645c8675117159199b07d13e514eb7643cb9	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.141.1.el8_10.x86_64.rpm	1abbc8bb2004423027dc567e24f5645c8675117159199b07d13e514eb7643cb9	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.141.1.el8_10.x86_64.rpm	b162ab0fb45af3d3442334c4b79dad706b5ba5ce0b27b1bab1f8fe5dbd95c38f	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.141.1.el8_10.x86_64.rpm	b162ab0fb45af3d3442334c4b79dad706b5ba5ce0b27b1bab1f8fe5dbd95c38f	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.141.1.el8_10.x86_64.rpm	fabc181d91ee9be54205f77d7d4a964c0dbade0315aab963ff8fb1c6c5376890	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.141.1.el8_10.x86_64.rpm	2d818e0fd6924c9857bd40b03135242880aabd1fba95c6ef82ffd216c81718c7	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.141.1.el8_10.x86_64.rpm	2d818e0fd6924c9857bd40b03135242880aabd1fba95c6ef82ffd216c81718c7	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.141.1.el8_10.x86_64.rpm	8afc57ea256e3c1aabc8c1b8832b4fb9f75acdb4ecb6550982edd8e29188b4cd	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.141.1.el8_10.x86_64.rpm	8afc57ea256e3c1aabc8c1b8832b4fb9f75acdb4ecb6550982edd8e29188b4cd	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team