<?xml version="1.0" encoding="UTF-8"?>
<updates>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-22801-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-12-09 00:00:00"/>
    <updated date="2025-12-09 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.89.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.89.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.89.1]
- mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock-&gt;cached (Radostin Stoyanov) [RHEL-122774]
- mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
- mm/memcg: revert ('mm/memcg: optimize user context object stock access') (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
- gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660]
- gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660]

[4.18.0-553.88.1]
- scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199]
- RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539}
- RDMA/rxe: Fix mr-&gt;map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-22801-1.html" type="self" title="ELBA-2025-22801-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="python3-perf" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5bbfdf3bc5d7f93b2443ad1f995ef3f4bc3c70c69fefd8fcf4201b2854b3b796</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2d3afa166b734b2f48897fc00d95da466a222578592022f4928e9f03ebca43c5</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2731777d6397765888355b2f43eff26de5b75eded64f7de23f88924c6fb964b0</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.89.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">6b8e20cf9d5b2286fbd9a280b0948d677e43adef767a75e2f4227e625270c291</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">02d4290fc33e746b828fbcb6c83bf153cf57f92d6dd9bafa8b8b42c5ddc24424</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f3e009a3e0a2510dd8616cecdec8649b49bdfb6040540ced625f42fa24e6de10</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.89.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">7e8274e8d814c274bb5ba38e17f87c584c5aae108a5b0b4259668e6e666c8c5b</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.89.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">62c5492c844fc4884943d2b099875968faa5324d1161f5514ccb729f4f001873</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">43bd0968b917ee08c202645ca169b8f4ad4764c0e78bb11307642a71c884252e</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8c759df67e0e60d6f1d94dcdfaa83d2ee6598f6bc88a731f0d1edecd59527e3a</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4c3afed16729c64a5d132850ae99e3c5ac2d1a541394273a1f92198354af8ad9</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4c84831e8fbbd7327a279761a40acf63fa1b0b6a7fe789ea6960f4e6853cbd07</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">089fd26a7a6a51c02634b9200862e5eba24d7ff24abf2dc2d0e05a186aee9263</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e0e8383693033d7a727a9e2ad7c4d8351764a0f52139f217bb9664e7acc47483</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">61a2e183a4e452a7cbf16fffdc1f109dd325de82ec21e90431f055913e182cc8</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">399302a4a09485d40d2fdb1a71751db663b507283c1a529a251b9710509967ca</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cd55181fcc75256c2f4f066f955e53878b7c8871e9a7eb633ac84aca614501d9</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">100f5dff43e41c2d881ca127ee5fbaadde1c145bc5acc3c23bee56eabcd82c80</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">27833082c1c2cab4a9d8ff7c943f4f722819e7a75b42a749f46d8431a6ee4b42</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">37b2f82e14d905739281df9bddf11d998607223b260e0c6175ec5dd516c05fc9</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.89.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.89.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d270a1ad0dc0994984b5b8f478c22abd57f4c01c9f80650b3aaa0d9446a77e52</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-6460-1</id>
    <title>kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-09-15 00:00:00"/>
    <updated date="2022-09-15 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.18.0-372.26.1.0.2.el8_6.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-6460-1.html" type="self" title="ELBA-2022-6460-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-modules" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">05f849cb3e64e26ae3ccc769f40a6f0e423123f1e4602d8fe9f4a2590f05d9c0</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">18928a437ee638ef4c40461de518b9e8484ca9293b99c2c420699fa3c07420f5</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">221ee436516eab89541261952e7577f9f31c8600a49d96aa53fc6aba6a2ce9c9</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">f3e41d9b10160c441d3f2de3e354e863f9ca960d70f29b514339b147136608d0</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">e3c8a86a1c59d1f1c9d7f9c97595cef334280fe75d0a45feedd7ba25948d840a</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">6b8cc1b4b8042044057598a9c2947cb6fc04aa0f8057411708a63f2ad08fd28e</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">4df35a3d9c57613afb3b60d511c66a8edfb53134506e7eaa80f5b0c80366855f</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">03a9f180c9f331d619999c7be3c677505a36d5a79b39663cf3ce96acf30899f7</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">3a0cf6cc29b6d82d04f878ae27ad43dc2e6d321bf783b0b90dc9cb9eaa305393</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-372.26.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">d2c413a5d66dcdd5fa292b893b542e3bd7ec6465e48aaaf27b47b1839bdbfad3</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">30bf38638140c554a9c606b21a9c125f02b256f19ca26ca557a95e6b87c9b68e</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">5c52ada3b49d797cecd066d0256f096ae5b0efbfed2a453a146e3d18292db28d</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">d351174b77c3e317d0ea59793ad51d062c199967de018d008d552e55f495d134</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-372.26.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">9f274a56172db122ebe373a7bf37b4c0813c54f2930d21a97431deb19893106b</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">2254590a815b902a1fe36a6a043635ab72dc1281763d36f8293973192f45ed11</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">69ec21ca92e587c590c4056e3ca5a22977bc7844d8da218a6fa76f7716a97087</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">92022459e9740c5e12c53c758016478ff2ad1886262cdd25a7a9087dddaf486d</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">030c5da6f941bd48988e2bf1747bfba6f0adc92a8f33809465a33ae2767f4c4e</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">48fe1c4151735b7214b1aa9e216af797ae0bb9b09099909e9164b1ab2ec785c1</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-372.26.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">c030a77f6f978d140ccbb027d76205cbd50b82780837a6f75b60bc69e089bbbd</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.26.1.0.2.el8_6" epoch="0" arch="src">
