ELSA-2026-68531
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-68531
ELSA-2026-68531 - kernel security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-09-18 |
Description
[4.18.0-553.164.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
[4.18.0-553.164.1]
- net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (Izabela Bakollari) [RHEL-244096] {CVE-2026-72298}
- ipv6: sit: reload inner IPv6 header after GSO offloads (Jamie Bainbridge) [RHEL-225905] {CVE-2026-53228}
- ipvlan: Make the addrs_lock be per port (Jamie Bainbridge) [RHEL-229962] {CVE-2026-23103}
- xfrm: Fix dev use-after-free in xfrm async resumption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663}
- xfrm: hold dev ref until after transport_finish NF_HOOK (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663}
- xfrm: hold device only for the asynchronous decryption (Sabrina Dubroca) [RHEL-232949] {CVE-2026-31663}
- xfrm: input: hold netns during deferred transport reinjection (Sabrina Dubroca) [RHEL-227504] {CVE-2026-63919}
- xfrm: fix stale skb->prev after async crypto steals a GSO segment (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426}
- xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() (Sabrina Dubroca) [RHEL-236099] {CVE-2026-68426}
- xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (Sabrina Dubroca) [RHEL-227976] {CVE-2026-53239}
- ip6: vti: Use ip6_tnl.net in vti6_changelink(). (Sabrina Dubroca) [RHEL-231741] {CVE-2026-63917}
- ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). (Sabrina Dubroca) [RHEL-228934] {CVE-2026-63921}
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (Jamie Bainbridge) [RHEL-226122] {CVE-2026-46266}
- ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (Jamie Bainbridge) [RHEL-227265] {CVE-2026-64002}
- ppp: require CAP_NET_ADMIN in target netns for unattached ioctls (Jamie Bainbridge) [RHEL-227981] {CVE-2026-53075}
- ipv6: mcast: Fix use-after-free when processing MLD queries (Jamie Bainbridge) [RHEL-226057] {CVE-2026-53275}
- net: guard timestamp cmsgs to real error queue skbs (Jamie Bainbridge) [RHEL-225848] {CVE-2026-53223}
- flow_dissector: do not dissect PPPoE PFC frames (Jamie Bainbridge) [RHEL-232609] {CVE-2026-46306}
- ipv6: prevent possible UaF in addrconf_permanent_addr() (Jamie Bainbridge) [RHEL-225595] {CVE-2026-43339}
- net: slip: serialize receive against buffer reallocation (Michal Schmidt) [RHEL-237390] {CVE-2026-68143}
- slip: not call free_netdev before rtnl_unlock in slip_open (Michal Schmidt) [RHEL-237390]
- slip: Fix use-after-free Read in slip_open (Michal Schmidt) [RHEL-237390]
- slip: Fix memory leak in slip_open error path (Michal Schmidt) [RHEL-237390]
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230663] {CVE-2026-53131}
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230607] {CVE-2026-43233}
- ALSA: timer: Fix UAF at snd_timer_user_params() (CKI Backport Bot) [RHEL-228683] {CVE-2026-53192}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228832] {CVE-2026-52920}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225240] {CVE-2026-53268}
- IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CKI Backport Bot) [RHEL-191599] {CVE-2026-53176}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 8 (aarch64) | kernel-4.18.0-553.164.1.el8_10.src.rpm | 42c0f617cbc1d42f648f010f7957d021520e9d1ca14e4b7f89bbb30b4975b968 | - | ol8_aarch64_baseos_latest |
| kernel-4.18.0-553.164.1.el8_10.src.rpm | 42c0f617cbc1d42f648f010f7957d021520e9d1ca14e4b7f89bbb30b4975b968 | - | ol8_aarch64_codeready_builder | |
| kernel-4.18.0-553.164.1.el8_10.src.rpm | 42c0f617cbc1d42f648f010f7957d021520e9d1ca14e4b7f89bbb30b4975b968 | - | ol8_aarch64_u10_baseos_patch | |
| bpftool-4.18.0-553.164.1.el8_10.aarch64.rpm | 510f2a610e78be72ce8c5ff83c2b31e0523102127f0c93a66c8b961f7c3cca79 | - | ol8_aarch64_baseos_latest | |
| bpftool-4.18.0-553.164.1.el8_10.aarch64.rpm | 510f2a610e78be72ce8c5ff83c2b31e0523102127f0c93a66c8b961f7c3cca79 | - | ol8_aarch64_u10_baseos_patch | |
| kernel-cross-headers-4.18.0-553.164.1.el8_10.aarch64.rpm | 4df63744c5b38caa3d9467c9d13d388887a46afee78fed92fb9e6c8c0a5c5d7a | - | ol8_aarch64_baseos_latest | |
| kernel-cross-headers-4.18.0-553.164.1.el8_10.aarch64.rpm | 4df63744c5b38caa3d9467c9d13d388887a46afee78fed92fb9e6c8c0a5c5d7a | - | ol8_aarch64_u10_baseos_patch | |
| kernel-headers-4.18.0-553.164.1.el8_10.aarch64.rpm | a948d84a2a75369275b5253fe14de3358cc533e48df01e4d8fe6a4cfa8ac6183 | - | ol8_aarch64_baseos_latest | |
| kernel-headers-4.18.0-553.164.1.el8_10.aarch64.rpm | a948d84a2a75369275b5253fe14de3358cc533e48df01e4d8fe6a4cfa8ac6183 | - | ol8_aarch64_u10_baseos_patch | |
| kernel-tools-4.18.0-553.164.1.el8_10.aarch64.rpm | 30ae782c5c18d586e3dd9439cfc1fff8a2d2d91862a4b10e02e7f4e2cfa37f02 | - | ol8_aarch64_baseos_latest | |
| kernel-tools-4.18.0-553.164.1.el8_10.aarch64.rpm | 30ae782c5c18d586e3dd9439cfc1fff8a2d2d91862a4b10e02e7f4e2cfa37f02 | - | ol8_aarch64_u10_baseos_patch | |
| kernel-tools-libs-4.18.0-553.164.1.el8_10.aarch64.rpm | 4d725ed66b3a5b149770c26744ca3c912eb878e94b07a923b95aa9320a99ff7c | - | ol8_aarch64_baseos_latest | |
| kernel-tools-libs-4.18.0-553.164.1.el8_10.aarch64.rpm | 4d725ed66b3a5b149770c26744ca3c912eb878e94b07a923b95aa9320a99ff7c | - | ol8_aarch64_u10_baseos_patch | |
| kernel-tools-libs-devel-4.18.0-553.164.1.el8_10.aarch64.rpm | f462d110d593016a5feaa3215334825d5c909390963677e9236a083ca8858815 | - | ol8_aarch64_codeready_builder | |
| perf-4.18.0-553.164.1.el8_10.aarch64.rpm | 29fa0d26a406fcba8e1d3828b37c3b1d8b59e26cd79c618382429ff8dbf8f819 | - | ol8_aarch64_baseos_latest | |
| perf-4.18.0-553.164.1.el8_10.aarch64.rpm | 29fa0d26a406fcba8e1d3828b37c3b1d8b59e26cd79c618382429ff8dbf8f819 | - | ol8_aarch64_u10_baseos_patch | |
| python3-perf-4.18.0-553.164.1.el8_10.aarch64.rpm | c5f8cccec6b74f94efb404dde299dc90e5a70f8d1f5c52244fcd7c00885ae118 | - | ol8_aarch64_baseos_latest | |
| python3-perf-4.18.0-553.164.1.el8_10.aarch64.rpm | c5f8cccec6b74f94efb404dde299dc90e5a70f8d1f5c52244fcd7c00885ae118 | - | ol8_aarch64_u10_baseos_patch | |
| Oracle Linux 8 (x86_64) | kernel-4.18.0-553.164.1.el8_10.src.rpm | 42c0f617cbc1d42f648f010f7957d021520e9d1ca14e4b7f89bbb30b4975b968 | - | ol8_x86_64_baseos_latest |
| kernel-4.18.0-553.164.1.el8_10.src.rpm | 42c0f617cbc1d42f648f010f7957d021520e9d1ca14e4b7f89bbb30b4975b968 | - | ol8_x86_64_codeready_builder | |
| kernel-4.18.0-553.164.1.el8_10.src.rpm | 42c0f617cbc1d42f648f010f7957d021520e9d1ca14e4b7f89bbb30b4975b968 | - | ol8_x86_64_u10_baseos_patch | |
| bpftool-4.18.0-553.164.1.el8_10.x86_64.rpm | b766787f6917e04912c10a08ddfc4560f3eaeca885fb60c5cb1e7804beadf89c | - | ol8_x86_64_baseos_latest | |
| bpftool-4.18.0-553.164.1.el8_10.x86_64.rpm | b766787f6917e04912c10a08ddfc4560f3eaeca885fb60c5cb1e7804beadf89c | - | ol8_x86_64_u10_baseos_patch | |
| kernel-4.18.0-553.164.1.el8_10.x86_64.rpm | b91156e4fbfa2e8a66cbd7a5747573be16c855b827333310095965ccb7aba5a8 | - | ol8_x86_64_baseos_latest | |
| kernel-4.18.0-553.164.1.el8_10.x86_64.rpm | b91156e4fbfa2e8a66cbd7a5747573be16c855b827333310095965ccb7aba5a8 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-abi-stablelists-4.18.0-553.164.1.el8_10.noarch.rpm | a8df5954853b1db6f95ac7b3acd0d8d9b86ef6d6004f2426143a81f368bdabb5 | - | ol8_x86_64_baseos_latest | |
| kernel-abi-stablelists-4.18.0-553.164.1.el8_10.noarch.rpm | a8df5954853b1db6f95ac7b3acd0d8d9b86ef6d6004f2426143a81f368bdabb5 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-core-4.18.0-553.164.1.el8_10.x86_64.rpm | 6ec9fdf9a9d211e2def7e9889090b7ee90b9e104ccac8ac9da3165c9bacd9719 | - | ol8_x86_64_baseos_latest | |
| kernel-core-4.18.0-553.164.1.el8_10.x86_64.rpm | 6ec9fdf9a9d211e2def7e9889090b7ee90b9e104ccac8ac9da3165c9bacd9719 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-cross-headers-4.18.0-553.164.1.el8_10.x86_64.rpm | 4a93bd33275c0b18a4607bfbb9a26bbe81c288a3c6bf7071ef03b42bf4f640da | - | ol8_x86_64_baseos_latest | |
| kernel-cross-headers-4.18.0-553.164.1.el8_10.x86_64.rpm | 4a93bd33275c0b18a4607bfbb9a26bbe81c288a3c6bf7071ef03b42bf4f640da | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-4.18.0-553.164.1.el8_10.x86_64.rpm | 0d99e73e1e9956f4a5dc5414a89f32181b1fb3a75cd96d3937eea84fb394880a | - | ol8_x86_64_baseos_latest | |
| kernel-debug-4.18.0-553.164.1.el8_10.x86_64.rpm | 0d99e73e1e9956f4a5dc5414a89f32181b1fb3a75cd96d3937eea84fb394880a | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-core-4.18.0-553.164.1.el8_10.x86_64.rpm | aa44174638424971fc979b36fce1d1e485c17007457912dfccdff7394ccf362e | - | ol8_x86_64_baseos_latest | |
| kernel-debug-core-4.18.0-553.164.1.el8_10.x86_64.rpm | aa44174638424971fc979b36fce1d1e485c17007457912dfccdff7394ccf362e | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-devel-4.18.0-553.164.1.el8_10.x86_64.rpm | 3564db678cea24e840551a399d2821c4f498db589466e8fd927f855df48fbe74 | - | ol8_x86_64_baseos_latest | |
| kernel-debug-devel-4.18.0-553.164.1.el8_10.x86_64.rpm | 3564db678cea24e840551a399d2821c4f498db589466e8fd927f855df48fbe74 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-modules-4.18.0-553.164.1.el8_10.x86_64.rpm | 5691b39e1bbf20cce4fdb6fa51d70b114a5cace26d2e7e2186cf836efc0e07d1 | - | ol8_x86_64_baseos_latest | |
| kernel-debug-modules-4.18.0-553.164.1.el8_10.x86_64.rpm | 5691b39e1bbf20cce4fdb6fa51d70b114a5cace26d2e7e2186cf836efc0e07d1 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-modules-extra-4.18.0-553.164.1.el8_10.x86_64.rpm | 2b9c0887e6cb1b0e45df39d5cc26a7f1d1a7c6b8faeffef5d7ad8e7609d71f74 | - | ol8_x86_64_baseos_latest | |
| kernel-debug-modules-extra-4.18.0-553.164.1.el8_10.x86_64.rpm | 2b9c0887e6cb1b0e45df39d5cc26a7f1d1a7c6b8faeffef5d7ad8e7609d71f74 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-devel-4.18.0-553.164.1.el8_10.x86_64.rpm | a67808554c3eb25285b29adf2fa7573530459a0aa2c36912bad6f39fa297bc02 | - | ol8_x86_64_baseos_latest | |
| kernel-devel-4.18.0-553.164.1.el8_10.x86_64.rpm | a67808554c3eb25285b29adf2fa7573530459a0aa2c36912bad6f39fa297bc02 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-doc-4.18.0-553.164.1.el8_10.noarch.rpm | bb726dec6fab9a4026a20ab411d9ff7eeae558d635d95ba281102fc1fab787a1 | - | ol8_x86_64_baseos_latest | |
| kernel-doc-4.18.0-553.164.1.el8_10.noarch.rpm | bb726dec6fab9a4026a20ab411d9ff7eeae558d635d95ba281102fc1fab787a1 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-headers-4.18.0-553.164.1.el8_10.x86_64.rpm | 2ef1a59fbc3ffe50f2ab8e03b9c8806cd3956953229c89cffbaa6684d84b7e2d | - | ol8_x86_64_baseos_latest | |
| kernel-headers-4.18.0-553.164.1.el8_10.x86_64.rpm | 2ef1a59fbc3ffe50f2ab8e03b9c8806cd3956953229c89cffbaa6684d84b7e2d | - | ol8_x86_64_u10_baseos_patch | |
| kernel-modules-4.18.0-553.164.1.el8_10.x86_64.rpm | da4a697fa5cf655c3c7a6ff86208485aa84b666dd028ec0d1ad09e9eae44eae3 | - | ol8_x86_64_baseos_latest | |
| kernel-modules-4.18.0-553.164.1.el8_10.x86_64.rpm | da4a697fa5cf655c3c7a6ff86208485aa84b666dd028ec0d1ad09e9eae44eae3 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-modules-extra-4.18.0-553.164.1.el8_10.x86_64.rpm | dab82601ff8791aeef2a089512c24001b6397fac934fcb9f89101909f8f7db48 | - | ol8_x86_64_baseos_latest | |
| kernel-modules-extra-4.18.0-553.164.1.el8_10.x86_64.rpm | dab82601ff8791aeef2a089512c24001b6397fac934fcb9f89101909f8f7db48 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-tools-4.18.0-553.164.1.el8_10.x86_64.rpm | c206bab7f0e4bfe0c924a4659b35770463e2a2fb052d1ec44a0989ddf7fddca0 | - | ol8_x86_64_baseos_latest | |
| kernel-tools-4.18.0-553.164.1.el8_10.x86_64.rpm | c206bab7f0e4bfe0c924a4659b35770463e2a2fb052d1ec44a0989ddf7fddca0 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-tools-libs-4.18.0-553.164.1.el8_10.x86_64.rpm | 6ec62174328f725c7c90e96844f163b8cddf0417abaa172ba9fec4098ffdd68b | - | ol8_x86_64_baseos_latest | |
| kernel-tools-libs-4.18.0-553.164.1.el8_10.x86_64.rpm | 6ec62174328f725c7c90e96844f163b8cddf0417abaa172ba9fec4098ffdd68b | - | ol8_x86_64_u10_baseos_patch | |
| kernel-tools-libs-devel-4.18.0-553.164.1.el8_10.x86_64.rpm | 0d6b295d0f5968752a0ff7f7f80c438f2ffbd3ee5ede6c9bc2514674bd313bf9 | - | ol8_x86_64_codeready_builder | |
| perf-4.18.0-553.164.1.el8_10.x86_64.rpm | 7f8ddbd1bdf099898a1d662072cca6d6200dce015dcc3454065734f2c4f0a104 | - | ol8_x86_64_baseos_latest | |
| perf-4.18.0-553.164.1.el8_10.x86_64.rpm | 7f8ddbd1bdf099898a1d662072cca6d6200dce015dcc3454065734f2c4f0a104 | - | ol8_x86_64_u10_baseos_patch | |
| python3-perf-4.18.0-553.164.1.el8_10.x86_64.rpm | 7870d2bba7c2e29a2fb6899ed20d66279a6d6cf226e47b0894313aff630e8330 | - | ol8_x86_64_baseos_latest | |
| python3-perf-4.18.0-553.164.1.el8_10.x86_64.rpm | 7870d2bba7c2e29a2fb6899ed20d66279a6d6cf226e47b0894313aff630e8330 | - | ol8_x86_64_u10_baseos_patch | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
