ELSA-2026-9131

ELSA-2026-9131 - kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-04-21

Description

[4.18.0-553.120.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.120.1]
- gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075]
- gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075]
- gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075]
- KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657]
- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657]

[4.18.0-553.119.1]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532]
- s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532]
- redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417]
- s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307]
- dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538]
- dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236]
- dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236]
- dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236]
- dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236]
- dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236]
- dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236]
- dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236]
- dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236]
- dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236]
- dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131}
- dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236]

[4.18.0-553.118.1]
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191}
- ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191}

Related CVEs

CVE-2025-68741

CVE-2026-23191

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.120.1.el8_10.src.rpm	8abb51739648c4998573a3c7d12255ede4a354c31db5fcbe71975a61038c9449	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.120.1.el8_10.src.rpm	8abb51739648c4998573a3c7d12255ede4a354c31db5fcbe71975a61038c9449	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.120.1.el8_10.src.rpm	8abb51739648c4998573a3c7d12255ede4a354c31db5fcbe71975a61038c9449	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.120.1.el8_10.aarch64.rpm	3921df3c6d450569d851b8ba316b37220feb3af568230ad9f6284130f0171d6e	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.120.1.el8_10.aarch64.rpm	3921df3c6d450569d851b8ba316b37220feb3af568230ad9f6284130f0171d6e	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.120.1.el8_10.aarch64.rpm	2c7de6ae514c93a1211b9024fe8cded04ee2ab9d308b835f9cd3179edf5270ac	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.120.1.el8_10.aarch64.rpm	2c7de6ae514c93a1211b9024fe8cded04ee2ab9d308b835f9cd3179edf5270ac	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.120.1.el8_10.aarch64.rpm	e9b4c1e68c49b787d0682eacaa522127294dc661f457a283e90e8e06f130aef0	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.120.1.el8_10.aarch64.rpm	e9b4c1e68c49b787d0682eacaa522127294dc661f457a283e90e8e06f130aef0	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.120.1.el8_10.aarch64.rpm	dc03528f174384dce2581a91a83d9b6ae9ee9759911f0711b40ddace095b6e33	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.120.1.el8_10.aarch64.rpm	dc03528f174384dce2581a91a83d9b6ae9ee9759911f0711b40ddace095b6e33	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.120.1.el8_10.aarch64.rpm	8edbcd4f51eb53f68bdad7ca5aea8cabbe17733afa86f663332a6ff4eb9a704c	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.120.1.el8_10.aarch64.rpm	8edbcd4f51eb53f68bdad7ca5aea8cabbe17733afa86f663332a6ff4eb9a704c	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.120.1.el8_10.aarch64.rpm	35eb7b0d069d1611c3ef95f1cae356936f52acb26caabd93dba97e55c03f6b59	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.120.1.el8_10.aarch64.rpm	1fddb6ca3861b9a40058278d988c853fee7712518a2b9db08faf0af910d1b618	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.120.1.el8_10.aarch64.rpm	1fddb6ca3861b9a40058278d988c853fee7712518a2b9db08faf0af910d1b618	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.120.1.el8_10.aarch64.rpm	c2bdbf9ac97a1f19d84877cc26fe032eb14d558e12da1920eac715980ba9c224	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.120.1.el8_10.aarch64.rpm	c2bdbf9ac97a1f19d84877cc26fe032eb14d558e12da1920eac715980ba9c224	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.120.1.el8_10.src.rpm	8abb51739648c4998573a3c7d12255ede4a354c31db5fcbe71975a61038c9449	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.120.1.el8_10.src.rpm	8abb51739648c4998573a3c7d12255ede4a354c31db5fcbe71975a61038c9449	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.120.1.el8_10.src.rpm	8abb51739648c4998573a3c7d12255ede4a354c31db5fcbe71975a61038c9449	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.120.1.el8_10.x86_64.rpm	0ed083ef5a81be0862e3dcbd93db1fe5bf8248ea5e6ec42b17989aa0e7bca529	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.120.1.el8_10.x86_64.rpm	0ed083ef5a81be0862e3dcbd93db1fe5bf8248ea5e6ec42b17989aa0e7bca529	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.120.1.el8_10.x86_64.rpm	7f7eb9e5e6d79a4e37b6a40724d72ae1f67a47c95bf93110a771ae9429d9f4d8	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.120.1.el8_10.x86_64.rpm	7f7eb9e5e6d79a4e37b6a40724d72ae1f67a47c95bf93110a771ae9429d9f4d8	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.120.1.el8_10.noarch.rpm	39b3ebbab11c53d90766e761bcbd1e0ab0880fba73994a30df62e64579458772	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.120.1.el8_10.noarch.rpm	39b3ebbab11c53d90766e761bcbd1e0ab0880fba73994a30df62e64579458772	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.120.1.el8_10.x86_64.rpm	524927d5b6cbe497e06cbf0f4d0498311251e8a2145ee743159890b7cb150f72	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.120.1.el8_10.x86_64.rpm	524927d5b6cbe497e06cbf0f4d0498311251e8a2145ee743159890b7cb150f72	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.120.1.el8_10.x86_64.rpm	e7d7fd0268bca45e49c31f62404b6edeaf40a9436d155e463a15d95c64887770	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.120.1.el8_10.x86_64.rpm	e7d7fd0268bca45e49c31f62404b6edeaf40a9436d155e463a15d95c64887770	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.120.1.el8_10.x86_64.rpm	1eb8395a49dc0bd80bbad7874b930d41bec2c0a077462bb45445a09eea6d29f8	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.120.1.el8_10.x86_64.rpm	1eb8395a49dc0bd80bbad7874b930d41bec2c0a077462bb45445a09eea6d29f8	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.120.1.el8_10.x86_64.rpm	88b5f5eea4b650a07c5cb7813626444270f85f96650aec4fdfd2965457b509a3	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.120.1.el8_10.x86_64.rpm	88b5f5eea4b650a07c5cb7813626444270f85f96650aec4fdfd2965457b509a3	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.120.1.el8_10.x86_64.rpm	769ee353932dace364b4d86e87cfd7ababd612b3da16db2bbeab794b7cce0610	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.120.1.el8_10.x86_64.rpm	769ee353932dace364b4d86e87cfd7ababd612b3da16db2bbeab794b7cce0610	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.120.1.el8_10.x86_64.rpm	6e9645d78f2f03c78c9704689772e60b2db122722c0fee52d7da3618e367fe73	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.120.1.el8_10.x86_64.rpm	6e9645d78f2f03c78c9704689772e60b2db122722c0fee52d7da3618e367fe73	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.120.1.el8_10.x86_64.rpm	d69df2997f334698723102b34282e2598992bb97a683c867e9a00500cdcee08d	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.120.1.el8_10.x86_64.rpm	d69df2997f334698723102b34282e2598992bb97a683c867e9a00500cdcee08d	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.120.1.el8_10.x86_64.rpm	34d77825a8e6665e5b98cdab04ece3be6b14da2faea2d084eec254ed2de85e36	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.120.1.el8_10.x86_64.rpm	34d77825a8e6665e5b98cdab04ece3be6b14da2faea2d084eec254ed2de85e36	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.120.1.el8_10.noarch.rpm	771a662da1dbe735e740a090425151669ad5d0d5a2a93b86e34e56252b348eeb	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.120.1.el8_10.noarch.rpm	771a662da1dbe735e740a090425151669ad5d0d5a2a93b86e34e56252b348eeb	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.120.1.el8_10.x86_64.rpm	a3b76501cc23012a44542af58a831c64bedc973775bff39d77d3532db4222139	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.120.1.el8_10.x86_64.rpm	a3b76501cc23012a44542af58a831c64bedc973775bff39d77d3532db4222139	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.120.1.el8_10.x86_64.rpm	47d0f45db47c202a8785dcfbeaa301979ae307924cbaae2cbae8d52193540a00	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.120.1.el8_10.x86_64.rpm	47d0f45db47c202a8785dcfbeaa301979ae307924cbaae2cbae8d52193540a00	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.120.1.el8_10.x86_64.rpm	a580bcca87a48643d91db4a96501e1b40ef9ec42c184981b9b9c725c5a24ce48	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.120.1.el8_10.x86_64.rpm	a580bcca87a48643d91db4a96501e1b40ef9ec42c184981b9b9c725c5a24ce48	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.120.1.el8_10.x86_64.rpm	45098889804a5f99154bc05699be060575f54c19ea97263e606698a82eda4c1e	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.120.1.el8_10.x86_64.rpm	45098889804a5f99154bc05699be060575f54c19ea97263e606698a82eda4c1e	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.120.1.el8_10.x86_64.rpm	298ca0452a716170654b0309c2c156b41a86af9d321e952102e0df0afe1d396c	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.120.1.el8_10.x86_64.rpm	298ca0452a716170654b0309c2c156b41a86af9d321e952102e0df0afe1d396c	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.120.1.el8_10.x86_64.rpm	c953b7c42fb846ff3648c2cc0d1f4af2e718bae692089c0bbdecd2ac4c003a12	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.120.1.el8_10.x86_64.rpm	77c2cbe9e189095d09fec3064d97947cb5d72aed33b40e2be652282bb2a0bf5a	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.120.1.el8_10.x86_64.rpm	77c2cbe9e189095d09fec3064d97947cb5d72aed33b40e2be652282bb2a0bf5a	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.120.1.el8_10.x86_64.rpm	a567bc714c17c70d7eda245086fe1943d6b235a030ea75c4c7bf177775134a62	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.120.1.el8_10.x86_64.rpm	a567bc714c17c70d7eda245086fe1943d6b235a030ea75c4c7bf177775134a62	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team