Summary
[4.18.0-553.111.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
[4.18.0-553.111.1]
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}
[4.18.0-553.110.1]
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs->pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-abi-stablelists | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-core | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-cross-headers | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-debug | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-debug-core | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-debug-devel | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-debug-modules | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-debug-modules-extra | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-devel | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-doc | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-headers | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-modules | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-modules-extra | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-tools | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-tools-libs | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | kernel-tools-libs-devel | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | perf | 0:4.18.0-553.111.1.el8_10 |
| Oracle Linux · 8 | python3-perf | 0:4.18.0-553.111.1.el8_10 |
Vulnerabilities 2
-
High 7.8CVE-2026-23001 Public exploit
macvlan: fix possible UAF in macvlan_forward_source()
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan. Whenever macvlan_hash_del_source() is called, we must clear entry->vlan pointe…
-
High 7.5
ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232 in pskb_expand_head(). This bug is tri…