ELSA-2026-6571

ELSA-2026-6571 - kernel security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-04-07

Description

[4.18.0-553.117.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.117.1]
- nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193}

[4.18.0-553.116.1]
- nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930]
- NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242]
- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242]
- pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242]
- NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242]
- flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242]
- NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242]
- NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242]
- NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242]
- NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242]
- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242]
- SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242]
- NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242]
- SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242]
- SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242]
- SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242]
- SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242]
- NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242]
- NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419]
- nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419]
- pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419]
- NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419]
- NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419]
- NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419]
- NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419]
- NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419]
- NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419]
- NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419]
- NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419]
- NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419]
- nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419]
- nfs: always check dreq->error after a commit (Mike Snitzer) [RHEL-156419]
- nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419]
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238}
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231}
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942]

Related CVEs

CVE-2024-26984

CVE-2025-71238

CVE-2026-23193

CVE-2026-23231

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.117.1.el8_10.src.rpm	ba6efdf9bdfa2b2f3b32aef905b4b89e1b90a0106144880691aa77cd917f58c1	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.117.1.el8_10.src.rpm	ba6efdf9bdfa2b2f3b32aef905b4b89e1b90a0106144880691aa77cd917f58c1	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.117.1.el8_10.src.rpm	ba6efdf9bdfa2b2f3b32aef905b4b89e1b90a0106144880691aa77cd917f58c1	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.117.1.el8_10.aarch64.rpm	c1463d37dddd2069a66ef634fe171d75142c53d7a3c1b7c225ced81242669afd	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.117.1.el8_10.aarch64.rpm	c1463d37dddd2069a66ef634fe171d75142c53d7a3c1b7c225ced81242669afd	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.117.1.el8_10.aarch64.rpm	c82c7cd35d025cf3e5c428051e46b621ebcde4b99e3cf3d3f3cf80b9ae5995e0	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.117.1.el8_10.aarch64.rpm	c82c7cd35d025cf3e5c428051e46b621ebcde4b99e3cf3d3f3cf80b9ae5995e0	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.117.1.el8_10.aarch64.rpm	2663d3fa270a5c642278ed2055085e32c4c6341889b802d27a89401d97ef08f6	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.117.1.el8_10.aarch64.rpm	2663d3fa270a5c642278ed2055085e32c4c6341889b802d27a89401d97ef08f6	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.117.1.el8_10.aarch64.rpm	22b1f15c3f5c2f4830d94b7852dfff5272c54821bb09751ded56dd9b78a3afd3	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.117.1.el8_10.aarch64.rpm	22b1f15c3f5c2f4830d94b7852dfff5272c54821bb09751ded56dd9b78a3afd3	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.117.1.el8_10.aarch64.rpm	ed80bc1fd5b957762a7ec0d5bd66e228041f288989667f6fc909dbb0f4ad47e1	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.117.1.el8_10.aarch64.rpm	ed80bc1fd5b957762a7ec0d5bd66e228041f288989667f6fc909dbb0f4ad47e1	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.117.1.el8_10.aarch64.rpm	2e9d1f5b9d26095a28ae60e332e61facc670d79d45e3c93a325a8f0a0f296fe9	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.117.1.el8_10.aarch64.rpm	eb1e5c044b31f394f86c3b326a78c1761b9a1cb2c888c3e580e6401c3bd7c57a	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.117.1.el8_10.aarch64.rpm	eb1e5c044b31f394f86c3b326a78c1761b9a1cb2c888c3e580e6401c3bd7c57a	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.117.1.el8_10.aarch64.rpm	9afbebf5125b276652badf8f0c9a012f2a0d71dbe2b9476b8148a1317aeccb4b	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.117.1.el8_10.aarch64.rpm	9afbebf5125b276652badf8f0c9a012f2a0d71dbe2b9476b8148a1317aeccb4b	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.117.1.el8_10.src.rpm	ba6efdf9bdfa2b2f3b32aef905b4b89e1b90a0106144880691aa77cd917f58c1	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.117.1.el8_10.src.rpm	ba6efdf9bdfa2b2f3b32aef905b4b89e1b90a0106144880691aa77cd917f58c1	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.117.1.el8_10.src.rpm	ba6efdf9bdfa2b2f3b32aef905b4b89e1b90a0106144880691aa77cd917f58c1	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.117.1.el8_10.x86_64.rpm	9d0f2c696f466653c8fc07c14dc93f365f48b85c3434ebe398873fdd4108fcb1	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.117.1.el8_10.x86_64.rpm	9d0f2c696f466653c8fc07c14dc93f365f48b85c3434ebe398873fdd4108fcb1	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.117.1.el8_10.x86_64.rpm	37c6d24a4def8a73a4688b02d05367b840308f16ea5fb9c8e9a167531fb8bd47	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.117.1.el8_10.x86_64.rpm	37c6d24a4def8a73a4688b02d05367b840308f16ea5fb9c8e9a167531fb8bd47	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.117.1.el8_10.noarch.rpm	5dfd444daf29fc32b8ab6b41c942c7350c087cb5cca38b552d9ef5cd5ba63f3a	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.117.1.el8_10.noarch.rpm	5dfd444daf29fc32b8ab6b41c942c7350c087cb5cca38b552d9ef5cd5ba63f3a	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.117.1.el8_10.x86_64.rpm	ad467a76b554771cc48542aede7dd339c7be276bb90ee2c995f0737729c72e37	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.117.1.el8_10.x86_64.rpm	ad467a76b554771cc48542aede7dd339c7be276bb90ee2c995f0737729c72e37	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.117.1.el8_10.x86_64.rpm	83993747cc8f991db20c5345f9e0880be24d6ec180611679726f7c19f3804408	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.117.1.el8_10.x86_64.rpm	83993747cc8f991db20c5345f9e0880be24d6ec180611679726f7c19f3804408	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.117.1.el8_10.x86_64.rpm	1b43a3d4ee1ac835be452ddfb5a5d07285efeb15d44d025d649bad923b54132a	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.117.1.el8_10.x86_64.rpm	1b43a3d4ee1ac835be452ddfb5a5d07285efeb15d44d025d649bad923b54132a	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.117.1.el8_10.x86_64.rpm	c95929ea557c1918270bc8858938f28e679cb9841f7f74671ad08c15c317c005	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.117.1.el8_10.x86_64.rpm	c95929ea557c1918270bc8858938f28e679cb9841f7f74671ad08c15c317c005	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.117.1.el8_10.x86_64.rpm	b6711be85013206b14af2f05de58989509c96bee80378b8d07fb2fbef051a041	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.117.1.el8_10.x86_64.rpm	b6711be85013206b14af2f05de58989509c96bee80378b8d07fb2fbef051a041	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.117.1.el8_10.x86_64.rpm	02f11b85f225efffc64e6a47b5de09f05ae677649b19385e5af983db73e0c62c	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.117.1.el8_10.x86_64.rpm	02f11b85f225efffc64e6a47b5de09f05ae677649b19385e5af983db73e0c62c	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.117.1.el8_10.x86_64.rpm	e33356fb82fc9d946375ef5f1cfdc5906851e25610de16555158a5bc925b1e2e	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.117.1.el8_10.x86_64.rpm	e33356fb82fc9d946375ef5f1cfdc5906851e25610de16555158a5bc925b1e2e	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.117.1.el8_10.x86_64.rpm	221d3b7b03858924ad24352a36d35b7e4cedb2f7f4bf43f89e961da8a0b39f45	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.117.1.el8_10.x86_64.rpm	221d3b7b03858924ad24352a36d35b7e4cedb2f7f4bf43f89e961da8a0b39f45	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.117.1.el8_10.noarch.rpm	291b8e95c691a4f362c201512b082a56e3643883b7f42735c837166ba1f850e0	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.117.1.el8_10.noarch.rpm	291b8e95c691a4f362c201512b082a56e3643883b7f42735c837166ba1f850e0	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.117.1.el8_10.x86_64.rpm	d94dccbf6bbaa646ceddf3b00f65af13fdbf27a379905a29f34d30ba68d4dbac	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.117.1.el8_10.x86_64.rpm	d94dccbf6bbaa646ceddf3b00f65af13fdbf27a379905a29f34d30ba68d4dbac	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.117.1.el8_10.x86_64.rpm	ef5e3408475eec5ddb7b4499950c4f3713550d0690cb90bb32d96864fb71158e	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.117.1.el8_10.x86_64.rpm	ef5e3408475eec5ddb7b4499950c4f3713550d0690cb90bb32d96864fb71158e	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.117.1.el8_10.x86_64.rpm	4f8353a924d9041e10cf3e52f529ecd77a80b7276ad7c6fd529807dd5b59df95	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.117.1.el8_10.x86_64.rpm	4f8353a924d9041e10cf3e52f529ecd77a80b7276ad7c6fd529807dd5b59df95	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.117.1.el8_10.x86_64.rpm	db3c809ff10ed42edec62b4f40e27bc5bbbf65c7c23f4b8dc27793c13cc52ef0	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.117.1.el8_10.x86_64.rpm	db3c809ff10ed42edec62b4f40e27bc5bbbf65c7c23f4b8dc27793c13cc52ef0	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.117.1.el8_10.x86_64.rpm	e0dff58a3375bab8b6c58781274e917522641a3de18c4713fd2c493c07ddd3c6	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.117.1.el8_10.x86_64.rpm	e0dff58a3375bab8b6c58781274e917522641a3de18c4713fd2c493c07ddd3c6	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.117.1.el8_10.x86_64.rpm	8fb0d3e193c9f680f8b36e623cc6266c4590c0e3e0eb8cc9bb1e422d1ab56854	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.117.1.el8_10.x86_64.rpm	38979a8ea71af1b18d71ed57575f71bbfdb413a7ad3a6566e1279c51c389613b	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.117.1.el8_10.x86_64.rpm	38979a8ea71af1b18d71ed57575f71bbfdb413a7ad3a6566e1279c51c389613b	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.117.1.el8_10.x86_64.rpm	bd1b09048a36c42b4ef8705fb3dac7e7460109ec7a8335fcc6ce9e30762def23	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.117.1.el8_10.x86_64.rpm	bd1b09048a36c42b4ef8705fb3dac7e7460109ec7a8335fcc6ce9e30762def23	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team