Summary
[4.18.0-553.107.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
[4.18.0-553.107.1]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]
[4.18.0-553.106.1]
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-abi-stablelists | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-core | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-cross-headers | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-debug | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-debug-core | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-debug-devel | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-debug-modules | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-debug-modules-extra | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-devel | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-doc | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-headers | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-modules | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-modules-extra | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-tools | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-tools-libs | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | kernel-tools-libs-devel | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | perf | 0:4.18.0-553.107.1.el8_10 |
| Oracle Linux · 8 | python3-perf | 0:4.18.0-553.107.1.el8_10 |
Vulnerabilities 5
-
High 7.8
page_pool: Fix use-after-free in page_pool_recycle_in_ring
In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix use-after-free in page_pool_recycle_in_ring syzbot reported a uaf in page_pool_recycle_in_ring: BUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 kernel/locking/lockd…
-
High 7.8CVE-2025-38248 Public exploit
bridge: mcast: Fix use-after-free during router port configuration
In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration The bridge maintains a global list of ports behind which a multicast router resides. The list is consulted during forwarding…
-
High 7.8
smc: Fix use-after-free in __pnet_find_base_ndev().
In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0] smc_pnet_find_ism_resource(…
-
High 7.8
mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex (instead of RTNL) to protect the multicast route list, so that it will not chan…
-
High 7.8
net/sched: Enforce that teql can only be used as root qdisc
In the Linux kernel, the following vulnerability has been resolved: net/sched: Enforce that teql can only be used as root qdisc Design intent of teql is that it is only supposed to be used as root qdisc. We need to check for that constraint. Although not impo…