ELSA-2026-75747
- ULN >
- Oracle Linux Errata repository >
- ELSA-2026-75747
ELSA-2026-75747 - kernel security, bug fix, and enhancement update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2026-10-05 |
Description
[4.18.0-553.171.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
[4.18.0-553.171.1]
- nvme/ioctl: check SUBMIT_IO with CAP_SYS_ADMIN (Chris Leech) [RHEL-269479] {CVE-2026-90227}
- s390/topology: Use zero-based numbering for containing entities (Jan Polensky) [RHEL-252199]
- s390/vfio_ccw: Implement a crw lock (Jan Polensky) [RHEL-252194]
- s390/vfio_ccw: Selectively expand io_mutex (Jan Polensky) [RHEL-252194]
- s390/vfio_ccw: Cancel existing workqueues (Jan Polensky) [RHEL-252194]
- s390/vfio_ccw: Ensure index for read/write regions are within range (Jan Polensky) [RHEL-252194]
- s390/vfio_ccw: Calculate idal length based on idaw type (Jan Polensky) [RHEL-252194]
- s390/vfio_ccw: Ensure first IDAW remains constant (Jan Polensky) [RHEL-252194]
- s390/vfio_ccw: Fix out of bounds check on CCW array (Jan Polensky) [RHEL-252194]
- s390/vfio_ccw: Limit the number of channel program segments (Jan Polensky) [RHEL-252194]
- s390/vfio_ccw: Free all memory if cp_init() fails (Jan Polensky) [RHEL-252194]
- nvme-pci: fix mempool alloc size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756}
- nvme-pci: use max of PRP or SGL for iod size (Maurizio Lombardi) [RHEL-230386] {CVE-2022-50756}
- nvme: add missing SRCU grace period in error path (CKI Backport Bot) [RHEL-270894] {CVE-2026-89972}
- netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CKI Backport Bot) [RHEL-270661] {CVE-2026-97417}
- crypto: af_alg - Cap AEAD AD length to 0x80000000 (Pablo Alessandro Santos Hugen) [RHEL-259055] {CVE-2026-52972}
- vlan: fix skb_under_panic and races when toggling HW VLAN offload (Jamie Bainbridge) [RHEL-254254]
- macvlan: inherit needed_headroom and needed_tailroom from lowerdev (Jamie Bainbridge) [RHEL-254254]
- ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (Jamie Bainbridge) [RHEL-254254] {CVE-2026-74744}
- vxlan: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-238885] {CVE-2026-68432}
- tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (Jamie Bainbridge) [RHEL-230777] {CVE-2026-63992}
- net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247003] {CVE-2026-72052}
- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (Jamie Bainbridge) [RHEL-247023] {CVE-2026-63829}
- net: ip_gre: Accept IFLA_INFO_DATA-less configuration (Jamie Bainbridge) [RHEL-247023]
- net: ip_gre: Separate ERSPAN newlink / changelink callbacks (Jamie Bainbridge) [RHEL-247023]
- tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]() (Jamie Bainbridge) [RHEL-259654] {CVE-2026-63994}
- NFSD: Force all NFSv4.2 COPY requests to be synchronous (Roberto Bergantinos Corpas) [RHEL-266661]
- nvme-tcp: fix host memory disclosure on R2T for a read command (CKI Backport Bot) [RHEL-263413] {CVE-2026-89481}
- netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CKI Backport Bot) [RHEL-260589] {CVE-2026-74569}
- KVM: s390: vsie: zero stale crypto bits (CKI Backport Bot) [RHEL-258125] {CVE-2026-80921}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (Mohammad Heib) [RHEL-225698] {CVE-2026-53230}
- ipvs: clear IPv4 options after rebasing tunnel ICMP errors (Phil Sutter) [RHEL-254393] {CVE-2026-74669}
- ipvs: ensure inner headers in ICMP errors are in headroom (Phil Sutter) [RHEL-254393]
- KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CKI Backport Bot) [RHEL-254507] {CVE-2026-74516}
- netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CKI Backport Bot) [RHEL-252413] {CVE-2026-72255}
- netfilter: flowtable: publish GC-visible tuple last (CKI Backport Bot) [RHEL-250542] {CVE-2026-74746}
- RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kamal Heib) [RHEL-231374] {CVE-2023-54048}
- gfs2: add some missing log locking (Andrew Price) [RHEL-230306] {CVE-2026-53049}
- gfs2: Move gfs2_remove_from_journal to log.c (Andrew Price) [RHEL-230306] {CVE-2026-53049}
- gfs2: Fix unlikely race in gdlm_put_lock (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242}
- gfs2: Unlock fewer glocks on unmount (CKI Backport Bot) [RHEL-231267] {CVE-2025-40242}
- media: tuner: xc5000: Fix use-after-free in xc5000_release (Kate Hsuan) [RHEL-231646] {CVE-2025-39994}
- media: tunner: xc5000: Refactor firmware load (Kate Hsuan) [RHEL-231646]
- net/sched: act_ct: Only release RCU read lock after ct_ft (Ivan Vecera) [RHEL-229652] {CVE-2026-46319}
- sched: act_ct: take care of padding in struct zones_ht_key (Ivan Vecera) [RHEL-229652] {CVE-2026-46319}
- sched: act_ct: add netns into the key of tcf_ct_flow_table (Ivan Vecera) [RHEL-229652] {CVE-2026-46319}
- RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CKI Backport Bot) [RHEL-232580] {CVE-2026-45856}
- gfs2: Fix slab-use-after-free in qd_put (CKI Backport Bot) [RHEL-227251] {CVE-2026-45861}
- net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105}
- net_sched: qfq: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-226861] {CVE-2026-23105}
- ipvs: clear the svc scheduler ptr early on edit (CKI Backport Bot) [RHEL-225976] {CVE-2026-53270}
- KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CKI Backport Bot) [RHEL-214936] {CVE-2026-63794}
Related CVEs
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 8 (aarch64) | kernel-4.18.0-553.171.1.el8_10.src.rpm | 191eb6e9609e2b28c1e824f57063fa55f40230b278d3666dbadc6a47947c0869 | - | ol8_aarch64_baseos_latest |
| kernel-4.18.0-553.171.1.el8_10.src.rpm | 191eb6e9609e2b28c1e824f57063fa55f40230b278d3666dbadc6a47947c0869 | - | ol8_aarch64_codeready_builder | |
| kernel-4.18.0-553.171.1.el8_10.src.rpm | 191eb6e9609e2b28c1e824f57063fa55f40230b278d3666dbadc6a47947c0869 | - | ol8_aarch64_u10_baseos_patch | |
| bpftool-4.18.0-553.171.1.el8_10.aarch64.rpm | 1d72d34a7ecd337f74ae366099a5f5c0e041d50495841713c5c9d8cef45c8b7b | - | ol8_aarch64_baseos_latest | |
| bpftool-4.18.0-553.171.1.el8_10.aarch64.rpm | 1d72d34a7ecd337f74ae366099a5f5c0e041d50495841713c5c9d8cef45c8b7b | - | ol8_aarch64_u10_baseos_patch | |
| kernel-cross-headers-4.18.0-553.171.1.el8_10.aarch64.rpm | 8432012aa8db35a814ca1b8ad7563c372f03f4f375616c234eda4296e06410c8 | - | ol8_aarch64_baseos_latest | |
| kernel-cross-headers-4.18.0-553.171.1.el8_10.aarch64.rpm | 8432012aa8db35a814ca1b8ad7563c372f03f4f375616c234eda4296e06410c8 | - | ol8_aarch64_u10_baseos_patch | |
| kernel-headers-4.18.0-553.171.1.el8_10.aarch64.rpm | 6fe38887d78be14629815e65d88d1ec4f0f4460acd20c21522a6bc8873c50561 | - | ol8_aarch64_baseos_latest | |
| kernel-headers-4.18.0-553.171.1.el8_10.aarch64.rpm | 6fe38887d78be14629815e65d88d1ec4f0f4460acd20c21522a6bc8873c50561 | - | ol8_aarch64_u10_baseos_patch | |
| kernel-tools-4.18.0-553.171.1.el8_10.aarch64.rpm | 29b26369062b53dc4f786262ce34b1d4e7a33dcdc1575f34a47e88c8b4ebe1b4 | - | ol8_aarch64_baseos_latest | |
| kernel-tools-4.18.0-553.171.1.el8_10.aarch64.rpm | 29b26369062b53dc4f786262ce34b1d4e7a33dcdc1575f34a47e88c8b4ebe1b4 | - | ol8_aarch64_u10_baseos_patch | |
| kernel-tools-libs-4.18.0-553.171.1.el8_10.aarch64.rpm | e8ef1a62be7e134e83bbadff1df58b422a02097bba221a58c1ca3ed74ad0a02e | - | ol8_aarch64_baseos_latest | |
| kernel-tools-libs-4.18.0-553.171.1.el8_10.aarch64.rpm | e8ef1a62be7e134e83bbadff1df58b422a02097bba221a58c1ca3ed74ad0a02e | - | ol8_aarch64_u10_baseos_patch | |
| kernel-tools-libs-devel-4.18.0-553.171.1.el8_10.aarch64.rpm | 5e8daaaef6993d54049d284c1539d4bb7e7d9804c03b26b80cead911d48e6d7d | - | ol8_aarch64_codeready_builder | |
| perf-4.18.0-553.171.1.el8_10.aarch64.rpm | 40fcd9fa86c43e853e89748c0fa1062b17a0f7d0415f39110651f8c381c87ee0 | - | ol8_aarch64_baseos_latest | |
| perf-4.18.0-553.171.1.el8_10.aarch64.rpm | 40fcd9fa86c43e853e89748c0fa1062b17a0f7d0415f39110651f8c381c87ee0 | - | ol8_aarch64_u10_baseos_patch | |
| python3-perf-4.18.0-553.171.1.el8_10.aarch64.rpm | ef130a786e654f20b0258ae83913fc686932231016131328870bcc77c318e452 | - | ol8_aarch64_baseos_latest | |
| python3-perf-4.18.0-553.171.1.el8_10.aarch64.rpm | ef130a786e654f20b0258ae83913fc686932231016131328870bcc77c318e452 | - | ol8_aarch64_u10_baseos_patch | |
| Oracle Linux 8 (x86_64) | kernel-4.18.0-553.171.1.el8_10.src.rpm | 191eb6e9609e2b28c1e824f57063fa55f40230b278d3666dbadc6a47947c0869 | - | ol8_x86_64_baseos_latest |
| kernel-4.18.0-553.171.1.el8_10.src.rpm | 191eb6e9609e2b28c1e824f57063fa55f40230b278d3666dbadc6a47947c0869 | - | ol8_x86_64_codeready_builder | |
| kernel-4.18.0-553.171.1.el8_10.src.rpm | 191eb6e9609e2b28c1e824f57063fa55f40230b278d3666dbadc6a47947c0869 | - | ol8_x86_64_u10_baseos_patch | |
| bpftool-4.18.0-553.171.1.el8_10.x86_64.rpm | 4bf682a961f143bd20d5e56ce916f2aa8c8cb5dea801352b7ae90e1f7674c79a | - | ol8_x86_64_baseos_latest | |
| bpftool-4.18.0-553.171.1.el8_10.x86_64.rpm | 4bf682a961f143bd20d5e56ce916f2aa8c8cb5dea801352b7ae90e1f7674c79a | - | ol8_x86_64_u10_baseos_patch | |
