Stay Connected:

ELSA-2026-45115

ELSA-2026-45115 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-07-29

Description


[4.18.0-553.147.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.147.1]
- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213341] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213341]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Aidan Wallace) [RHEL-213341]
- KVM: nVMX: Use kvm_vcpu_map() to get/pin vmcs12's APIC-access page (Aidan Wallace) [RHEL-213341]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211228] {CVE-2025-40026}
- KVM: x86: wean in-kernel PIO from vcpu->arch.pio* (Aidan Wallace) [RHEL-211228]
- KVM: x86: move all vcpu->arch.pio* setup in emulator_pio_in_out() (Aidan Wallace) [RHEL-211228]
- KVM: x86: drop PIO from unregistered devices (Aidan Wallace) [RHEL-211228]
- KVM: x86: inline kernel_pio into its sole caller (Aidan Wallace) [RHEL-211228]
- serial: 8250_mid: Disable DMA for selected platforms (Mark Salter) [RHEL-190191]
- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192178] {CVE-2026-52993}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178324]
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188543] {CVE-2026-53059}
- xfs: Use xarray to track SB UUIDs instead of plain array. (Lukas Herbolt) [RHEL-127174]
- selftests: kvm: try getting XFD and XSAVE state out of sync (Paolo Bonzini) [RHEL-166738]
- selftests: kvm: replace numbering of sync points with actions (Paolo Bonzini) [RHEL-166738]
- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Paolo Bonzini) [RHEL-166738]
- mount: Retest MNT_LOCKED in do_umount (Ian Kent) [RHEL-152655]
- mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts (Ian Kent) [RHEL-152655]
- mount: Prevent MNT_DETACH from disconnecting locked mounts (Ian Kent) [RHEL-152655]


Related CVEs


CVE-2025-40026
CVE-2026-52993
CVE-2026-53059

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.147.1.el8_10.src.rpma9ad83bc00ca6e7c6450186b87354a0193795fc9d0d73374af2bd9f263a98284-ol8_aarch64_baseos_latest
kernel-4.18.0-553.147.1.el8_10.src.rpma9ad83bc00ca6e7c6450186b87354a0193795fc9d0d73374af2bd9f263a98284-ol8_aarch64_codeready_builder
kernel-4.18.0-553.147.1.el8_10.src.rpma9ad83bc00ca6e7c6450186b87354a0193795fc9d0d73374af2bd9f263a98284-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.147.1.el8_10.aarch64.rpma3cc94ade04c77461aca3e19b055dd5be41488de6bd6dcaeae9883a86982545e-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.147.1.el8_10.aarch64.rpma3cc94ade04c77461aca3e19b055dd5be41488de6bd6dcaeae9883a86982545e-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.147.1.el8_10.aarch64.rpme5039e889554b04cd3ae607903a5800a81dea47497e1f91d83f16a98f7ced492-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.147.1.el8_10.aarch64.rpme5039e889554b04cd3ae607903a5800a81dea47497e1f91d83f16a98f7ced492-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.147.1.el8_10.aarch64.rpm34c92ab97e68e5b0fbc15949873079d81046c8796961299a4e7ba845fc3481c0-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.147.1.el8_10.aarch64.rpm34c92ab97e68e5b0fbc15949873079d81046c8796961299a4e7ba845fc3481c0-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.147.1.el8_10.aarch64.rpm4e8f43486162f4cbb5b9567351dfab3a740ab39d66d64790dab3fcf3366dce52-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.147.1.el8_10.aarch64.rpm4e8f43486162f4cbb5b9567351dfab3a740ab39d66d64790dab3fcf3366dce52-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.147.1.el8_10.aarch64.rpm959c03736db78d6ea9f8d5858c0417bd59c842ffb5d60093eb2b62873be497ea-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.147.1.el8_10.aarch64.rpm959c03736db78d6ea9f8d5858c0417bd59c842ffb5d60093eb2b62873be497ea-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.aarch64.rpm54c3bc7feaab3dc3251ae4c8c6e94cc60543230920fda16c09fdca66f2e3af3f-ol8_aarch64_codeready_builder
perf-4.18.0-553.147.1.el8_10.aarch64.rpm7df93ebce3a9e41288a1f45690964bd614b1dc0ff02214925465a197637c68ba-ol8_aarch64_baseos_latest
perf-4.18.0-553.147.1.el8_10.aarch64.rpm7df93ebce3a9e41288a1f45690964bd614b1dc0ff02214925465a197637c68ba-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.147.1.el8_10.aarch64.rpm27c62a357b85a8b9d65c80848c4d58fd4e1c89c3b062748a7311316c7875401f-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.147.1.el8_10.aarch64.rpm27c62a357b85a8b9d65c80848c4d58fd4e1c89c3b062748a7311316c7875401f-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.147.1.el8_10.src.rpma9ad83bc00ca6e7c6450186b87354a0193795fc9d0d73374af2bd9f263a98284-ol8_x86_64_baseos_latest
kernel-4.18.0-553.147.1.el8_10.src.rpma9ad83bc00ca6e7c6450186b87354a0193795fc9d0d73374af2bd9f263a98284-ol8_x86_64_codeready_builder
kernel-4.18.0-553.147.1.el8_10.src.rpma9ad83bc00ca6e7c6450186b87354a0193795fc9d0d73374af2bd9f263a98284-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.147.1.el8_10.x86_64.rpme571470e98a6fa7befd5533cb9722610e3ab917baa89d6331894fa3af54031dd-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.147.1.el8_10.x86_64.rpme571470e98a6fa7befd5533cb9722610e3ab917baa89d6331894fa3af54031dd-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.147.1.el8_10.x86_64.rpmd43a5009261aa67346154d05d30fbb98533bb029b43fde2b9b5bb52d9c0e4113-ol8_x86_64_baseos_latest
kernel-4.18.0-553.147.1.el8_10.x86_64.rpmd43a5009261aa67346154d05d30fbb98533bb029b43fde2b9b5bb52d9c0e4113-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch.rpme450e72b5ce1ee5a1fcd1d802b00348ffafb116c3761dfb7ac2fdfb4d2571f68-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.147.1.el8_10.noarch.rpme450e72b5ce1ee5a1fcd1d802b00348ffafb116c3761dfb7ac2fdfb4d2571f68-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.147.1.el8_10.x86_64.rpmf002185528688798112ed3b7258098d8bb9a991584246b75a39cd3ed20a7e3e7-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.147.1.el8_10.x86_64.rpmf002185528688798112ed3b7258098d8bb9a991584246b75a39cd3ed20a7e3e7-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64.rpm630888142ce8f48c6cdea239fa379ba2fe2887cd6e54d7238a849fb5e0e824de-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.147.1.el8_10.x86_64.rpm630888142ce8f48c6cdea239fa379ba2fe2887cd6e54d7238a849fb5e0e824de-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.147.1.el8_10.x86_64.rpmfaf22267fefd42201a9b1c49d9e7fa4773d33d1a5081a50f6368a2807c52db5e-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.147.1.el8_10.x86_64.rpmfaf22267fefd42201a9b1c49d9e7fa4773d33d1a5081a50f6368a2807c52db5e-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64.rpm314f2cd48f54abc670d7d4d3902f846c42a76548500b30ddc51ab02fd8c4925f-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.147.1.el8_10.x86_64.rpm314f2cd48f54abc670d7d4d3902f846c42a76548500b30ddc51ab02fd8c4925f-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64.rpm6cdde5188393e21a8ea92acd27493b0bf4cbdf801d4d42319050c3e294d4a231-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.147.1.el8_10.x86_64.rpm6cdde5188393e21a8ea92acd27493b0bf4cbdf801d4d42319050c3e294d4a231-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64.rpm8e18e865d39a31d2f8ff6be46292078dacfff0d0ca14fc67412593faa951f52f-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.147.1.el8_10.x86_64.rpm8e18e865d39a31d2f8ff6be46292078dacfff0d0ca14fc67412593faa951f52f-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64.rpm5afca357d0212945a3f0db922057cf63e07d4f12c89a8a95866ad7e235deecde-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.147.1.el8_10.x86_64.rpm5afca357d0212945a3f0db922057cf63e07d4f12c89a8a95866ad7e235deecde-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.147.1.el8_10.x86_64.rpm7c25a0fe9639fc80a46123c0c377c78ab617ff26c8f34d98e8f104f8c63fc203-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.147.1.el8_10.x86_64.rpm7c25a0fe9639fc80a46123c0c377c78ab617ff26c8f34d98e8f104f8c63fc203-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.147.1.el8_10.noarch.rpmf0acef26f209fde7f6082c937fab419211b43f9b84414f01cb861ab62d4d68f0-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.147.1.el8_10.noarch.rpmf0acef26f209fde7f6082c937fab419211b43f9b84414f01cb861ab62d4d68f0-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.147.1.el8_10.x86_64.rpmc3895a15e5c55dae7dc67ec418a0e3bac02c835071da4fe4bcac73276c3208af-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.147.1.el8_10.x86_64.rpmc3895a15e5c55dae7dc67ec418a0e3bac02c835071da4fe4bcac73276c3208af-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.147.1.el8_10.x86_64.rpm79d93a7685d03b0b3e28e4857e82b442bad9cc71fa31a7bfac07f6a7a7cb5f0e-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.147.1.el8_10.x86_64.rpm79d93a7685d03b0b3e28e4857e82b442bad9cc71fa31a7bfac07f6a7a7cb5f0e-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64.rpm8c9b11b7b136e064abd66496ecacc7a5956ca0169734dba10f209623c48ec8fe-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.147.1.el8_10.x86_64.rpm8c9b11b7b136e064abd66496ecacc7a5956ca0169734dba10f209623c48ec8fe-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.147.1.el8_10.x86_64.rpm222e02aaf89e9aa3f509ab5e4e77e4331abf841849e97268921fcf8da16444d0-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.147.1.el8_10.x86_64.rpm222e02aaf89e9aa3f509ab5e4e77e4331abf841849e97268921fcf8da16444d0-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64.rpme1c2d6a78b98b81e534803b7f0c0ae57be84f135b658738ab8b738a491be5e88-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.147.1.el8_10.x86_64.rpme1c2d6a78b98b81e534803b7f0c0ae57be84f135b658738ab8b738a491be5e88-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.147.1.el8_10.x86_64.rpmed02484332e75f769f0d7defa2af88fdc9ebd695cb9788937dad950a100d7ba1-ol8_x86_64_codeready_builder
perf-4.18.0-553.147.1.el8_10.x86_64.rpm1720a013e7195dac9a4bb8329e80eb3f34c9216122bc1fb05348f3695e8ca0f6-ol8_x86_64_baseos_latest
perf-4.18.0-553.147.1.el8_10.x86_64.rpm1720a013e7195dac9a4bb8329e80eb3f34c9216122bc1fb05348f3695e8ca0f6-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.147.1.el8_10.x86_64.rpm2efb3bad16be4821bf4180850800ea43e3e1e92be9aa8c92c3b0b870b4729752-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.147.1.el8_10.x86_64.rpm2efb3bad16be4821bf4180850800ea43e3e1e92be9aa8c92c3b0b870b4729752-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights