Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2026-19666 2 CVEs

Important: kernel security update (Oracle Linux 8)

Published May 21, 2026 · Updated May 21, 2026

Summary

[4.18.0-553.125.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.125.1]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333}

Fixed packages 20

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-abi-stablelists 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-core 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-cross-headers 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-debug 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-debug-core 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-debug-devel 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-debug-modules 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-debug-modules-extra 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-devel 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-doc 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-headers 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-modules 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-modules-extra 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-tools 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-tools-libs 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 kernel-tools-libs-devel 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 perf 0:4.18.0-553.125.1.el8_10
Oracle Linux · 8 python3-perf 0:4.18.0-553.125.1.el8_10

Vulnerabilities 2

  • High 7.8
    CVE-2026-46300 Exploited Public exploit EPSS 16%

    net: skbuff: preserve shared-frag marker during coalescing

    In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain t…

    KEV Oct 28, 2026
  • High 7.1
    CVE-2026-46333 Public exploit

    ptrace: slightly saner 'get_dumpable()' logic

    In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task - the concept comes from whether it can core dump or not - and ma…