ELSA-2026-39083

ELSA-2026-39083 - kernel update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-14

Description


[4.18.0-553.143.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.143.1]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499}

[4.18.0-553.142.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113}
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Stop passing 'direct' to mmu_alloc_root() (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341]
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066}
- iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411}


Related CVEs


CVE-2025-71066
CVE-2025-71089
CVE-2026-31411
CVE-2026-43499
CVE-2026-46113
CVE-2026-53166
CVE-2026-53266
CVE-2026-53359

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.143.1.el8_10.src.rpm8db662d2b70ce63af662a1bb3f9a34beb5ac909da73d4e8a044e5bc234d2bf09-ol8_aarch64_baseos_latest
kernel-4.18.0-553.143.1.el8_10.src.rpm8db662d2b70ce63af662a1bb3f9a34beb5ac909da73d4e8a044e5bc234d2bf09-ol8_aarch64_codeready_builder
kernel-4.18.0-553.143.1.el8_10.src.rpm8db662d2b70ce63af662a1bb3f9a34beb5ac909da73d4e8a044e5bc234d2bf09-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.143.1.el8_10.aarch64.rpm4a219a0d4a1834324e96123e31454cd4f8d7cc1e7188d6e3282c82f228dbfa72-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.143.1.el8_10.aarch64.rpm4a219a0d4a1834324e96123e31454cd4f8d7cc1e7188d6e3282c82f228dbfa72-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.143.1.el8_10.aarch64.rpmb00717e9a711e3ac70316b38bfb9f277908c9f846973825a416d6de50f3861c6-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.143.1.el8_10.aarch64.rpmb00717e9a711e3ac70316b38bfb9f277908c9f846973825a416d6de50f3861c6-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.143.1.el8_10.aarch64.rpmbc6591f5943a5b42da8914e051d9d8c2452cf4f6bc6874090dd147ca28ab6a7b-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.143.1.el8_10.aarch64.rpmbc6591f5943a5b42da8914e051d9d8c2452cf4f6bc6874090dd147ca28ab6a7b-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.143.1.el8_10.aarch64.rpme768852905eddc8de15e99de80164bdedcece0243b579ed08fb1ffe20c703914-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.143.1.el8_10.aarch64.rpme768852905eddc8de15e99de80164bdedcece0243b579ed08fb1ffe20c703914-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.143.1.el8_10.aarch64.rpmb2791b3ab9352e60a80389bb7293d8fba6115793700bf1f2ba851d8a0786ab26-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.143.1.el8_10.aarch64.rpmb2791b3ab9352e60a80389bb7293d8fba6115793700bf1f2ba851d8a0786ab26-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.143.1.el8_10.aarch64.rpmeb3f7e1fc8733e879ed02d101e8fdf53ccae18205b51f8e6a94b1769266e1e2f-ol8_aarch64_codeready_builder
perf-4.18.0-553.143.1.el8_10.aarch64.rpm464601ff83a2f21cf225ace2bc676955b4c619751d0b42500f95d0a44d0237e7-ol8_aarch64_baseos_latest
perf-4.18.0-553.143.1.el8_10.aarch64.rpm464601ff83a2f21cf225ace2bc676955b4c619751d0b42500f95d0a44d0237e7-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.143.1.el8_10.aarch64.rpmf752c2fc6d73dae93aa7b86873c407b8c13c813bd386e9451edffa4dade76a12-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.143.1.el8_10.aarch64.rpmf752c2fc6d73dae93aa7b86873c407b8c13c813bd386e9451edffa4dade76a12-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.143.1.el8_10.src.rpm8db662d2b70ce63af662a1bb3f9a34beb5ac909da73d4e8a044e5bc234d2bf09-ol8_x86_64_baseos_latest
kernel-4.18.0-553.143.1.el8_10.src.rpm8db662d2b70ce63af662a1bb3f9a34beb5ac909da73d4e8a044e5bc234d2bf09-ol8_x86_64_codeready_builder
kernel-4.18.0-553.143.1.el8_10.src.rpm8db662d2b70ce63af662a1bb3f9a34beb5ac909da73d4e8a044e5bc234d2bf09-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.143.1.el8_10.x86_64.rpm9ebde64550910a60c6179d6c6142e383986ac420ef44a8ad8ad83bc188910508-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.143.1.el8_10.x86_64.rpm9ebde64550910a60c6179d6c6142e383986ac420ef44a8ad8ad83bc188910508-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.143.1.el8_10.x86_64.rpmc073c6ba0c9a0b213ea7bf7bb484f0779b25d5dbb0d7ba580bdc0923f0e84a6f-ol8_x86_64_baseos_latest
kernel-4.18.0-553.143.1.el8_10.x86_64.rpmc073c6ba0c9a0b213ea7bf7bb484f0779b25d5dbb0d7ba580bdc0923f0e84a6f-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.143.1.el8_10.noarch.rpm1b4708deea3106ef1c915be79d775de846ca9af79b4aba35b4377fc5ae4eca47-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.143.1.el8_10.noarch.rpm1b4708deea3106ef1c915be79d775de846ca9af79b4aba35b4377fc5ae4eca47-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.143.1.el8_10.x86_64.rpm7c7873fa95e5bd5c9dae815d17239fd484a06429c09f62f27c30f6cfc807f2c7-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.143.1.el8_10.x86_64.rpm7c7873fa95e5bd5c9dae815d17239fd484a06429c09f62f27c30f6cfc807f2c7-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.143.1.el8_10.x86_64.rpm7a23fcb90c50253587cb0a5ad27720f1807aa817204fc1aefd89235214f06667-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.143.1.el8_10.x86_64.rpm7a23fcb90c50253587cb0a5ad27720f1807aa817204fc1aefd89235214f06667-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.143.1.el8_10.x86_64.rpmf64cd49705c9236ca3f400c44339e4e1499dd7d81f59f52796b8413f4502ddd0-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.143.1.el8_10.x86_64.rpmf64cd49705c9236ca3f400c44339e4e1499dd7d81f59f52796b8413f4502ddd0-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.143.1.el8_10.x86_64.rpme5ace75c0dc37bd86cc8f28e0af8e957694585228e894ba930a278bad551a5c7-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.143.1.el8_10.x86_64.rpme5ace75c0dc37bd86cc8f28e0af8e957694585228e894ba930a278bad551a5c7-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.143.1.el8_10.x86_64.rpm3e929fd015675f5280db730bfad5ccb4e29329ed5e43a4b99b4c948e4d9e7051-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.143.1.el8_10.x86_64.rpm3e929fd015675f5280db730bfad5ccb4e29329ed5e43a4b99b4c948e4d9e7051-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.143.1.el8_10.x86_64.rpmd8b981a264ad69498ed2aafa1460c46793db25ad1bad5b37c6f0b1f4e37cfc80-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.143.1.el8_10.x86_64.rpmd8b981a264ad69498ed2aafa1460c46793db25ad1bad5b37c6f0b1f4e37cfc80-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.143.1.el8_10.x86_64.rpme3424c4aa860ea9b026c04044597988128d4a2df904efde66b8834ec573ce6fa-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.143.1.el8_10.x86_64.rpme3424c4aa860ea9b026c04044597988128d4a2df904efde66b8834ec573ce6fa-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.143.1.el8_10.x86_64.rpm36d303fb624129da55dc95e098132f1c9f6ac847dfb0820354ea5aab2ac94e83-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.143.1.el8_10.x86_64.rpm36d303fb624129da55dc95e098132f1c9f6ac847dfb0820354ea5aab2ac94e83-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.143.1.el8_10.noarch.rpm5f9b09d59ab7601346d9bd1ca8151b9cbd78f9bc34f4a94601b9bc85d0c49d5c-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.143.1.el8_10.noarch.rpm5f9b09d59ab7601346d9bd1ca8151b9cbd78f9bc34f4a94601b9bc85d0c49d5c-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.143.1.el8_10.x86_64.rpm9bb0efcfcb23ce3541e50a46eff32e60be7680d72c6b24b704b2202cd3bc5b8d-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.143.1.el8_10.x86_64.rpm9bb0efcfcb23ce3541e50a46eff32e60be7680d72c6b24b704b2202cd3bc5b8d-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.143.1.el8_10.x86_64.rpm81bc29cd614c996de65a9d3e6af8ddd243845562266f46f0127c42b48bbe58ba-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.143.1.el8_10.x86_64.rpm81bc29cd614c996de65a9d3e6af8ddd243845562266f46f0127c42b48bbe58ba-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.143.1.el8_10.x86_64.rpmb089f765059bde3b36ac804fca432ce2007dfcdfdec5682582ba0ca80084e692-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.143.1.el8_10.x86_64.rpmb089f765059bde3b36ac804fca432ce2007dfcdfdec5682582ba0ca80084e692-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.143.1.el8_10.x86_64.rpm1adab3ff1d617c3d7c2451b7f77e496ebc596f5a009d184c8ee41a75305d3dd9-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.143.1.el8_10.x86_64.rpm1adab3ff1d617c3d7c2451b7f77e496ebc596f5a009d184c8ee41a75305d3dd9-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.143.1.el8_10.x86_64.rpm1698afe18ada5c7c0b758c50dcd9ee55896bd3c7d32baefb88ecb18fb8c60aa6-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.143.1.el8_10.x86_64.rpm1698afe18ada5c7c0b758c50dcd9ee55896bd3c7d32baefb88ecb18fb8c60aa6-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.143.1.el8_10.x86_64.rpm5b5cbae9b8e491ec381c7731e44dbfaab8a25a17db9c7d3bee493e302a0f293c-ol8_x86_64_codeready_builder
perf-4.18.0-553.143.1.el8_10.x86_64.rpm405b31e82ec41dd91173b03da8aed85af36ab7f6624182c3612724f8be2ad0be-ol8_x86_64_baseos_latest
perf-4.18.0-553.143.1.el8_10.x86_64.rpm405b31e82ec41dd91173b03da8aed85af36ab7f6624182c3612724f8be2ad0be-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.143.1.el8_10.x86_64.rpm50ace3d62076b16d5d349b1ade00e30a56b08e7198bcf962023a25d30baa342b-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.143.1.el8_10.x86_64.rpm50ace3d62076b16d5d349b1ade00e30a56b08e7198bcf962023a25d30baa342b-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete