Moderate: kernel security update (Oracle Linux 8)

[4.18.0-553.81.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.81.1]
- Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386}
- Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817}
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841}
- mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920]
- Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297}
- net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111]
- mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909]
- mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909]
- mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909]
- arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909]
- mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909]
- mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909]
- x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909]
- arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909]
- mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909]
- s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909]
- s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909]
- mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909]
- mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909]
- mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909]
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909]
- mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909]
- arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909]
- arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909]
- base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909]
- mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909]
- mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909]
- powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909]
- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909]
- vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909]
- mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909]
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909]
- mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909]
- slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909]
- mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909]
- mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909]
- mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909]
- mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909]
- mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909]
- radix tree: remove unused variable (Rafael Aquini) [RHEL-104909]
- mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909]
- tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909]
- powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909]
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909]
- writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909]
- x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909]
- mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909]
- mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909]
- mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909]
- mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909]
- mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909]
- mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909]
- mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909]
- mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909]
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909]
- Revert 'mm/compaction: fix set skip in fast_find_migrateblock' (Rafael Aquini) [RHEL-104909]
- mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-1