ELSA-2026-63014-0

ELSA-2026-63014-0 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-09-07

Description

[4.18.0-553.159.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.159.1]
- net: ipv6: clear suppressed fib6 rule result (Jamie Bainbridge) [RHEL-246806] {CVE-2026-74581}
- powerpc/pseries: lparcfg - fix kbuf[] underflow (Mamatha Inamdar) [RHEL-240144]
- powerpc/pseries: Remove VLA from lparcfg_write() (Mamatha Inamdar) [RHEL-240144]
- RHEL only: Disable zram writeback support on non-4k page size systems (Jeff Moyer) [RHEL-191437] {CVE-2026-53185}
- nfsd: release layout stid on setlease failure (Scott Mayhew) [RHEL-227780] {CVE-2026-53399}
- NFSv4/flexfiles: reject zero filehandle version count (Scott Mayhew) [RHEL-229402] {CVE-2026-53392}
- NFSv4: include MAY_WRITE in open permission mask for O_TRUNC (CKI Backport Bot) [RHEL-234059] {CVE-2026-64298}
- NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (CKI Backport Bot) [RHEL-228028] {CVE-2026-53391}
- pNFS: Fix use-after-free in pnfs_update_layout() (CKI Backport Bot) [RHEL-226624] {CVE-2026-63800}
- nfsd: fix posix_acl leak on SETACL decode failure (CKI Backport Bot) [RHEL-225510] {CVE-2026-53397}
- x86/bugs: Make Safe-RET robust against interrupt injection (Waiman Long) [RHEL-230492] {CVE-2026-68480}
- x86: Clean up names/macros conflicting with ptrace-abi.h (Waiman Long) [RHEL-230492]
(Waiman Long) [RHEL-230492]
- smc91x: fix broken irq-context in PREEMPT_RT (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132}
- net: smc91x: Fix possible memory leak in smc_drv_probe() (CKI Backport Bot) [RHEL-231993] {CVE-2025-71132}
- net: mana: validate rx_req_idx to prevent out-of-bounds array access (CKI Backport Bot) [RHEL-229075] {CVE-2026-64018}
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down (CKI Backport Bot) [RHEL-225272] {CVE-2026-45970}
- s390/cpum_sf: Handle CPU hotplug remove during sampling (CKI Backport Bot) [RHEL-228073] {CVE-2024-57849}
- RDMA/siw: bound Read Response placement to the RREAD length (CKI Backport Bot) [RHEL-219521] {CVE-2026-64268}
- qede: fix off-by-one in BD ring consumption on build_skb failure (CKI Backport Bot) [RHEL-193045]

Related CVEs

CVE-2024-57849

CVE-2025-71132

CVE-2026-45970

CVE-2026-53185

CVE-2026-53391

CVE-2026-53392

CVE-2026-53397

CVE-2026-53399

CVE-2026-63800

CVE-2026-64018

CVE-2026-64268

CVE-2026-64298

CVE-2026-68480

CVE-2026-74581

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.159.1.el8_10.src.rpm	5737142f47aff8da6d1832eb49dce97456601c78b9cc28085c182847bee682da	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.159.1.el8_10.src.rpm	5737142f47aff8da6d1832eb49dce97456601c78b9cc28085c182847bee682da	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.159.1.el8_10.src.rpm	5737142f47aff8da6d1832eb49dce97456601c78b9cc28085c182847bee682da	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.159.1.el8_10.aarch64.rpm	564a1f2c783621a0fb4f56d3ed08fafca0309528daa93149f7cef21482748d13	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.159.1.el8_10.aarch64.rpm	564a1f2c783621a0fb4f56d3ed08fafca0309528daa93149f7cef21482748d13	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.159.1.el8_10.aarch64.rpm	b1aadf251d7e9750ed11053f70215e8274de0c066efb4c18d6ab8f51a20fac0a	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.159.1.el8_10.aarch64.rpm	b1aadf251d7e9750ed11053f70215e8274de0c066efb4c18d6ab8f51a20fac0a	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.159.1.el8_10.aarch64.rpm	4fd157227bc02674aa820691880eb9e2aff05fe6b78a451b30f62ef3f79c0386	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.159.1.el8_10.aarch64.rpm	4fd157227bc02674aa820691880eb9e2aff05fe6b78a451b30f62ef3f79c0386	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.159.1.el8_10.aarch64.rpm	a6874a0106cb791a0da42ab77b1fc4b851736c4debcaf6ba705255b8669da4b5	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.159.1.el8_10.aarch64.rpm	a6874a0106cb791a0da42ab77b1fc4b851736c4debcaf6ba705255b8669da4b5	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.159.1.el8_10.aarch64.rpm	223d3ce33e949688820eb7e3d43b2a95a0eb074ad34ab541da09de5dca25329d	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.159.1.el8_10.aarch64.rpm	223d3ce33e949688820eb7e3d43b2a95a0eb074ad34ab541da09de5dca25329d	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.159.1.el8_10.aarch64.rpm	5fa0852b7e1987fa801431bc6749328bc403d34c402d9016f8eab2b4b58bbc21	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.159.1.el8_10.aarch64.rpm	a3631614565f589f42174ad914203ac188b1417a745936ab6d882118cdc58e0c	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.159.1.el8_10.aarch64.rpm	a3631614565f589f42174ad914203ac188b1417a745936ab6d882118cdc58e0c	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.159.1.el8_10.aarch64.rpm	fc52f76e018f673f8af52cf4d095aa23c45d18a9fd92dd418c185a0a7717b0e1	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.159.1.el8_10.aarch64.rpm	fc52f76e018f673f8af52cf4d095aa23c45d18a9fd92dd418c185a0a7717b0e1	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.159.1.el8_10.src.rpm	5737142f47aff8da6d1832eb49dce97456601c78b9cc28085c182847bee682da	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.159.1.el8_10.src.rpm	5737142f47aff8da6d1832eb49dce97456601c78b9cc28085c182847bee682da	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.159.1.el8_10.src.rpm	5737142f47aff8da6d1832eb49dce97456601c78b9cc28085c182847bee682da	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.159.1.el8_10.x86_64.rpm	6aa8d96822201197d5985b9c0d24854026e1a1c508544e1e22a15c14149bf227	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.159.1.el8_10.x86_64.rpm	6aa8d96822201197d5985b9c0d24854026e1a1c508544e1e22a15c14149bf227	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.159.1.el8_10.x86_64.rpm	307eb513d37ccb03b8331a3fa7ae56693ec72138aeed9a5b95e6b930b84e9a43	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.159.1.el8_10.x86_64.rpm	307eb513d37ccb03b8331a3fa7ae56693ec72138aeed9a5b95e6b930b84e9a43	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.159.1.el8_10.noarch.rpm	2a8ccb4d86f0c6d86475089a5e039c3a0251cd7f18ed29f94e5899664bcb64cf	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.159.1.el8_10.noarch.rpm	2a8ccb4d86f0c6d86475089a5e039c3a0251cd7f18ed29f94e5899664bcb64cf	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.159.1.el8_10.x86_64.rpm	e58462f5896b757998094a90023ecba38e73ed83365feb5e52662b2a51ba8bdd	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.159.1.el8_10.x86_64.rpm	e58462f5896b757998094a90023ecba38e73ed83365feb5e52662b2a51ba8bdd	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.159.1.el8_10.x86_64.rpm	12f0d8f9e522a814ed2d7cb3586b95478dc5292919a71761194a65cbba8ada3c	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.159.1.el8_10.x86_64.rpm	12f0d8f9e522a814ed2d7cb3586b95478dc5292919a71761194a65cbba8ada3c	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.159.1.el8_10.x86_64.rpm	df07266470a68ae5f913a5ac596b458e97a58fea63f7c6a45738d21f83ca6035	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.159.1.el8_10.x86_64.rpm	df07266470a68ae5f913a5ac596b458e97a58fea63f7c6a45738d21f83ca6035	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.159.1.el8_10.x86_64.rpm	2b5a22dbc248178f7ea660048ec46b130e3eafb1362d9335f3af9ca91d58789b	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.159.1.el8_10.x86_64.rpm	2b5a22dbc248178f7ea660048ec46b130e3eafb1362d9335f3af9ca91d58789b	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.159.1.el8_10.x86_64.rpm	049631940cc78707396b00a0ed8454a7ddb688579f1411f3733503af0c8b8422	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.159.1.el8_10.x86_64.rpm	049631940cc78707396b00a0ed8454a7ddb688579f1411f3733503af0c8b8422	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.159.1.el8_10.x86_64.rpm	7b4c86fc2acf3e2c3e3a4e5569809af2a24df4b85fd361b3d4d487ff3ae54baf	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.159.1.el8_10.x86_64.rpm	7b4c86fc2acf3e2c3e3a4e5569809af2a24df4b85fd361b3d4d487ff3ae54baf	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.159.1.el8_10.x86_64.rpm	2b344b03cd010e0db45aa08e6a66c83670e33c6e1280244d9b748b712d3704ea	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.159.1.el8_10.x86_64.rpm	2b344b03cd010e0db45aa08e6a66c83670e33c6e1280244d9b748b712d3704ea	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.159.1.el8_10.x86_64.rpm	72fdeebe325be297cb956315ea6fb68cf001dc01414cc0f4e633fba5467e286a	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.159.1.el8_10.x86_64.rpm	72fdeebe325be297cb956315ea6fb68cf001dc01414cc0f4e633fba5467e286a	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.159.1.el8_10.noarch.rpm	2d63daf477acbf56e73036fa49b76797dc6a38dafc1da618e4f4441278573f1a	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.159.1.el8_10.noarch.rpm	2d63daf477acbf56e73036fa49b76797dc6a38dafc1da618e4f4441278573f1a	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.159.1.el8_10.x86_64.rpm	2b6e422b1d7d7153255fd3a6ed49fb47c632a09d977df66fdc4b33799c60e866	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.159.1.el8_10.x86_64.rpm	2b6e422b1d7d7153255fd3a6ed49fb47c632a09d977df66fdc4b33799c60e866	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.159.1.el8_10.x86_64.rpm	29d404510f4418c7a1fae2010d90f6bac9c71cd57a8f68c6432c684bede4c1eb	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.159.1.el8_10.x86_64.rpm	29d404510f4418c7a1fae2010d90f6bac9c71cd57a8f68c6432c684bede4c1eb	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.159.1.el8_10.x86_64.rpm	97fae33d4a7147573dd4f1cc1b48fe677ef4c82525b5adac7e4063885336f68a	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.159.1.el8_10.x86_64.rpm	97fae33d4a7147573dd4f1cc1b48fe677ef4c82525b5adac7e4063885336f68a	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.159.1.el8_10.x86_64.rpm	f605e220ffd9509856b6954cc9eadcb0170002b38afa58d464472d747b6c07b2	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.159.1.el8_10.x86_64.rpm	f605e220ffd9509856b6954cc9eadcb0170002b38afa58d464472d747b6c07b2	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.159.1.el8_10.x86_64.rpm	e473f9d764cd542ec2e7894451717a4be2815d026fbee4658590df8aaf6a8eb0	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.159.1.el8_10.x86_64.rpm	e473f9d764cd542ec2e7894451717a4be2815d026fbee4658590df8aaf6a8eb0	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.159.1.el8_10.x86_64.rpm	a0b7566e99d42b40ee025f5c3d66291d8fcc549bdefe491a9487ff98a1a73da9	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.159.1.el8_10.x86_64.rpm	25895f293c7674c0f9628df60e1e72c7930c0f0ebd6db7943301b48f00ed2d72	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.159.1.el8_10.x86_64.rpm	25895f293c7674c0f9628df60e1e72c7930c0f0ebd6db7943301b48f00ed2d72	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.159.1.el8_10.x86_64.rpm	11fe3539bfed30580a37c99ec0364f0b2e8b17a16da8f5b9644841cfc63a09b9	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.159.1.el8_10.x86_64.rpm	11fe3539bfed30580a37c99ec0364f0b2e8b17a16da8f5b9644841cfc63a09b9	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team