Oracle alert ELSA-2026-33743 (kernel)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-33743 Important: Oracle Linux 8 kernel security, bug fix, and enhancement update | |
| Date: | Tue, 14 Jul 2026 09:05:06 -0700 | |
| Message-ID: | <mailman.226.1784045121.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-33743 http://linux.oracle.com/errata/ELSA-2026-33743.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: bpftool-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-abi-stablelists-4.18.0-553.141.1.el8_10.noarch.rpm kernel-core-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-cross-headers-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-debug-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-debug-core-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-debug-devel-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-debug-modules-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-debug-modules-extra-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-devel-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-doc-4.18.0-553.141.1.el8_10.noarch.rpm kernel-headers-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-modules-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-modules-extra-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-tools-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-tools-libs-4.18.0-553.141.1.el8_10.x86_64.rpm kernel-tools-libs-devel-4.18.0-553.141.1.el8_10.x86_64.rpm perf-4.18.0-553.141.1.el8_10.x86_64.rpm python3-perf-4.18.0-553.141.1.el8_10.x86_64.rpm aarch64: bpftool-4.18.0-553.141.1.el8_10.aarch64.rpm kernel-cross-headers-4.18.0-553.141.1.el8_10.aarch64.rpm kernel-headers-4.18.0-553.141.1.el8_10.aarch64.rpm kernel-tools-4.18.0-553.141.1.el8_10.aarch64.rpm kernel-tools-libs-4.18.0-553.141.1.el8_10.aarch64.rpm kernel-tools-libs-devel-4.18.0-553.141.1.el8_10.aarch64.rpm perf-4.18.0-553.141.1.el8_10.aarch64.rpm python3-perf-4.18.0-553.141.1.el8_10.aarch64.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553... Related CVEs: CVE-2026-23216 CVE-2026-45984 CVE-2026-46189 Description of changes: [4.18.0-553.141.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] - Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772] [4.18.0-553.141.1] - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189506] {CVE-2026-43112} [4.18.0-553.140.1] - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add part number for Arm Cortex-A78AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-N3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A725 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-A720 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Cortex-715 CPU part definition (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add MIDR_CORTEX_A76AE (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X1C definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X925 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: cputype: Add Cortex-X4 definitions (Mark Salter) [RHEL-183619] {CVE-2025-10263} - arm64: Add Neoverse-V2 part (Mark Salter) [RHEL-183619] {CVE-2025-10263} - tcp: fix potential race in tcp_v6_syn_recv_sock() (Antoine Tenart) [RHEL-174237] {CVE-2026-43198} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181898] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179907] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179857] {CVE-2026-46227} - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179736] {CVE-2026-43450} - vfs: validate inode i_link before use in get_link() (Ian Kent) [RHEL-152759] [4.18.0-553.139.1] - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-147665] [4.18.0-553.138.1] - redhat: Temporary stop adding 'kernel' component to SBAT (Thomas Huth) [RHEL-182788] - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Thomas Huth) [RHEL-182788] - redhat: Add SBAT information to Linux kernel (Thomas Huth) [RHEL-182788] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Thomas Huth) [RHEL-182788] - x86/efi: Implement support for embedding SBAT data for x86 (Thomas Huth) [RHEL-182788] - redhat: Add Kconfig switch for embedding SBAT section (Thomas Huth) [RHEL-182788] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179596] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179596] {CVE-2026-45984} - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179963] {CVE-2026-46189} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165556] {CVE-2026-23216} _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata