Stay Connected:

ELSA-2026-59821

ELSA-2026-59821 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-08-26

Description


[4.18.0-553.158.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.158.1]
- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (Maurizio Lombardi) [RHEL-219613] {CVE-2026-64320}
- selinux: check connect-related permissions on TCP Fast Open (Ondrej Mosnacek) [RHEL-222800]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232120] {CVE-2026-64191}
- scsi: target: Fix hexadecimal CHAP_I handling (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886}
- scsi: target: iscsi: Validate CHAP_R length before base64 decode (CKI Backport Bot) [RHEL-231660] {CVE-2026-63886}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231447] {CVE-2026-64277}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230251] {CVE-2026-64276}
- netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CKI Backport Bot) [RHEL-229797] {CVE-2026-63913}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227676] {CVE-2026-64189}
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212400]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212400]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212400]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212400]
- usb: hub: Make usb_hub_wq type depend on isolcpus/nohz_full setting (Waiman Long) [RHEL-178088]
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188193] {CVE-2026-52924}


Related CVEs


CVE-2026-52924
CVE-2026-63886
CVE-2026-63913
CVE-2026-64189
CVE-2026-64191
CVE-2026-64276
CVE-2026-64277
CVE-2026-64320

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.158.1.el8_10.src.rpmd2e73a889bc78bbdafa3d402512237072ebf4ee85620e1f96298d1c4b0ce9502-ol8_aarch64_baseos_latest
kernel-4.18.0-553.158.1.el8_10.src.rpmd2e73a889bc78bbdafa3d402512237072ebf4ee85620e1f96298d1c4b0ce9502-ol8_aarch64_codeready_builder
kernel-4.18.0-553.158.1.el8_10.src.rpmd2e73a889bc78bbdafa3d402512237072ebf4ee85620e1f96298d1c4b0ce9502-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.158.1.el8_10.aarch64.rpm694a0215603e50ffe690bcf568b4f13872365a3baeb975b7858dc56c71cb377c-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.158.1.el8_10.aarch64.rpm694a0215603e50ffe690bcf568b4f13872365a3baeb975b7858dc56c71cb377c-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.158.1.el8_10.aarch64.rpm945fd68488b35ca76873d4b1b7608f006d5c137fd749f4bae42354dc5d16de97-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.158.1.el8_10.aarch64.rpm945fd68488b35ca76873d4b1b7608f006d5c137fd749f4bae42354dc5d16de97-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.158.1.el8_10.aarch64.rpm7e7bdc4e418d60b73a1eb3086fd2fe1d490a2c1e064ff7e382b59231c94233f9-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.158.1.el8_10.aarch64.rpm7e7bdc4e418d60b73a1eb3086fd2fe1d490a2c1e064ff7e382b59231c94233f9-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.158.1.el8_10.aarch64.rpmabb98fb45537f2bad41b059de113ad4f357fa48c5e24ee63fe944da204f2217c-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.158.1.el8_10.aarch64.rpmabb98fb45537f2bad41b059de113ad4f357fa48c5e24ee63fe944da204f2217c-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.158.1.el8_10.aarch64.rpma96be26bd69e580ce11c265b292faac614b04bb4f1f971347bac81219feebef1-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.158.1.el8_10.aarch64.rpma96be26bd69e580ce11c265b292faac614b04bb4f1f971347bac81219feebef1-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.158.1.el8_10.aarch64.rpm16e43ac2208583d77b5da5fc0e64af85ea7a1be8fea9aca07a518584e616357c-ol8_aarch64_codeready_builder
perf-4.18.0-553.158.1.el8_10.aarch64.rpmd4f44fdbd034ad1570a6471e3a44872159a6eeeebaedcd4de924d1790155cd74-ol8_aarch64_baseos_latest
perf-4.18.0-553.158.1.el8_10.aarch64.rpmd4f44fdbd034ad1570a6471e3a44872159a6eeeebaedcd4de924d1790155cd74-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.158.1.el8_10.aarch64.rpm2027ba266e72f8beff9e2ffcef04fbd0746e1665c364f4e2ce95fafc8bb790a7-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.158.1.el8_10.aarch64.rpm2027ba266e72f8beff9e2ffcef04fbd0746e1665c364f4e2ce95fafc8bb790a7-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.158.1.el8_10.src.rpmd2e73a889bc78bbdafa3d402512237072ebf4ee85620e1f96298d1c4b0ce9502-ol8_x86_64_baseos_latest
kernel-4.18.0-553.158.1.el8_10.src.rpmd2e73a889bc78bbdafa3d402512237072ebf4ee85620e1f96298d1c4b0ce9502-ol8_x86_64_codeready_builder
kernel-4.18.0-553.158.1.el8_10.src.rpmd2e73a889bc78bbdafa3d402512237072ebf4ee85620e1f96298d1c4b0ce9502-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.158.1.el8_10.x86_64.rpmcd01e938d439717c4c1b777d8619db7ae295c7ee58c6ce3eedd9bd9348f60548-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.158.1.el8_10.x86_64.rpmcd01e938d439717c4c1b777d8619db7ae295c7ee58c6ce3eedd9bd9348f60548-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.158.1.el8_10.x86_64.rpm8040179ac6ed6741e85908d0845129cdb45b934a1c34ba85f7054eb26838d10d-ol8_x86_64_baseos_latest
kernel-4.18.0-553.158.1.el8_10.x86_64.rpm8040179ac6ed6741e85908d0845129cdb45b934a1c34ba85f7054eb26838d10d-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.158.1.el8_10.noarch.rpm200eb927fc37c1a9fcec7111f665e24ca61389ee8c711ecad344a3436bf596f5-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.158.1.el8_10.noarch.rpm200eb927fc37c1a9fcec7111f665e24ca61389ee8c711ecad344a3436bf596f5-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.158.1.el8_10.x86_64.rpmd1e0ca3375cab9f915451aba846b9e8069a7628ab2971aeb0d47892bdc5bf5be-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.158.1.el8_10.x86_64.rpmd1e0ca3375cab9f915451aba846b9e8069a7628ab2971aeb0d47892bdc5bf5be-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.158.1.el8_10.x86_64.rpmb2fb7f83efca96f62d8bc32280c84ee66640ecb50227eceb624e9402d19e2b8b-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.158.1.el8_10.x86_64.rpmb2fb7f83efca96f62d8bc32280c84ee66640ecb50227eceb624e9402d19e2b8b-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.158.1.el8_10.x86_64.rpm200996335ce0c957cdafdcbf40c072ea5f6396367b8658c37577d065fa24b473-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.158.1.el8_10.x86_64.rpm200996335ce0c957cdafdcbf40c072ea5f6396367b8658c37577d065fa24b473-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.158.1.el8_10.x86_64.rpm044451e8256461c0a571262677892cf02b72fdb4261195d7d4296610c5bddc8e-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.158.1.el8_10.x86_64.rpm044451e8256461c0a571262677892cf02b72fdb4261195d7d4296610c5bddc8e-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.158.1.el8_10.x86_64.rpmfc13e65a81f8a5c3410f11a7567cb56bd237deaca49ceae5a3cd541a851757e5-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.158.1.el8_10.x86_64.rpmfc13e65a81f8a5c3410f11a7567cb56bd237deaca49ceae5a3cd541a851757e5-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.158.1.el8_10.x86_64.rpm39263c59b77684614fde331386a864c185576493bb39424b9e8f83dad520b033-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.158.1.el8_10.x86_64.rpm39263c59b77684614fde331386a864c185576493bb39424b9e8f83dad520b033-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.158.1.el8_10.x86_64.rpm7b5ff841883695ff65a6dc45887ff97aff726212051266d016fcd5a27ed07adf-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.158.1.el8_10.x86_64.rpm7b5ff841883695ff65a6dc45887ff97aff726212051266d016fcd5a27ed07adf-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.158.1.el8_10.x86_64.rpm817bc956ae205ee53ea8bda3c7b961097e200f4cc27cd9885c8a59374a2d703d-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.158.1.el8_10.x86_64.rpm817bc956ae205ee53ea8bda3c7b961097e200f4cc27cd9885c8a59374a2d703d-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.158.1.el8_10.noarch.rpm90058e9714e1d57a1bd6e2df65d1695d6988779cd2aa1a92a70335bc1a0a1b14-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.158.1.el8_10.noarch.rpm90058e9714e1d57a1bd6e2df65d1695d6988779cd2aa1a92a70335bc1a0a1b14-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.158.1.el8_10.x86_64.rpm66d43e9b06ffab38e9223abdb1e55cbd4d8a953743a6b46373b46aa012921068-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.158.1.el8_10.x86_64.rpm66d43e9b06ffab38e9223abdb1e55cbd4d8a953743a6b46373b46aa012921068-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.158.1.el8_10.x86_64.rpm7544216e3ed989bd42ba7c14ac2b80e028bf6a995bd37e1d932edcd5fcf0d9fd-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.158.1.el8_10.x86_64.rpm7544216e3ed989bd42ba7c14ac2b80e028bf6a995bd37e1d932edcd5fcf0d9fd-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.158.1.el8_10.x86_64.rpm279db692feb05b661056341142e990c401ebd79ea68bfca5c78e3b54abec0cd1-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.158.1.el8_10.x86_64.rpm279db692feb05b661056341142e990c401ebd79ea68bfca5c78e3b54abec0cd1-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.158.1.el8_10.x86_64.rpm211d39baa66719307a2be2c0b106498f2282ad4156ac714932e8399340ad90a7-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.158.1.el8_10.x86_64.rpm211d39baa66719307a2be2c0b106498f2282ad4156ac714932e8399340ad90a7-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.158.1.el8_10.x86_64.rpm9cba286abaced14ace5d3c5ae21c5da3b836021167ad6c70a71f77919a5e6ebf-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.158.1.el8_10.x86_64.rpm9cba286abaced14ace5d3c5ae21c5da3b836021167ad6c70a71f77919a5e6ebf-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.158.1.el8_10.x86_64.rpmfa6916a049de7c6a0976e2c2c2e88a2fab3dcb9b98de4725e94600f73d0aa028-ol8_x86_64_codeready_builder
perf-4.18.0-553.158.1.el8_10.x86_64.rpm467be929cf140e334224b3fe8928dc1c7753b7df1377e05557dd875525590a92-ol8_x86_64_baseos_latest
perf-4.18.0-553.158.1.el8_10.x86_64.rpm467be929cf140e334224b3fe8928dc1c7753b7df1377e05557dd875525590a92-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.158.1.el8_10.x86_64.rpm51d86a791bb38cd2aeebb61cb2fe1cba93a458b5893544b0c0f38b0cd5264ece-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.158.1.el8_10.x86_64.rpm51d86a791bb38cd2aeebb61cb2fe1cba93a458b5893544b0c0f38b0cd5264ece-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights