Stay Connected:

ELSA-2026-57253

ELSA-2026-57253 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-21

Description


[4.18.0-553.157.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.157.1]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236195] {CVE-2026-68388}
- mm, page_alloc: skip ->waternark_boost for atomic order-0 allocations (Jay Shin) [RHEL-219767]
- mm, page_alloc: reset the zone->watermark_boost early (Jay Shin) [RHEL-219767]
- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213227] {CVE-2026-63888}
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Abhishek Rawal) [RHEL-224189] {CVE-2024-56602}
- cgroup/psi: Set of->priv to NULL upon file release (Waiman Long) [RHEL-232546]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232546]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232546] {CVE-2026-52991}
- sched/psi: Remove unused parameter nbytes of psi_trigger_create() (Waiman Long) [RHEL-232546]
- psi: fix 'no previous prototype' warnings when CONFIG_CGROUPS=n (Waiman Long) [RHEL-232546]
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234516] {CVE-2026-64379}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231209] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230094] {CVE-2026-64048}
- scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CKI Backport Bot) [RHEL-213200] {CVE-2026-63887}
- ip6_gre: Use cached t->net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180148] {CVE-2026-46120}


Related CVEs


CVE-2024-56602
CVE-2026-46120
CVE-2026-52991
CVE-2026-53189
CVE-2026-63887
CVE-2026-63888
CVE-2026-64048
CVE-2026-64379
CVE-2026-68388

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.157.1.el8_10.src.rpmf87b8731d15a7baa44e5e61539f1f1808d794b78617d64e5e9a6964c94c4b76b-ol8_aarch64_baseos_latest
kernel-4.18.0-553.157.1.el8_10.src.rpmf87b8731d15a7baa44e5e61539f1f1808d794b78617d64e5e9a6964c94c4b76b-ol8_aarch64_codeready_builder
kernel-4.18.0-553.157.1.el8_10.src.rpmf87b8731d15a7baa44e5e61539f1f1808d794b78617d64e5e9a6964c94c4b76b-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.157.1.el8_10.aarch64.rpm987fdd0b6aa1dc12efda8ce365885e2747d2375997a96995e8389787e30a9c66-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.157.1.el8_10.aarch64.rpm987fdd0b6aa1dc12efda8ce365885e2747d2375997a96995e8389787e30a9c66-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.157.1.el8_10.aarch64.rpm082e7b151fa6977cae6ec0f96926f198d8dfb2af7f451202c280b811def103c9-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.157.1.el8_10.aarch64.rpm082e7b151fa6977cae6ec0f96926f198d8dfb2af7f451202c280b811def103c9-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.157.1.el8_10.aarch64.rpmec614739f015314df10a0cf1840d6a6ff48f7b46e5ac8e55e1d5191415117dc3-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.157.1.el8_10.aarch64.rpmec614739f015314df10a0cf1840d6a6ff48f7b46e5ac8e55e1d5191415117dc3-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.157.1.el8_10.aarch64.rpm4894fb21ba1d1a157a636843d35598034460db520f16f6cd651556ee12d2575a-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.157.1.el8_10.aarch64.rpm4894fb21ba1d1a157a636843d35598034460db520f16f6cd651556ee12d2575a-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.157.1.el8_10.aarch64.rpm80e36fa8e3445572a0bbedc68b82118d7ea9e988f0d6ed03032187c7f0183648-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.157.1.el8_10.aarch64.rpm80e36fa8e3445572a0bbedc68b82118d7ea9e988f0d6ed03032187c7f0183648-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.aarch64.rpmb4a160513b5fa0c4e151540477f1f7202a9e91a4147fd4e678cd1f3469a28f4a-ol8_aarch64_codeready_builder
perf-4.18.0-553.157.1.el8_10.aarch64.rpm462007c89ea7797f8555831d76d99608ce66c67b106cd2019427e900dc910414-ol8_aarch64_baseos_latest
perf-4.18.0-553.157.1.el8_10.aarch64.rpm462007c89ea7797f8555831d76d99608ce66c67b106cd2019427e900dc910414-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.157.1.el8_10.aarch64.rpmad3695cea7684da6c28099cb358ccec180c8f54280ccc0695a1b3eac2bfadad9-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.157.1.el8_10.aarch64.rpmad3695cea7684da6c28099cb358ccec180c8f54280ccc0695a1b3eac2bfadad9-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.157.1.el8_10.src.rpmf87b8731d15a7baa44e5e61539f1f1808d794b78617d64e5e9a6964c94c4b76b-ol8_x86_64_baseos_latest
kernel-4.18.0-553.157.1.el8_10.src.rpmf87b8731d15a7baa44e5e61539f1f1808d794b78617d64e5e9a6964c94c4b76b-ol8_x86_64_codeready_builder
kernel-4.18.0-553.157.1.el8_10.src.rpmf87b8731d15a7baa44e5e61539f1f1808d794b78617d64e5e9a6964c94c4b76b-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.157.1.el8_10.x86_64.rpm3dee43fd8b1f5db4cad6056f1531617aceb385015ab4e4bc7bc2c0bbae9ba98c-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.157.1.el8_10.x86_64.rpm3dee43fd8b1f5db4cad6056f1531617aceb385015ab4e4bc7bc2c0bbae9ba98c-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.157.1.el8_10.x86_64.rpmceb95f7869fd3dba87f3c8268263285825b2cb32cbb065344d1fd544e98bcc52-ol8_x86_64_baseos_latest
kernel-4.18.0-553.157.1.el8_10.x86_64.rpmceb95f7869fd3dba87f3c8268263285825b2cb32cbb065344d1fd544e98bcc52-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch.rpmaa320718ebbdaa6379404a48cf0ac97b5dd7fc2ef455644eb9c4d784662f1b45-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.157.1.el8_10.noarch.rpmaa320718ebbdaa6379404a48cf0ac97b5dd7fc2ef455644eb9c4d784662f1b45-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.157.1.el8_10.x86_64.rpm776b80fdbce7c7ffd63a7c6ca461bf8dc7a6437f3a8044df5a79995cb5ef82cd-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.157.1.el8_10.x86_64.rpm776b80fdbce7c7ffd63a7c6ca461bf8dc7a6437f3a8044df5a79995cb5ef82cd-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64.rpm51f8e6842127b025cc0cb27d14da030f1abdda052a3503dae9ffb8edebb2e54f-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.157.1.el8_10.x86_64.rpm51f8e6842127b025cc0cb27d14da030f1abdda052a3503dae9ffb8edebb2e54f-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.157.1.el8_10.x86_64.rpme25058506303900ea124669cf1ab13da6c7f9d80db812cfad0202f876057cc49-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.157.1.el8_10.x86_64.rpme25058506303900ea124669cf1ab13da6c7f9d80db812cfad0202f876057cc49-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64.rpmdaef051371887476b9a640cedad1fd221c022ee50639a513becce357dd82e697-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.157.1.el8_10.x86_64.rpmdaef051371887476b9a640cedad1fd221c022ee50639a513becce357dd82e697-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64.rpme7dc09f9e880adfd767cd9e14384b263114e34ff53b0626ed1f7494a5f1d1461-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.157.1.el8_10.x86_64.rpme7dc09f9e880adfd767cd9e14384b263114e34ff53b0626ed1f7494a5f1d1461-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64.rpma71148af27a20062b66b12df448567368639b98daa13b39534652eff2a850b7e-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.157.1.el8_10.x86_64.rpma71148af27a20062b66b12df448567368639b98daa13b39534652eff2a850b7e-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64.rpm2d1e66f2fdb298bf5e6d45c8baa35fdd25c0a08916387a68b17dc48a64e6ed9f-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.157.1.el8_10.x86_64.rpm2d1e66f2fdb298bf5e6d45c8baa35fdd25c0a08916387a68b17dc48a64e6ed9f-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.157.1.el8_10.x86_64.rpm6dcc7b8107677b6dc4f88a43aad5c39ff68b423107669ce1393d3b77deeb8ecf-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.157.1.el8_10.x86_64.rpm6dcc7b8107677b6dc4f88a43aad5c39ff68b423107669ce1393d3b77deeb8ecf-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.157.1.el8_10.noarch.rpm577f5c8ab0d8f9f347eb60c2dba30189bccf63b81f152e958bf10cb4de274336-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.157.1.el8_10.noarch.rpm577f5c8ab0d8f9f347eb60c2dba30189bccf63b81f152e958bf10cb4de274336-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.157.1.el8_10.x86_64.rpme781f4916533a089009ac0a383f8257afeae6c5be20f147fd6d5daf3b8a9418f-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.157.1.el8_10.x86_64.rpme781f4916533a089009ac0a383f8257afeae6c5be20f147fd6d5daf3b8a9418f-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.157.1.el8_10.x86_64.rpmf34860d439c0a5e85a7cd12a4497c24bec2d2144cb1b2e62135ca88e66896aa2-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.157.1.el8_10.x86_64.rpmf34860d439c0a5e85a7cd12a4497c24bec2d2144cb1b2e62135ca88e66896aa2-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64.rpmc4991a5afadebfa3916a3570cff923995b93e58b0f8adaef4e5b6318fab524ee-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.157.1.el8_10.x86_64.rpmc4991a5afadebfa3916a3570cff923995b93e58b0f8adaef4e5b6318fab524ee-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.157.1.el8_10.x86_64.rpmb361629c49e2b1c74c9c2198263f51c481b75d83587b5863eeca154cdc3d5cb0-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.157.1.el8_10.x86_64.rpmb361629c49e2b1c74c9c2198263f51c481b75d83587b5863eeca154cdc3d5cb0-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64.rpm44394867f768a7f5840e335bdd0f4ae5400d289dcde8447969ae1fdbfda4ed81-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.157.1.el8_10.x86_64.rpm44394867f768a7f5840e335bdd0f4ae5400d289dcde8447969ae1fdbfda4ed81-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.157.1.el8_10.x86_64.rpm38d5aa84cff4475e0f5503805144dcad844eafffeb541f8b5e8613ace5616c38-ol8_x86_64_codeready_builder
perf-4.18.0-553.157.1.el8_10.x86_64.rpm6908dbd4bf68eafc327d3935e4188017304fdacb7649385e2b55f5355be0a45f-ol8_x86_64_baseos_latest
perf-4.18.0-553.157.1.el8_10.x86_64.rpm6908dbd4bf68eafc327d3935e4188017304fdacb7649385e2b55f5355be0a45f-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.157.1.el8_10.x86_64.rpm349cd27bbe560d40cffbdbd6673c2c1e400bd3c6f151aba44ceedec916154f3e-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.157.1.el8_10.x86_64.rpm349cd27bbe560d40cffbdbd6673c2c1e400bd3c6f151aba44ceedec916154f3e-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights