ELSA-2026-83157

ELSA-2026-83157 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-15

Description


[4.18.0-553.174.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.174.1]
- powerpc/pseries: pci - logic bug (Mamatha Inamdar) [RHEL-240146]
- md/raid5-ppl: fix use-after-free in ppl_do_flush() (CKI Backport Bot) [RHEL-278122] {CVE-2026-93262}
- svcrdma: Reject Write/Reply chunks with segcount 0 (Olga Kornievskaia) [RHEL-275085] {CVE-2026-93228}
- svcrdma: Address an integer overflow (Olga Kornievskaia) [RHEL-275085] {CVE-2024-53151}
- NFSD: Prevent client use-after-free during blocked-lock reaping (Olga Kornievskaia) [RHEL-270899] {CVE-2026-90036}
- svcrdma: Validate Read chunk positions before reconstruction (Olga Kornievskaia) [RHEL-271446] {CVE-2026-89526}
- udp: fix potential use-after-free in tunnel segmentation (Antoine Tenart) [RHEL-268111] {CVE-2026-74705}
- ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CKI Backport Bot) [RHEL-261680] {CVE-2026-72262}
- ALSA: usx2y: bound the hwdep mmap fault offset (CKI Backport Bot) [RHEL-256443] {CVE-2026-74641}
- net/sched: cls_route: fix fastmap use-after-free on filter (CKI Backport Bot) [RHEL-248781] {CVE-2026-74583}
- net/sched: act_tunnel_key: Defer dst_release to RCU callback (CKI Backport Bot) [RHEL-240916] {CVE-2026-68377}

[4.18.0-553.173.1]
- drm/amdkfd: Add TLB flush after MES queue eviction/suspension (Jocelyn Falempe) [RHEL-262108] {CVE-2026-89811}
- drm/amd/display: set new_stream to NULL after release (Jocelyn Falempe) [RHEL-260521] {CVE-2026-68236}
- drm/vmwgfx: use check_add_overflow for shader size+offset bound (Jocelyn Falempe) [RHEL-258131] {CVE-2026-80887}
- drm/amdgpu/vce: fix integer overflow in image size (Jocelyn Falempe) [RHEL-237823 RHEL-268877] {CVE-2026-68108}
- drm/dp/mst: fix buffer overflows in sideband chunk accumulation (Jocelyn Falempe) [RHEL-240862] {CVE-2026-68278}
- ipv6: validate extension header length before copying to cmsg (Antoine Tenart) [RHEL-225371] {CVE-2026-63920}
- wifi: mac80211: defer link RX stats percpu free to RCU (CKI Backport Bot) [RHEL-263760] {CVE-2026-68409}
- cifs: validate DFS referral string offsets (CKI Backport Bot) [RHEL-261990] {CVE-2026-72318}
- openvswitch: vport: fix self-deadlock on release of tunnel ports (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678}
- openvswitch: defer tunnel netdev_put to RCU release (Timothy Redaelli) [RHEL-253844] {CVE-2026-31678}


Related CVEs


CVE-2026-68377
CVE-2026-72262
CVE-2026-74583
CVE-2026-74641
CVE-2026-74705
CVE-2026-89526
CVE-2026-90036
CVE-2026-93228
CVE-2026-93262

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.174.1.el8_10.src.rpm028a233d2d1448b18c05bbcd17aa2d4f8062c991003210ea9b3d2c307c2a26d2-ol8_aarch64_baseos_latest
kernel-4.18.0-553.174.1.el8_10.src.rpm028a233d2d1448b18c05bbcd17aa2d4f8062c991003210ea9b3d2c307c2a26d2-ol8_aarch64_codeready_builder
kernel-4.18.0-553.174.1.el8_10.src.rpm028a233d2d1448b18c05bbcd17aa2d4f8062c991003210ea9b3d2c307c2a26d2-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.174.1.el8_10.aarch64.rpma1fe323c6c595da610d14146b2df2f297ae31caecf4aa9d452f160d454dcb76a-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.174.1.el8_10.aarch64.rpma1fe323c6c595da610d14146b2df2f297ae31caecf4aa9d452f160d454dcb76a-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.174.1.el8_10.aarch64.rpm1340a4c161359e2a423c0eae950195faba8d6e5ccf3b6e9f0172f4f3f95fd5e1-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.174.1.el8_10.aarch64.rpm1340a4c161359e2a423c0eae950195faba8d6e5ccf3b6e9f0172f4f3f95fd5e1-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.174.1.el8_10.aarch64.rpme4bf957e4fabbe52151740be18c99b6e0f7095defa1b06797ac1d520d6dd8173-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.174.1.el8_10.aarch64.rpme4bf957e4fabbe52151740be18c99b6e0f7095defa1b06797ac1d520d6dd8173-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.174.1.el8_10.aarch64.rpm066a5f30cf6fb4d0463102db141958fad13f832fb3f56613051c731a935acd21-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.174.1.el8_10.aarch64.rpm066a5f30cf6fb4d0463102db141958fad13f832fb3f56613051c731a935acd21-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.174.1.el8_10.aarch64.rpmf084373c39f74b0a0e2d161130836f00475960ba9622124851c99df28d6faafb-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.174.1.el8_10.aarch64.rpmf084373c39f74b0a0e2d161130836f00475960ba9622124851c99df28d6faafb-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.174.1.el8_10.aarch64.rpm0cd1a7ef4d39f8a291aaa068b4253fcfb99095699616a63ab636b4d34f79761a-ol8_aarch64_codeready_builder
perf-4.18.0-553.174.1.el8_10.aarch64.rpm6958c92ddc665594c1fe9c9753dac797bf2d1d866a9fc68b402083134985fada-ol8_aarch64_baseos_latest
perf-4.18.0-553.174.1.el8_10.aarch64.rpm6958c92ddc665594c1fe9c9753dac797bf2d1d866a9fc68b402083134985fada-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.174.1.el8_10.aarch64.rpmfedcb96587d7401971362dbd4e8ddba086e2a604858e96b686d6ba232846ab49-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.174.1.el8_10.aarch64.rpmfedcb96587d7401971362dbd4e8ddba086e2a604858e96b686d6ba232846ab49-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.174.1.el8_10.src.rpm028a233d2d1448b18c05bbcd17aa2d4f8062c991003210ea9b3d2c307c2a26d2-ol8_x86_64_baseos_latest
kernel-4.18.0-553.174.1.el8_10.src.rpm028a233d2d1448b18c05bbcd17aa2d4f8062c991003210ea9b3d2c307c2a26d2-ol8_x86_64_codeready_builder
kernel-4.18.0-553.174.1.el8_10.src.rpm028a233d2d1448b18c05bbcd17aa2d4f8062c991003210ea9b3d2c307c2a26d2-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.174.1.el8_10.x86_64.rpmd6a0e5d9ba6cc7a3fe7e38715d38199bfd5f24d7d49e71d47621d1bc27b60c07-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.174.1.el8_10.x86_64.rpmd6a0e5d9ba6cc7a3fe7e38715d38199bfd5f24d7d49e71d47621d1bc27b60c07-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.174.1.el8_10.x86_64.rpmfcad1b46ac4048ed9e9cf36dffb1527bcb609f86258ab2aa3bc7a05c42c9e161-ol8_x86_64_baseos_latest
kernel-4.18.0-553.174.1.el8_10.x86_64.rpmfcad1b46ac4048ed9e9cf36dffb1527bcb609f86258ab2aa3bc7a05c42c9e161-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.174.1.el8_10.noarch.rpm008af95befa12510479e7d7816270ceb430685a21967f04de25f1c3938e660c8-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.174.1.el8_10.noarch.rpm008af95befa12510479e7d7816270ceb430685a21967f04de25f1c3938e660c8-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.174.1.el8_10.x86_64.rpm2b28afc9d2004b7c4923b884dc6f50daf682d6f1a8fbd6c33a69f82c1c65d11e-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.174.1.el8_10.x86_64.rpm2b28afc9d2004b7c4923b884dc6f50daf682d6f1a8fbd6c33a69f82c1c65d11e-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.174.1.el8_10.x86_64.rpm0984077ba1c199f6e4583a213150eec6f29a398a2635baf9342945d9cdf422d8-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.174.1.el8_10.x86_64.rpm0984077ba1c199f6e4583a213150eec6f29a398a2635baf9342945d9cdf422d8-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.174.1.el8_10.x86_64.rpm900ab5dc5c2deb94fa545bbfc30d7d63ab70fd1fad4765687478d43eeb8fbdfb-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.174.1.el8_10.x86_64.rpm900ab5dc5c2deb94fa545bbfc30d7d63ab70fd1fad4765687478d43eeb8fbdfb-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.174.1.el8_10.x86_64.rpm121c15842fc4f39e7c5ca0433f2a8d6c9b7712b26a1467a48941705d6c51512f-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.174.1.el8_10.x86_64.rpm121c15842fc4f39e7c5ca0433f2a8d6c9b7712b26a1467a48941705d6c51512f-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.174.1.el8_10.x86_64.rpm5fe6daa32ff360803929c17045014ce175909a3f122aacf9cd8d1c5c3c9964d3-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.174.1.el8_10.x86_64.rpm5fe6daa32ff360803929c17045014ce175909a3f122aacf9cd8d1c5c3c9964d3-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.174.1.el8_10.x86_64.rpmc10d2ec76e927b7bbbc7899f1204559e16660da2b47bd494a0b9877438ebefe2-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.174.1.el8_10.x86_64.rpmc10d2ec76e927b7bbbc7899f1204559e16660da2b47bd494a0b9877438ebefe2-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.174.1.el8_10.x86_64.rpmd9bde749b16923e0091118081cbf2022b0a90bdc011ddd82396d33b9ac38bc34-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.174.1.el8_10.x86_64.rpmd9bde749b16923e0091118081cbf2022b0a90bdc011ddd82396d33b9ac38bc34-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.174.1.el8_10.x86_64.rpm9897c35d50ebbae623e340b1b14465dec28d12556c584f59611cf33c67cffe9d-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.174.1.el8_10.x86_64.rpm9897c35d50ebbae623e340b1b14465dec28d12556c584f59611cf33c67cffe9d-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.174.1.el8_10.noarch.rpm4fd26c626c206a64771bd71c88908f3dfbde2dd7b1cd2b4d0d04fa6b9a91ec95-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.174.1.el8_10.noarch.rpm4fd26c626c206a64771bd71c88908f3dfbde2dd7b1cd2b4d0d04fa6b9a91ec95-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.174.1.el8_10.x86_64.rpm106134f1f9241ba791486f79f7f2f8c3d54e7c1e3d4596d5edc569acaf523cf3-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.174.1.el8_10.x86_64.rpm106134f1f9241ba791486f79f7f2f8c3d54e7c1e3d4596d5edc569acaf523cf3-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.174.1.el8_10.x86_64.rpm9c0a786830608fcef0961774bb9789e50a117fb7fb43d7e60938405336b5fac0-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.174.1.el8_10.x86_64.rpm9c0a786830608fcef0961774bb9789e50a117fb7fb43d7e60938405336b5fac0-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.174.1.el8_10.x86_64.rpma9453edc849a39df73f4caf83c8b29f168a19a82c100c8ddb2d31c1997c3dcfc-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.174.1.el8_10.x86_64.rpma9453edc849a39df73f4caf83c8b29f168a19a82c100c8ddb2d31c1997c3dcfc-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.174.1.el8_10.x86_64.rpmf43051221f237bdfb6d6af262986367f08547d10d4e18be0af83b58f97663ede-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.174.1.el8_10.x86_64.rpmf43051221f237bdfb6d6af262986367f08547d10d4e18be0af83b58f97663ede-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.174.1.el8_10.x86_64.rpmd2edd47025e9b7c77e0b355488022eaeb208b3333824b770b458bc15b7f4cb5f-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.174.1.el8_10.x86_64.rpmd2edd47025e9b7c77e0b355488022eaeb208b3333824b770b458bc15b7f4cb5f-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.174.1.el8_10.x86_64.rpmed9b03d557bf43742f5070d5b6a85aec10aa7c0e7ef8d968c21d0a2793d15284-ol8_x86_64_codeready_builder
perf-4.18.0-553.174.1.el8_10.x86_64.rpme1531ce902dfe6b274112d8af389bd8d412f7bf5c35197d94eed47c77a79cf4a-ol8_x86_64_baseos_latest
perf-4.18.0-553.174.1.el8_10.x86_64.rpme1531ce902dfe6b274112d8af389bd8d412f7bf5c35197d94eed47c77a79cf4a-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.174.1.el8_10.x86_64.rpm70486e9158bd91b97d4892a89aae4f2f450f49a0d16a2d59c39b921751695170-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.174.1.el8_10.x86_64.rpm70486e9158bd91b97d4892a89aae4f2f450f49a0d16a2d59c39b921751695170-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete