ELSA-2026-85773

ELSA-2026-85773 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2026-10-20

Description


[4.18.0-553.176.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.176.1]
- smb: client: reject a tree connect response whose byte count is too small (CKI Backport Bot) [RHEL-271288] {CVE-2026-89631}
- netfilter: flowtable: hold reference on ct until flow is released (CKI Backport Bot) [RHEL-280060] {CVE-2026-98320}
- perf: Fix addr_filter_ranges lifetime (Vratislav Bendel) [RHEL-271853] {CVE-2026-93817}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() (Desnes Nunes) [RHEL-191034] {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() (Desnes Nunes) [RHEL-191034] {CVE-2026-53196}
- gfs2: a minor finish_xmote cleanup (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Minor run_queue fixes (Andreas Gruenbacher) [RHEL-129363]
- gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-129363]
- gfs2: only apply DLM_LKF_VALBLK if sb_lvbptr is not NULL (Alexander Aring) [RHEL-129363]
- gfs2: Fix 'gfs2: Switch to wait_event in gfs2_quotad' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129363]
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-129363]
- gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129363]
- gfs2: add missing withdraw locking (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Disable GL_NOPID (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Rename 'gfs_recovery' workqueue to 'gfs2_recovery' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-129363]
- gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-129363]
- gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Simplify do_promote (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: fix infinite loop when checking ail item count before go_inval' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: introduce new gfs2_glock_assert_withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Get rid of GLF_INVALIDATE_IN_PROGRESS (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Allow some glocks to be used during withdraw' (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Check for log write errors before telling dlm to unlock' (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: fix a deadlock on withdraw-during-mount' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Simplify refcounting in do_xmote (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (6/6) (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Make recovery error more readable (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (5/6) (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (4/6) (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (3/6) (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (2/6) (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: Force withdraw to replay journals and wait for it to finish' (1/6) (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-129363]
- Revert 'gfs2: don't stop reads while withdraw in progress' (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Mark the remaining process-independent glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Mark flock glock holders as GL_NOPID (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Get rid of newlines in log messages (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Sanitize kthread stopping (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix logd wakeup on I/O error (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Switch to wait_event in gfs2_quotad (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Remove duplicate check in do_xmote (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Remove space before newline (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix LM_FLAG_TRY* logic in add_to_queue (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Remove DLM_LKF_ALTCW / DLM_LKF_ALTPR code (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Further sanitize lock_dlm.c (Andreas Gruenbacher) [RHEL-129363]
- gfs2: sanitize the gdlm_ast -> finish_xmote interface (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Simplify DLM_LKF_QUECVT use (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Lift withdraw check out of gfs2_ail1_empty (Andreas Gruenbacher) [RHEL-129363]
- gfs2: don't withdraw if init_threads() got interrupted (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Fix slab-use-after-free in gfs2_qd_dealloc (Andreas Gruenbacher) [RHEL-129363] {CVE-2023-52760}
- gfs2: Fix asynchronous thread destruction (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Stop using gfs2_make_fs_ro for withdraw (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Turn gfs2_withdraw into a void function (Andreas Gruenbacher) [RHEL-129363]
- gfs2: Mark withdraws as unlikely (Andreas Gruenbacher) [RHEL-129363]
- gfs2: ignore rindex_update failure in dinode_dealloc (Andreas Gruenbacher) [RHEL-129363]

[4.18.0-553.175.1]
- strparser: make sure __strp_recv isn't running before tearing down the parser (Sabrina Dubroca) [RHEL-270732]
- xfrm: espintcp: fix UAF during close (CKI Backport Bot) [RHEL-256684]
- xfrm: Check for underflow in xfrm_state_mtu (CKI Backport Bot) [RHEL-256684]
- xfrm: route MIGRATE notifications to caller's netns (CKI Backport Bot) [RHEL-256684]
- netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CKI Backport Bot) [RHEL-271657] {CVE-2026-93288}
- sctp: validate cookie AUTH state before use (Xin Long) [RHEL-254282] {CVE-2026-74752}
- sctp: stop processing a packet once its association is deleted (Xin Long) [RHEL-263292] {CVE-2026-89479}
- sctp: keep chunk->transport in step with the list it is queued on (Xin Long) [RHEL-254357] {CVE-2026-74588}
- xfrm: espintcp: do not reuse an in-progress partial send (CKI Backport Bot) [RHEL-222954] {CVE-2026-52935}


Related CVEs


CVE-2026-52935
CVE-2026-53196
CVE-2026-74588
CVE-2026-74752
CVE-2026-89479
CVE-2026-89631
CVE-2026-93288
CVE-2026-93817
CVE-2026-98320

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-553.176.1.el8_10.src.rpm6493f28c524239dcae440aa0c567f5f918d90f34b30d5df3054614c3cbf10175-ol8_aarch64_baseos_latest
kernel-4.18.0-553.176.1.el8_10.src.rpm6493f28c524239dcae440aa0c567f5f918d90f34b30d5df3054614c3cbf10175-ol8_aarch64_codeready_builder
kernel-4.18.0-553.176.1.el8_10.src.rpm6493f28c524239dcae440aa0c567f5f918d90f34b30d5df3054614c3cbf10175-ol8_aarch64_u10_baseos_patch
bpftool-4.18.0-553.176.1.el8_10.aarch64.rpm181251f728de3dcfce9f63c693ee875f2675d4b98576603e02c1108352654823-ol8_aarch64_baseos_latest
bpftool-4.18.0-553.176.1.el8_10.aarch64.rpm181251f728de3dcfce9f63c693ee875f2675d4b98576603e02c1108352654823-ol8_aarch64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.176.1.el8_10.aarch64.rpmd155a5414e5dcaaaeec907d62f2d3b946312f59e033e6883a689226e1d28f3ce-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-553.176.1.el8_10.aarch64.rpmd155a5414e5dcaaaeec907d62f2d3b946312f59e033e6883a689226e1d28f3ce-ol8_aarch64_u10_baseos_patch
kernel-headers-4.18.0-553.176.1.el8_10.aarch64.rpm7538d6ae6964f2aaccf453022b6d4a8043b91260c759f7cf32ed16435d2cc78c-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-553.176.1.el8_10.aarch64.rpm7538d6ae6964f2aaccf453022b6d4a8043b91260c759f7cf32ed16435d2cc78c-ol8_aarch64_u10_baseos_patch
kernel-tools-4.18.0-553.176.1.el8_10.aarch64.rpm0450e95f1677fec8feca19feafa2f4c4ddf17f0055781ba763bad6b7cac84f55-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-553.176.1.el8_10.aarch64.rpm0450e95f1677fec8feca19feafa2f4c4ddf17f0055781ba763bad6b7cac84f55-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.176.1.el8_10.aarch64.rpm927bd7d31eb03e4ddece6071b9ec7afa140a614e8216ab1fffe7af02c6d6e073-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-553.176.1.el8_10.aarch64.rpm927bd7d31eb03e4ddece6071b9ec7afa140a614e8216ab1fffe7af02c6d6e073-ol8_aarch64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.176.1.el8_10.aarch64.rpmc943522c4ccbf1d9fef7c730c9627a871f12ec6232d86a3c65efb29aaaa2fdc7-ol8_aarch64_codeready_builder
perf-4.18.0-553.176.1.el8_10.aarch64.rpm046fc5966b54d6df6733fe8928c03542051a56e02d2659856eebed84226f70c5-ol8_aarch64_baseos_latest
perf-4.18.0-553.176.1.el8_10.aarch64.rpm046fc5966b54d6df6733fe8928c03542051a56e02d2659856eebed84226f70c5-ol8_aarch64_u10_baseos_patch
python3-perf-4.18.0-553.176.1.el8_10.aarch64.rpm22eef8294545e271c7bec7faf5d3fb6052a671a53580820ee5906856d1592acd-ol8_aarch64_baseos_latest
python3-perf-4.18.0-553.176.1.el8_10.aarch64.rpm22eef8294545e271c7bec7faf5d3fb6052a671a53580820ee5906856d1592acd-ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-553.176.1.el8_10.src.rpm6493f28c524239dcae440aa0c567f5f918d90f34b30d5df3054614c3cbf10175-ol8_x86_64_baseos_latest
kernel-4.18.0-553.176.1.el8_10.src.rpm6493f28c524239dcae440aa0c567f5f918d90f34b30d5df3054614c3cbf10175-ol8_x86_64_codeready_builder
kernel-4.18.0-553.176.1.el8_10.src.rpm6493f28c524239dcae440aa0c567f5f918d90f34b30d5df3054614c3cbf10175-ol8_x86_64_u10_baseos_patch
bpftool-4.18.0-553.176.1.el8_10.x86_64.rpm871aa92f4de03eb57a6726c72c0ae267aa44af00447f83fb79237a5d360de728-ol8_x86_64_baseos_latest
bpftool-4.18.0-553.176.1.el8_10.x86_64.rpm871aa92f4de03eb57a6726c72c0ae267aa44af00447f83fb79237a5d360de728-ol8_x86_64_u10_baseos_patch
kernel-4.18.0-553.176.1.el8_10.x86_64.rpm61ac4700063400d9b17bf36a85f613796d53e06d03b20f8c75f6fa865afc0da8-ol8_x86_64_baseos_latest
kernel-4.18.0-553.176.1.el8_10.x86_64.rpm61ac4700063400d9b17bf36a85f613796d53e06d03b20f8c75f6fa865afc0da8-ol8_x86_64_u10_baseos_patch
kernel-abi-stablelists-4.18.0-553.176.1.el8_10.noarch.rpm017c822cc65d663ec66867682ba1793b6357da8ab34b8d6b6a04b1bd836b99df-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-553.176.1.el8_10.noarch.rpm017c822cc65d663ec66867682ba1793b6357da8ab34b8d6b6a04b1bd836b99df-ol8_x86_64_u10_baseos_patch
kernel-core-4.18.0-553.176.1.el8_10.x86_64.rpme90988e076b67025830fbb6d276efb67266ab432cef628dd0b36b77c7e5ed19f-ol8_x86_64_baseos_latest
kernel-core-4.18.0-553.176.1.el8_10.x86_64.rpme90988e076b67025830fbb6d276efb67266ab432cef628dd0b36b77c7e5ed19f-ol8_x86_64_u10_baseos_patch
kernel-cross-headers-4.18.0-553.176.1.el8_10.x86_64.rpm721334c89b48f5a9590dec6865a827266c0c98058bfe32ad6f531ff5e868bb6d-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-553.176.1.el8_10.x86_64.rpm721334c89b48f5a9590dec6865a827266c0c98058bfe32ad6f531ff5e868bb6d-ol8_x86_64_u10_baseos_patch
kernel-debug-4.18.0-553.176.1.el8_10.x86_64.rpm5eae74733b7dc02c33e01db4935ddabc34a5ed58ea2820dc2454edd15cc3da99-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-553.176.1.el8_10.x86_64.rpm5eae74733b7dc02c33e01db4935ddabc34a5ed58ea2820dc2454edd15cc3da99-ol8_x86_64_u10_baseos_patch
kernel-debug-core-4.18.0-553.176.1.el8_10.x86_64.rpm726bf72d3d7fc267c577a05864f0647954a320b7ed5e9ce49466077d64f3bb16-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-553.176.1.el8_10.x86_64.rpm726bf72d3d7fc267c577a05864f0647954a320b7ed5e9ce49466077d64f3bb16-ol8_x86_64_u10_baseos_patch
kernel-debug-devel-4.18.0-553.176.1.el8_10.x86_64.rpm4b5089b58cef70af02f61c083651800451bf1f66adc23c87893dcdf5f56d6b6c-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-553.176.1.el8_10.x86_64.rpm4b5089b58cef70af02f61c083651800451bf1f66adc23c87893dcdf5f56d6b6c-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-4.18.0-553.176.1.el8_10.x86_64.rpmc405594d7be04b9a275180342952afdc25168844cf3e5f5f7c5a486ceaf4fa7c-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-553.176.1.el8_10.x86_64.rpmc405594d7be04b9a275180342952afdc25168844cf3e5f5f7c5a486ceaf4fa7c-ol8_x86_64_u10_baseos_patch
kernel-debug-modules-extra-4.18.0-553.176.1.el8_10.x86_64.rpm63501abe60f7d3cc8312bd9cedc0cdfdd3a2849f22cbfd40acdc001900bb1eb7-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-553.176.1.el8_10.x86_64.rpm63501abe60f7d3cc8312bd9cedc0cdfdd3a2849f22cbfd40acdc001900bb1eb7-ol8_x86_64_u10_baseos_patch
kernel-devel-4.18.0-553.176.1.el8_10.x86_64.rpm2668d867cd2d40c0a71659b14bc87c5705d4a7b285a93829f45d6e283e02f048-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-553.176.1.el8_10.x86_64.rpm2668d867cd2d40c0a71659b14bc87c5705d4a7b285a93829f45d6e283e02f048-ol8_x86_64_u10_baseos_patch
kernel-doc-4.18.0-553.176.1.el8_10.noarch.rpm650a7d0ee57f79312c1454c4ecc73f2227db8171c0f2eef05e058fbd873dd5f6-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-553.176.1.el8_10.noarch.rpm650a7d0ee57f79312c1454c4ecc73f2227db8171c0f2eef05e058fbd873dd5f6-ol8_x86_64_u10_baseos_patch
kernel-headers-4.18.0-553.176.1.el8_10.x86_64.rpm45680cdc038537b8a8f250b309fc8e9a5f6f57ef6b6b556fe2aeaab63ba5d4ce-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-553.176.1.el8_10.x86_64.rpm45680cdc038537b8a8f250b309fc8e9a5f6f57ef6b6b556fe2aeaab63ba5d4ce-ol8_x86_64_u10_baseos_patch
kernel-modules-4.18.0-553.176.1.el8_10.x86_64.rpma73cc9de02716633c68cf187fa0eecb92051ab013c65c2b124f442c283a60477-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-553.176.1.el8_10.x86_64.rpma73cc9de02716633c68cf187fa0eecb92051ab013c65c2b124f442c283a60477-ol8_x86_64_u10_baseos_patch
kernel-modules-extra-4.18.0-553.176.1.el8_10.x86_64.rpmc21cb13e0ce26c1aaf6f0b7eea611a5a3a9a9a3e7f2da1e17b1f53b602c20076-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-553.176.1.el8_10.x86_64.rpmc21cb13e0ce26c1aaf6f0b7eea611a5a3a9a9a3e7f2da1e17b1f53b602c20076-ol8_x86_64_u10_baseos_patch
kernel-tools-4.18.0-553.176.1.el8_10.x86_64.rpm555c84c1797a4cee842caf5af22082b4fa5065ca06c32e50c3b73a01bf0905f1-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-553.176.1.el8_10.x86_64.rpm555c84c1797a4cee842caf5af22082b4fa5065ca06c32e50c3b73a01bf0905f1-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-4.18.0-553.176.1.el8_10.x86_64.rpma0d823d7900f0b1adefeab542369f9142543ad7e093be658e05eb4f5d4aa3bc3-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-553.176.1.el8_10.x86_64.rpma0d823d7900f0b1adefeab542369f9142543ad7e093be658e05eb4f5d4aa3bc3-ol8_x86_64_u10_baseos_patch
kernel-tools-libs-devel-4.18.0-553.176.1.el8_10.x86_64.rpme26f8fba456aeb77c7946d4b804ddb89016a190c508d75adf67435bbb9de938b-ol8_x86_64_codeready_builder
perf-4.18.0-553.176.1.el8_10.x86_64.rpmd323d372e832ff96e94dd7c368679e597ee952730cc5a5a37a05e063ae621bed-ol8_x86_64_baseos_latest
perf-4.18.0-553.176.1.el8_10.x86_64.rpmd323d372e832ff96e94dd7c368679e597ee952730cc5a5a37a05e063ae621bed-ol8_x86_64_u10_baseos_patch
python3-perf-4.18.0-553.176.1.el8_10.x86_64.rpm962a27b12f0ee2a25a59aa92be581fddc84b0750fd872cc875f7376b94b1b96c-ol8_x86_64_baseos_latest
python3-perf-4.18.0-553.176.1.el8_10.x86_64.rpm962a27b12f0ee2a25a59aa92be581fddc84b0750fd872cc875f7376b94b1b96c-ol8_x86_64_u10_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete