Stay Connected:

ELSA-2026-66000-0

ELSA-2026-66000-0 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-09-14

Description


[4.18.0-553.162.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.162.1]
- scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers (Laurence Oberman) [RHEL-194117]
- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (Xin Long) [RHEL-228877] {CVE-2026-63801}
- tipc: clear sock->sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117}
- sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971}
- sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917}
- sctp: validate stream count in sctp_process_strreset_inreq() (Xin Long) [RHEL-236135] {CVE-2026-68315}
- sctp: fix auth_hmacs array size in struct sctp_cookie (Xin Long) [RHEL-237394] {CVE-2026-68376}
- sctp: auth: verify auth requirement when auth_chunk is NULL (Xin Long) [RHEL-237088] {CVE-2026-68300}
- gfs2: harden gfs2_glock_hold (Andreas Gruenbacher) [RHEL-240340]
- gfs2: gfs2_glock_hold cleanup (Andreas Gruenbacher) [RHEL-240340]
- sctp: validate embedded INIT chunk and address list lengths in cookie (Xin Long) [RHEL-190202]
- sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (Xin Long) [RHEL-190202] {CVE-2026-53246}
- netfilter: nf_log: validate MAC header was set before dumping it (CKI Backport Bot) [RHEL-232055] {CVE-2026-52942}
- netfilter: nf_conntrack_sip: don't use simple_strtoul (CKI Backport Bot) [RHEL-232024] {CVE-2026-52986}
- scsi: qla2xxx: Clear cmds after chip reset (CKI Backport Bot) [RHEL-230822] {CVE-2025-68745}
- scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CKI Backport Bot) [RHEL-225791] {CVE-2026-46149}

[4.18.0-553.161.1]
- security/keys: fix missed RCU read section on lookup (Bruno Meneguele) [RHEL-225679] {CVE-2026-64015}
- ixgbevf: fix use-after-free in VEPA multicast source pruning (CKI Backport Bot) [RHEL-227760] {CVE-2026-64113}
- xfrm: Don't clobber inner headers when already set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net: pull headers in qdisc_pkt_len_segs_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net: qdisc_pkt_len_segs_init() cleanup (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net: use qdisc_pkt_len_segs_init() in sch_handle_ingress() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net_sched: initialize qdisc_skb_cb(skb)->pkt_segs in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net: init shinfo->gso_segs from qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net: add more sanity checks to qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net_sched: make room for (struct qdisc_skb_cb)->pkt_segs (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net: account for encap headers in qdisc pkt len (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- sch_cake: do not use skb_mac_header() in cake_overhead() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net: do not use skb_mac_header() in qdisc_pkt_len_init() (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}
- net: Skip GSO length estimation if transport header is not set (Ivan Vecera) [RHEL-188227] {CVE-2026-53091}

[4.18.0-553.160.1]
- rhashtable: clear stale iter->p on table restart (CKI Backport Bot) [RHEL-248433] {CVE-2026-64563}
- net: bridge: stop fast-leave after deleting a port group (CKI Backport Bot) [RHEL-246938] {CVE-2026-74480}
- nvmet-rdma: handle inline data with a nonzero offset (CKI Backport Bot) [RHEL-244910] {CVE-2026-72129}
- crypto: pcrypt - Fix handling of MAY_BACKLOG requests (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493}
- crypto: pcrypt - Delay write to padata->info (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493}
- crypto: pcrypt - Do not clear MAY_SLEEP flag in original request (Ricardo Robaina) [RHEL-226702] {CVE-2026-43493}
- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237655] {CVE-2026-68343}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228903] {CVE-2026-64007}
- netfilter: conntrack: remove sprintf usage (CKI Backport Bot) [RHEL-224448] {CVE-2026-53002}


Related CVEs


CVE-2026-43493
CVE-2026-53002
CVE-2026-64007
CVE-2026-64563
CVE-2026-68343
CVE-2026-72129
CVE-2026-74480

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.162.1.el8_10.src.rpm7b98f90bc07a96f13c9c9df55f07bf4cc7b68bdbad3442b74d5157ffc77c05b0-ol8_aarch64_baseos_latest
kernel-4.18.0-553.162.1.el8_10.src.rpm7b98f90bc07a96f13c9c9df55f07bf4cc7b68bdbad3442b74d5157ffc77c05b0-ol8_aarch64_codeready_builder
kernel-4.18.0-553.162.1.el8_10.src.rpm7b98f90bc07a96f13c9c9df55f07bf4cc7b68bdbad3442b74d5157ffc77c05b0-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.162.1.el8_10.aarch64.rpmc305b98da58ca5b24b3b4d51bae6f7d3f924d6440a92e67ee379c311ab160725-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.162.1.el8_10.aarch64.rpmc305b98da58ca5b24b3b4d51bae6f7d3f924d6440a92e67ee379c311ab160725-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.162.1.el8_10.aarch64.rpm62de4aa0355d367ebdb2c5586f3a9c8ea40feeea14a5fa1fec501f1ea9bcc4b3-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.162.1.el8_10.aarch64.rpm62de4aa0355d367ebdb2c5586f3a9c8ea40feeea14a5fa1fec501f1ea9bcc4b3-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.162.1.el8_10.aarch64.rpmee5f2c98e0d2f5524b37d0394220ed7bc78c13f0c9ed6a2b435bc0e8daa009fc-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.162.1.el8_10.aarch64.rpmee5f2c98e0d2f5524b37d0394220ed7bc78c13f0c9ed6a2b435bc0e8daa009fc-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.162.1.el8_10.aarch64.rpm7cfcb88d92cac85c63bff7e90a5d48a5942d509b621e001cdb3d170a2b0e11eb-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.162.1.el8_10.aarch64.rpm7cfcb88d92cac85c63bff7e90a5d48a5942d509b621e001cdb3d170a2b0e11eb-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.162.1.el8_10.aarch64.rpm9ed74bba0c3db38e4a7c03ff4885d07bf77f11bdce2e6f7acd7369c52d53d76e-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.162.1.el8_10.aarch64.rpm9ed74bba0c3db38e4a7c03ff4885d07bf77f11bdce2e6f7acd7369c52d53d76e-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.aarch64.rpm573700aa3ca5f4a21d09a6ec506747ce600e1c7fc198ef5a9f5f4f8a9d4a60e7-ol8_aarch64_codeready_builder
perf-4.18.0-553.162.1.el8_10.aarch64.rpm92f9f2f5c51b585d9b0946f41d37bf4db9e442cd089cd0dae5ee6c946d262a92-ol8_aarch64_baseos_latest
perf-4.18.0-553.162.1.el8_10.aarch64.rpm92f9f2f5c51b585d9b0946f41d37bf4db9e442cd089cd0dae5ee6c946d262a92-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.162.1.el8_10.aarch64.rpm424712106702dfc86be9326b52f131557c6d00ecf18fa8ad2951f9453c0c3f59-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.162.1.el8_10.aarch64.rpm424712106702dfc86be9326b52f131557c6d00ecf18fa8ad2951f9453c0c3f59-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.162.1.el8_10.src.rpm7b98f90bc07a96f13c9c9df55f07bf4cc7b68bdbad3442b74d5157ffc77c05b0-ol8_x86_64_baseos_latest
kernel-4.18.0-553.162.1.el8_10.src.rpm7b98f90bc07a96f13c9c9df55f07bf4cc7b68bdbad3442b74d5157ffc77c05b0-ol8_x86_64_codeready_builder
kernel-4.18.0-553.162.1.el8_10.src.rpm7b98f90bc07a96f13c9c9df55f07bf4cc7b68bdbad3442b74d5157ffc77c05b0-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.162.1.el8_10.x86_64.rpm14a45b2c5536081bfdc685d2af1c7189549f50ade111add21055d6f72c1373f1-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.162.1.el8_10.x86_64.rpm14a45b2c5536081bfdc685d2af1c7189549f50ade111add21055d6f72c1373f1-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.162.1.el8_10.x86_64.rpm9aad308481f86a5a702be9f1db65efa096331c573be5f0c9488ba561e55b511a-ol8_x86_64_baseos_latest
kernel-4.18.0-553.162.1.el8_10.x86_64.rpm9aad308481f86a5a702be9f1db65efa096331c573be5f0c9488ba561e55b511a-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch.rpm3e76774f741755639ff4ef359ec9994757280248a41d8c80345e2e6874a0e2b1-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch.rpm3e76774f741755639ff4ef359ec9994757280248a41d8c80345e2e6874a0e2b1-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.162.1.el8_10.x86_64.rpmf32ff3007b859c2f672466133b71b6049f64041586665d2265c02b7aa11e7552-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.162.1.el8_10.x86_64.rpmf32ff3007b859c2f672466133b71b6049f64041586665d2265c02b7aa11e7552-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64.rpm1741425b39cbdfa700b8d18f4d9576c6bbec45185cf7016ae4578cce428e3853-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64.rpm1741425b39cbdfa700b8d18f4d9576c6bbec45185cf7016ae4578cce428e3853-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.162.1.el8_10.x86_64.rpm82458082644176480b5090dbe615a7efb4125cbafd7841815addcb8b80650f4e-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.162.1.el8_10.x86_64.rpm82458082644176480b5090dbe615a7efb4125cbafd7841815addcb8b80650f4e-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64.rpm4b40c973b90f56d9bb8179075866db5262f71bb28b79fc40b14521616fcfc1b2-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64.rpm4b40c973b90f56d9bb8179075866db5262f71bb28b79fc40b14521616fcfc1b2-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64.rpm2bc8066675741a93db383575955c75ac144687e20c8ac74b19ecafa4092c8cf3-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64.rpm2bc8066675741a93db383575955c75ac144687e20c8ac74b19ecafa4092c8cf3-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64.rpm3fb347428f025413dc7b12c4c86c06b9ddf1196f2b8da5744d71e9a323ad166d-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64.rpm3fb347428f025413dc7b12c4c86c06b9ddf1196f2b8da5744d71e9a323ad166d-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64.rpmb6dd9ccfece0fade27a580c4b10fd5feb598f4ce0dc1ec323bbe134e7ed4e27a-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64.rpmb6dd9ccfece0fade27a580c4b10fd5feb598f4ce0dc1ec323bbe134e7ed4e27a-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.162.1.el8_10.x86_64.rpmdd81ea09e140b83c372593a03bd68c824f9825bb86dc3017885cfd339570f9f4-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.162.1.el8_10.x86_64.rpmdd81ea09e140b83c372593a03bd68c824f9825bb86dc3017885cfd339570f9f4-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.162.1.el8_10.noarch.rpm4bb1dd13bff77dcea638fcc997cc654a648ef1448867e24387ce999cc5d72404-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.162.1.el8_10.noarch.rpm4bb1dd13bff77dcea638fcc997cc654a648ef1448867e24387ce999cc5d72404-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.162.1.el8_10.x86_64.rpm37f23d47867d6ae172fc25d91718087e8ff08a195bb2771adaf400fa6d5866ea-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.162.1.el8_10.x86_64.rpm37f23d47867d6ae172fc25d91718087e8ff08a195bb2771adaf400fa6d5866ea-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.162.1.el8_10.x86_64.rpm400c2105dd6c6cc4828e17bc80c01d17265bd4ebac8f9553e25895b3566d92c3-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.162.1.el8_10.x86_64.rpm400c2105dd6c6cc4828e17bc80c01d17265bd4ebac8f9553e25895b3566d92c3-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64.rpm5817da565e6ae3c08ecb1b5556a632bc9fc0867ead60e8cb094acc5b6292bd6e-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64.rpm5817da565e6ae3c08ecb1b5556a632bc9fc0867ead60e8cb094acc5b6292bd6e-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.162.1.el8_10.x86_64.rpm866d63167500268240ca86ba9d8a7832e5ad9fda5b8cd5a0f403d971014d6525-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.162.1.el8_10.x86_64.rpm866d63167500268240ca86ba9d8a7832e5ad9fda5b8cd5a0f403d971014d6525-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64.rpme96e53291ec836315404df4e065dd23ee37a4aabfbfb4694bdd9b988f8fccf20-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64.rpme96e53291ec836315404df4e065dd23ee37a4aabfbfb4694bdd9b988f8fccf20-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64.rpm07c81fa22e919393b225c204b6644975ce22e7106f0231a6e535757273f0697d-ol8_x86_64_codeready_builder
perf-4.18.0-553.162.1.el8_10.x86_64.rpm73ff891149ef2968efe5c2094c56db370164751a65b16975679bff36acdc5d92-ol8_x86_64_baseos_latest
perf-4.18.0-553.162.1.el8_10.x86_64.rpm73ff891149ef2968efe5c2094c56db370164751a65b16975679bff36acdc5d92-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.162.1.el8_10.x86_64.rpmf6ed36a2725aba6c27b02cbd75c4664b8f25ddcfaa550cd57fc5000ace703b1d-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.162.1.el8_10.x86_64.rpmf6ed36a2725aba6c27b02cbd75c4664b8f25ddcfaa550cd57fc5000ace703b1d-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights