ELSA-2026-99015

ELSA-2026-99015 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-11-12

Description

[4.18.0-553.186.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.186.1]
- net/smc: protect clcsock lifetime in smc_getname (CKI Backport Bot) [RHEL-303989] {CVE-2026-99032}
- scsi: st: Fix use-after-free race between st_remove() and st_open() (CKI Backport Bot) [RHEL-303904] {CVE-2026-99156}
- gfs2: Minor error message improvement (Andreas Gruenbacher) [RHEL-298310]
- gfs2: Don't BUG during a withdraw (Andreas Gruenbacher) [RHEL-298310]
- gfs2: Move state2str (Andreas Gruenbacher) [RHEL-298310]
- drm/amdkfd: fix SMI event cross-process information leak (Anusha Srivatsa) [RHEL-287311] {CVE-2026-97422}
- drm/amdgpu: fix buffer overflow during vBIOS update (CKI Backport Bot) [RHEL-278271] {CVE-2026-97425}
- drm/amdgpu: Bound GPIO I2C table entry count from VBIOS (CKI Backport Bot) [RHEL-278259] {CVE-2026-97493}
- drm/amdgpu/atombios: drop empty function (CKI Backport Bot) [RHEL-278259] {CVE-2026-97493}
- drm/amdkfd: Check bounds on allocate_doorbell (CKI Backport Bot) [RHEL-278229] {CVE-2026-97495}
- drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (CKI Backport Bot) [RHEL-278226] {CVE-2026-97494}
- drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (CKI Backport Bot) [RHEL-278208] {CVE-2026-97497}
- drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (CKI Backport Bot) [RHEL-278186] {CVE-2026-97427}
- drm/amdkfd: hold event_mutex while checkpointing CRIU events (CKI Backport Bot) [RHEL-273848] {CVE-2026-74446}
- xfs, iomap: limit individual ioend chain lengths in writeback (Brian Foster) [RHEL-258946]

Related CVEs

CVE-2026-74446

CVE-2026-97422

CVE-2026-97425

CVE-2026-97427

CVE-2026-97493

CVE-2026-97494

CVE-2026-97495

CVE-2026-97497

CVE-2026-99032

CVE-2026-99156

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-553.186.1.el8_10.src.rpm	9e28563004009fa1477318249603c7c1af37d402ee89230155596779c8c8f3f5	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-553.186.1.el8_10.src.rpm	9e28563004009fa1477318249603c7c1af37d402ee89230155596779c8c8f3f5	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-553.186.1.el8_10.src.rpm	9e28563004009fa1477318249603c7c1af37d402ee89230155596779c8c8f3f5	-	ol8_aarch64_u10_baseos_patch
	bpftool-4.18.0-553.186.1.el8_10.aarch64.rpm	11c57c3c487eb2460c38b21ff455fa6114b4bb0bcddaa92b1af8f7245891e015	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-553.186.1.el8_10.aarch64.rpm	11c57c3c487eb2460c38b21ff455fa6114b4bb0bcddaa92b1af8f7245891e015	-	ol8_aarch64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.186.1.el8_10.aarch64.rpm	11b7f9222a8a7f6b3b8fb0e5d137476903aae0bbd9775888ca717d72a158adb8	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-553.186.1.el8_10.aarch64.rpm	11b7f9222a8a7f6b3b8fb0e5d137476903aae0bbd9775888ca717d72a158adb8	-	ol8_aarch64_u10_baseos_patch
	kernel-headers-4.18.0-553.186.1.el8_10.aarch64.rpm	aa62021a4f74666c48cd7f0fe0946671ae5c33adb18a3674bc995f823cdc8bdb	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-553.186.1.el8_10.aarch64.rpm	aa62021a4f74666c48cd7f0fe0946671ae5c33adb18a3674bc995f823cdc8bdb	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-4.18.0-553.186.1.el8_10.aarch64.rpm	84664538a0aeee201549ae56c5c4719d98469f87b74e432e041672e43cccd7b1	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-553.186.1.el8_10.aarch64.rpm	84664538a0aeee201549ae56c5c4719d98469f87b74e432e041672e43cccd7b1	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.186.1.el8_10.aarch64.rpm	571d8569145e7c0f1361b68bbebea835c51f59c14506f11d8e4989127087f8e5	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-553.186.1.el8_10.aarch64.rpm	571d8569145e7c0f1361b68bbebea835c51f59c14506f11d8e4989127087f8e5	-	ol8_aarch64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.186.1.el8_10.aarch64.rpm	3e6fddd4650ea72d89ddc7ed8d0af5675dcba410b097f74ed32abc509d3e7198	-	ol8_aarch64_codeready_builder
	perf-4.18.0-553.186.1.el8_10.aarch64.rpm	53dcf72e8d37542f15d0078613c1d76507d201b0aabd5947287633470903c999	-	ol8_aarch64_baseos_latest
	perf-4.18.0-553.186.1.el8_10.aarch64.rpm	53dcf72e8d37542f15d0078613c1d76507d201b0aabd5947287633470903c999	-	ol8_aarch64_u10_baseos_patch
	python3-perf-4.18.0-553.186.1.el8_10.aarch64.rpm	9cf37d9b71ebe6f558e3ec9b66aaa18d6d53b09561b6144b84adfcc11369269d	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-553.186.1.el8_10.aarch64.rpm	9cf37d9b71ebe6f558e3ec9b66aaa18d6d53b09561b6144b84adfcc11369269d	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-553.186.1.el8_10.src.rpm	9e28563004009fa1477318249603c7c1af37d402ee89230155596779c8c8f3f5	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.186.1.el8_10.src.rpm	9e28563004009fa1477318249603c7c1af37d402ee89230155596779c8c8f3f5	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-553.186.1.el8_10.src.rpm	9e28563004009fa1477318249603c7c1af37d402ee89230155596779c8c8f3f5	-	ol8_x86_64_u10_baseos_patch
	bpftool-4.18.0-553.186.1.el8_10.x86_64.rpm	1312214ea6c5f73e7ea22cb0f61655b1284f99ffb7fcd21a7e9fd2e517f82cd4	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-553.186.1.el8_10.x86_64.rpm	1312214ea6c5f73e7ea22cb0f61655b1284f99ffb7fcd21a7e9fd2e517f82cd4	-	ol8_x86_64_u10_baseos_patch
	kernel-4.18.0-553.186.1.el8_10.x86_64.rpm	7ceec81844c536b1bc1b4c43c54b8e398c54a7279cb4245a7579d542f0e8991c	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-553.186.1.el8_10.x86_64.rpm	7ceec81844c536b1bc1b4c43c54b8e398c54a7279cb4245a7579d542f0e8991c	-	ol8_x86_64_u10_baseos_patch
	kernel-abi-stablelists-4.18.0-553.186.1.el8_10.noarch.rpm	7953ba7f992756a80f237423af3776b410828c86cf9e9c0aae7b59aaef738482	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-553.186.1.el8_10.noarch.rpm	7953ba7f992756a80f237423af3776b410828c86cf9e9c0aae7b59aaef738482	-	ol8_x86_64_u10_baseos_patch
	kernel-core-4.18.0-553.186.1.el8_10.x86_64.rpm	a2a1ca925e2322c47e540682d158359a5b5c6be4cfbf0d1a0c424691c950c6c6	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-553.186.1.el8_10.x86_64.rpm	a2a1ca925e2322c47e540682d158359a5b5c6be4cfbf0d1a0c424691c950c6c6	-	ol8_x86_64_u10_baseos_patch