| kernel-4.18.0-553.171.1.el8_10.x86_64.rpm | 2a06709db3c483722336a3bb17fb9d4a680c92d5fae9cc36be73cef3c61c6cb1 | - | ol8_x86_64_baseos_latest | |
| kernel-4.18.0-553.171.1.el8_10.x86_64.rpm | 2a06709db3c483722336a3bb17fb9d4a680c92d5fae9cc36be73cef3c61c6cb1 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-abi-stablelists-4.18.0-553.171.1.el8_10.noarch.rpm | 22b1f0b79626290e65b1bfe9012dcb01dba1b917ae7fa44f415a4d0bfc301d07 | - | ol8_x86_64_baseos_latest | |
| kernel-abi-stablelists-4.18.0-553.171.1.el8_10.noarch.rpm | 22b1f0b79626290e65b1bfe9012dcb01dba1b917ae7fa44f415a4d0bfc301d07 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-core-4.18.0-553.171.1.el8_10.x86_64.rpm | de4974028ae20de24a9377bb8a80c94e99919488750325b957ef0dd4bcd07b69 | - | ol8_x86_64_baseos_latest | |
| kernel-core-4.18.0-553.171.1.el8_10.x86_64.rpm | de4974028ae20de24a9377bb8a80c94e99919488750325b957ef0dd4bcd07b69 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-cross-headers-4.18.0-553.171.1.el8_10.x86_64.rpm | 95a318842f3ac71beeebb55bd81334392b24204bbeb40355458eb286683f9c7a | - | ol8_x86_64_baseos_latest | |
| kernel-cross-headers-4.18.0-553.171.1.el8_10.x86_64.rpm | 95a318842f3ac71beeebb55bd81334392b24204bbeb40355458eb286683f9c7a | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-4.18.0-553.171.1.el8_10.x86_64.rpm | 5caa40346a2a99fcece758d74f3e51bcc46f5caa78b93e8ee2bafa340d3d2d0b | - | ol8_x86_64_baseos_latest | |
| kernel-debug-4.18.0-553.171.1.el8_10.x86_64.rpm | 5caa40346a2a99fcece758d74f3e51bcc46f5caa78b93e8ee2bafa340d3d2d0b | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-core-4.18.0-553.171.1.el8_10.x86_64.rpm | 9ab180db58733540a9f603e220f448b4cda18b2ddc5788d66e1aa484d0480a6d | - | ol8_x86_64_baseos_latest | |
| kernel-debug-core-4.18.0-553.171.1.el8_10.x86_64.rpm | 9ab180db58733540a9f603e220f448b4cda18b2ddc5788d66e1aa484d0480a6d | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-devel-4.18.0-553.171.1.el8_10.x86_64.rpm | f030a7a64476283d550f6b1b0e15cea5d694e695acdd045f1b877f538306cb65 | - | ol8_x86_64_baseos_latest | |
| kernel-debug-devel-4.18.0-553.171.1.el8_10.x86_64.rpm | f030a7a64476283d550f6b1b0e15cea5d694e695acdd045f1b877f538306cb65 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-modules-4.18.0-553.171.1.el8_10.x86_64.rpm | 26a19e372f36571c6924b535a7741a93cc2bb09f402acd59d5ce15172340ee2d | - | ol8_x86_64_baseos_latest | |
| kernel-debug-modules-4.18.0-553.171.1.el8_10.x86_64.rpm | 26a19e372f36571c6924b535a7741a93cc2bb09f402acd59d5ce15172340ee2d | - | ol8_x86_64_u10_baseos_patch | |
| kernel-debug-modules-extra-4.18.0-553.171.1.el8_10.x86_64.rpm | b9ca9db5c3a805b264cb0bcd60e4e0ed90db4966c2b89cacb603d9703852a8b2 | - | ol8_x86_64_baseos_latest | |
| kernel-debug-modules-extra-4.18.0-553.171.1.el8_10.x86_64.rpm | b9ca9db5c3a805b264cb0bcd60e4e0ed90db4966c2b89cacb603d9703852a8b2 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-devel-4.18.0-553.171.1.el8_10.x86_64.rpm | 425f1f150da3a32572a524620c2c82ad029bc4f3d1de7b1525f2184ea14a64f0 | - | ol8_x86_64_baseos_latest | |
| kernel-devel-4.18.0-553.171.1.el8_10.x86_64.rpm | 425f1f150da3a32572a524620c2c82ad029bc4f3d1de7b1525f2184ea14a64f0 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-doc-4.18.0-553.171.1.el8_10.noarch.rpm | 94e134e50ee38cdbc71fb961cbbe5e0bb895e2ac9aca022cc1ed84a6f7c29d3e | - | ol8_x86_64_baseos_latest | |
| kernel-doc-4.18.0-553.171.1.el8_10.noarch.rpm | 94e134e50ee38cdbc71fb961cbbe5e0bb895e2ac9aca022cc1ed84a6f7c29d3e | - | ol8_x86_64_u10_baseos_patch | |
| kernel-headers-4.18.0-553.171.1.el8_10.x86_64.rpm | 436eb2aff936dae6fe4086b277e0f4245359e0dc5b59e9bbe2f6e73d7a8c5933 | - | ol8_x86_64_baseos_latest | |
| kernel-headers-4.18.0-553.171.1.el8_10.x86_64.rpm | 436eb2aff936dae6fe4086b277e0f4245359e0dc5b59e9bbe2f6e73d7a8c5933 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-modules-4.18.0-553.171.1.el8_10.x86_64.rpm | d708d56b65ffb391234dfc64ea20d98ab5fc40280528d3d9692a84a454fd82ca | - | ol8_x86_64_baseos_latest | |
| kernel-modules-4.18.0-553.171.1.el8_10.x86_64.rpm | d708d56b65ffb391234dfc64ea20d98ab5fc40280528d3d9692a84a454fd82ca | - | ol8_x86_64_u10_baseos_patch | |
| kernel-modules-extra-4.18.0-553.171.1.el8_10.x86_64.rpm | af58722c8062956f1d15a453f99864927edf29690b86f4df8df468a2e292d657 | - | ol8_x86_64_baseos_latest | |
| kernel-modules-extra-4.18.0-553.171.1.el8_10.x86_64.rpm | af58722c8062956f1d15a453f99864927edf29690b86f4df8df468a2e292d657 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-tools-4.18.0-553.171.1.el8_10.x86_64.rpm | e93cb4c38d3775ebff3c85b7c20040e58e2edad5598b2d9e4d70e7c03f48f966 | - | ol8_x86_64_baseos_latest | |
| kernel-tools-4.18.0-553.171.1.el8_10.x86_64.rpm | e93cb4c38d3775ebff3c85b7c20040e58e2edad5598b2d9e4d70e7c03f48f966 | - | ol8_x86_64_u10_baseos_patch | |
| kernel-tools-libs-4.18.0-553.171.1.el8_10.x86_64.rpm | 731a2cb77e35962280f3b5e47c4bdd2dbd414651468519881df8788dac2e1f7e | - | ol8_x86_64_baseos_latest | |
| kernel-tools-libs-4.18.0-553.171.1.el8_10.x86_64.rpm | 731a2cb77e35962280f3b5e47c4bdd2dbd414651468519881df8788dac2e1f7e | - | ol8_x86_64_u10_baseos_patch | |
| kernel-tools-libs-devel-4.18.0-553.171.1.el8_10.x86_64.rpm | 02722b2949986268572295bc0a62a288cbf9fe228f9175d7473cb632179919a6 | - | ol8_x86_64_codeready_builder | |
| perf-4.18.0-553.171.1.el8_10.x86_64.rpm | 49c8ac0dc7719e16e87e521ead4161f4b8ad53bbc231a0869f123ea513f1d26e | - | ol8_x86_64_baseos_latest | |
| perf-4.18.0-553.171.1.el8_10.x86_64.rpm | 49c8ac0dc7719e16e87e521ead4161f4b8ad53bbc231a0869f123ea513f1d26e | - | ol8_x86_64_u10_baseos_patch | |
| python3-perf-4.18.0-553.171.1.el8_10.x86_64.rpm | 51470736c9dcf3b4793cbacc0bcc348f4f676e98d8532989b507ad2ddab3ae39 | - | ol8_x86_64_baseos_latest | |
| python3-perf-4.18.0-553.171.1.el8_10.x86_64.rpm | 51470736c9dcf3b4793cbacc0bcc348f4f676e98d8532989b507ad2ddab3ae39 | - | ol8_x86_64_u10_baseos_patch | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