	kernel-cross-headers-4.18.0-553.186.1.el8_10.x86_64.rpm	eb40162da5a76ec079904986475e94156b2bb213cd7846dfdbd3126a2c57fdbe	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-553.186.1.el8_10.x86_64.rpm	eb40162da5a76ec079904986475e94156b2bb213cd7846dfdbd3126a2c57fdbe	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-4.18.0-553.186.1.el8_10.x86_64.rpm	6fdbdcdae1974b2dca07a612a141feff22352bebe9b726b428b9a2971195290a	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-553.186.1.el8_10.x86_64.rpm	6fdbdcdae1974b2dca07a612a141feff22352bebe9b726b428b9a2971195290a	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-core-4.18.0-553.186.1.el8_10.x86_64.rpm	e05ec79c3e0d806c687a06b1ff5fbb79e113240b3f4a567766a93d880396ba8b	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-553.186.1.el8_10.x86_64.rpm	e05ec79c3e0d806c687a06b1ff5fbb79e113240b3f4a567766a93d880396ba8b	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-devel-4.18.0-553.186.1.el8_10.x86_64.rpm	c2435eaba0562c5f636b7b90adfe8177678daf6812286376609225e3cc60c40a	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-553.186.1.el8_10.x86_64.rpm	c2435eaba0562c5f636b7b90adfe8177678daf6812286376609225e3cc60c40a	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-4.18.0-553.186.1.el8_10.x86_64.rpm	31afba47ab3443f181e6fca737fa568a454fbdf402c0300012d858facfce3c9e	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-553.186.1.el8_10.x86_64.rpm	31afba47ab3443f181e6fca737fa568a454fbdf402c0300012d858facfce3c9e	-	ol8_x86_64_u10_baseos_patch
	kernel-debug-modules-extra-4.18.0-553.186.1.el8_10.x86_64.rpm	4526c2cf18963c8b51743075e5b8e9aad4133640318831816ec79d1e0ff42e25	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-553.186.1.el8_10.x86_64.rpm	4526c2cf18963c8b51743075e5b8e9aad4133640318831816ec79d1e0ff42e25	-	ol8_x86_64_u10_baseos_patch
	kernel-devel-4.18.0-553.186.1.el8_10.x86_64.rpm	9e0e66bc0dc2bf4769e17463fd0c258ed07ada626cc3c2b36e3c7d9f25e1bea0	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-553.186.1.el8_10.x86_64.rpm	9e0e66bc0dc2bf4769e17463fd0c258ed07ada626cc3c2b36e3c7d9f25e1bea0	-	ol8_x86_64_u10_baseos_patch
	kernel-doc-4.18.0-553.186.1.el8_10.noarch.rpm	e997117386d128937523b0b92ec188a9325ac137c7a9b7badb87102e6e671668	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-553.186.1.el8_10.noarch.rpm	e997117386d128937523b0b92ec188a9325ac137c7a9b7badb87102e6e671668	-	ol8_x86_64_u10_baseos_patch
	kernel-headers-4.18.0-553.186.1.el8_10.x86_64.rpm	5e6f6a6fd380872723db98235a03f731972047a446c7e2dbe266883327bf07fc	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-553.186.1.el8_10.x86_64.rpm	5e6f6a6fd380872723db98235a03f731972047a446c7e2dbe266883327bf07fc	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-4.18.0-553.186.1.el8_10.x86_64.rpm	edefcccf41149411e47ff1b5f9de243d61d051d4f0c52c24e68c4a91e3f58170	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-553.186.1.el8_10.x86_64.rpm	edefcccf41149411e47ff1b5f9de243d61d051d4f0c52c24e68c4a91e3f58170	-	ol8_x86_64_u10_baseos_patch
	kernel-modules-extra-4.18.0-553.186.1.el8_10.x86_64.rpm	fb7e1cffd121aa732a27f42c121944ba00674eee4ad3d7544f9bbd029d7e61bf	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-553.186.1.el8_10.x86_64.rpm	fb7e1cffd121aa732a27f42c121944ba00674eee4ad3d7544f9bbd029d7e61bf	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-4.18.0-553.186.1.el8_10.x86_64.rpm	d7ece5d6cdee3417ef2c69678123a417e96eac32a77b928bdecfd3b947d43b4b	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-553.186.1.el8_10.x86_64.rpm	d7ece5d6cdee3417ef2c69678123a417e96eac32a77b928bdecfd3b947d43b4b	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-4.18.0-553.186.1.el8_10.x86_64.rpm	a5e9fb63897c4a1051597b62fa463fb11265f1a029087abf395722cc52f179ed	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-553.186.1.el8_10.x86_64.rpm	a5e9fb63897c4a1051597b62fa463fb11265f1a029087abf395722cc52f179ed	-	ol8_x86_64_u10_baseos_patch
	kernel-tools-libs-devel-4.18.0-553.186.1.el8_10.x86_64.rpm	1029f24232965a4e27bead3199d9ce1ef0ce84669db60d597cd4f83eb568bbca	-	ol8_x86_64_codeready_builder
	perf-4.18.0-553.186.1.el8_10.x86_64.rpm	b5c8101be290b96cc18eec23f9aa656a59054f614e496408916818c4f76a4cd9	-	ol8_x86_64_baseos_latest
	perf-4.18.0-553.186.1.el8_10.x86_64.rpm	b5c8101be290b96cc18eec23f9aa656a59054f614e496408916818c4f76a4cd9	-	ol8_x86_64_u10_baseos_patch
	python3-perf-4.18.0-553.186.1.el8_10.x86_64.rpm	0c6dab3381deafa906d6dee47d44d8b769dbb043f2e96185864b5592b89bbce6	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-553.186.1.el8_10.x86_64.rpm	0c6dab3381deafa906d6dee47d44d8b769dbb043f2e96185864b5592b89bbce6	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team