          <filename>kernel-4.18.0-372.26.1.0.2.el8_6.src.rpm</filename>
          <sum type="sha256">6ebcd8220051a1205fd58ba22cd999703483387bfb4003516b549caabb4272ea</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-11850-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-29 00:00:00"/>
    <updated date="2025-07-29 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.64.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.64.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.64.1.el8_10]
- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919}
- NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256]
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977}
- wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905}
- workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292]
- workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292]
- workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292]
- workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-11850-1.html" type="self" title="ELBA-2025-11850-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-modules" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">77c05948c903c46c42ef442d2e05aaa1ef2eea4077ce58bd71f4e7dbaff5f8b1</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b990f4d666349c60453cdc2a05f1bc244fc4348b2e39a8c185d4d44712ae678b</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">acc830dd15399181c1933479c3e5431fa47b27c77fdfc18183ce72dc705ea655</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9a23f611a9621138ab79380ca508920045d579093dc3abbfd79b614ba85b9613</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.64.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">51f2c32aeaa8ff37518b6edf2e196ef1dd31e3c6a4c6a52417ca32da3455233a</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1668bb20c4a549c14f32fa9b964303d767fce15ad496c614f7bc6b83c1ea6977</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7a384cae6d24ded8bbc8abe07ad5037be67ef4aed77a206d85ffef7298345322</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.64.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">b66e4d6d55d609380c6abdd484f75cd4ff03fb5b4b53baf0cb37b5d873065ad2</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3b6f160882a60dc7abcf5d1c6c6a4aed945270f88c435da7d00f0dbcd1c12d48</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">caccb569c69750d7a08d45839bdd3c3937174315fbb9b9c8fa881c0feae41edc</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">895a465a3acde00c60f132b98aa21ae9382e374dea6e99db2d48b95cbdaba46c</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">85e1450061e7a5becc01a9f8512c63c610ebd3a73164cae191544d5aa7d70f7e</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.64.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">42e20e36c262d8b051f8d737f2696784a81dab7d3ddc1d025da7926b98dfd5e8</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">191f1a4d7603f87cf1a65a27f6a99fb2aad1e2022c5e22d13fa0921bc355f9a6</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">926e81b5ca45a56b200d38cebd70c05d5342d1518091b00967766cdd1c8e2b97</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4a4948c8874219e8dc88bd22359d8d1678afdc31ed601690efc575715c36f380</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b5bd6487ac5bdb6205c5e1db091afb78b9d463d16aa75f9984c06e76b5e9ba1b</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f9ed10a755a334c1b33e33f7edc29dd6469904e563c3e2fda279ee23bea61f22</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d6da409f3109d5c139f818d3aa95c894ea3ab620547d66b928e7a768147f0b81</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1bd11bb7555ad2b9cd0f228b895349f61b1e40516fdb3438fd2361ab14f38f74</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.64.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.64.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6b0422265d7b31b250dae4de1232e1d871f20c1bb9daac7693452807dc1e8ef3</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-3893-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-04-16 00:00:00"/>
    <updated date="2025-04-16 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.50.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.50.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.50.1.el8_10]
- perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119]
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150}
- scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052]
- ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852]
- ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852]
- ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852]

[4.18.0-553.49.1.el8_10]
- net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244]
- redhat: drop Y issues from changelog (Jan Stancek)
- md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673]
- md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673]
- md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673]
- md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673]
- md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673]
- raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499]
- x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241}
- x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241}

[4.18.0-553.48.1.el8_10]
- rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves)
- gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208]
- gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208]
- gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208]
- gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208]
- gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208]
- gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208]
- gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208]
- gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208]
- gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-3893-1.html" type="self" title="ELBA-2025-3893-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-core" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bfc136b450a9276bc800a2410ecc3a1956dc73db4f601291c2ac151ba5886278</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ff023127fcaf11850be43e09978011386e5bced05d9c04a901ee3311657728ef</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8c6760ab5712f31aa38d4be930637893fd805bc07b4b3adf147a4ca4c8d22b03</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">734b6f60ce7f8b304eec9f4755e8dd795ea301b601a0a61c8738c0244dbf34a8</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e37f5511773cb7f896ce23070e21c477bd515a22c58d9e3d2fe15e0c76d3f3cf</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1aefe79aa5a67063a91bb10629adeecba518e2371650541c5aafd6e3bb8a1853</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ad7f9142b401f4260a892338eb122b44f01676f32c55164f4d743eaaba80cba2</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">09473f20caea6a837cb6d250f992a14203d13324e06c6acdb613c2c3aa475311</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.50.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">9bece6c085083c0e52a6850644165e0b4eebb1625ecb99e67aa3b47a49ff0616</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">458fbededb536bad02200e06bbdecdf859cc5199d2c43e1547ee06bdc6aba882</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9f3b0862eb916232a96b6b22c40a444ff9df1777d4f06dd7135b7edeac1d3f00</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9ac20b8393bd4a9d55beadd4315b9c41b5000f1544ed65b7c547b53d14d6a23a</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bee439612c41392ea8b5e97421b946a8f9a089f4f7e3f8cd9af74818bab50ce0</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9b1b7adeb741cd215b2d2eb7aa3d8f6bfbf5e19ba95d0c33df5dd75eca2f142b</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.50.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">a577dd9a4322f8c3cb0e4d056e87f4d2b27a0c4530d8c3ff8370aa935504c20b</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.50.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">152562fd83abc19c85706fa847dc76b5dd80c8715855e39519e3e7266d7a98d3</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">db03bf5f7e1b27e9ef1919a8b5d577da511a6f18753e9a24c27186f67ec7d4aa</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">261c2e2b69ad4c1aac909cca27dc5249016a7442be6e68691b81a042c6e1a553</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">acc92201d98d3bb319532a4fb6cd8c401fac61b638a71c446eca1bde1d2b6390</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">294313b7b394be47f4a393621e827b52c8e0df6c2b87cc95269596ee3dcc30e3</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.50.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.50.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a9140b82a36d60b9c2a9aa27dd03cf710553f83d51776b295863919c5fe7659c</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-11455-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-22 00:00:00"/>
    <updated date="2025-07-22 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>- [4.18.0-553.63.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

- [4.18.0-553.63.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.63.1.el8_10]
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086}
- mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932}
- dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452]
- fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452]
- redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Cestmir Kalina) [RHEL-90099]
- kabi: freeze stablelist and stackprotector-related constants (Cestmir Kalina) [RHEL-90099]
- kabi: add redhat/kabi/asm-offsets (Cestmir Kalina) [RHEL-90099]
- kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Cestmir Kalina) [RHEL-90099]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-11455-1.html" type="self" title="ELBA-2025-11455-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-core" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4a0718055b8715d0ac91bd5aca0bebadfb7e0661dcf3dba3f43ec8b142a5f1d7</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.63.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">890e9ad47bd39ed2aa0c9688a73a0faf447470e524d3f2d19be46f96ef91b4e0</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f428d076801bf327471d632df2f13d8c8c072682e720306ada2668164fa59e2e</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">df06bb5b2021ba5a88cb6330e0b9f8002f21d358508b05eecd6b7d223bbe3ebb</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">dff3fbd12660b68bdd25ccf16fde5c7f4cfd63932de69da27d7b8d7bdb1018c8</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d1bc7ce5059a0e3dddccadb4ab25551fc4f8fa52bd9664c11dc4f982f9712e2a</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8ea311dd9cf4114f8b69cc043c867341815f5683c5f4d17e3e588d75628b37ec</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7192393d68f4d1f929b72d31f6e3ce8c52b47f30d2bb7716a14580166882f232</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">65977e1d56c88e7be2ff4c0a8a6d11ef5c36c171a21bed2cffce9e36c145408c</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">242c712e4192b4111420353a836efbaac2fc87668b5ae904c0de9a275cc773ef</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.63.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">fa88b4963208a35f75292f6ee198cad9927ec44807285f8aaa2d11c678fe0fd9</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c06959a907c61fd64b3df333fb3cb80a188fca182cb5a8207e868413f456f518</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e4833c3eec18432f0a5b29e38c79b85f86c32aa696df47e74a940c453f782ae7</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2b4d11bce0eeb38089af29b805d66ff5b424f98ed11dd68d9b689394dc4d68cd</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">edea39ca333e60c4183451c345887a5d89d334845c2f059f5556b4ec9797e172</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6e4a4302b088e189a4a046fa86144dbe6fe78e97472d77696be9223cbc3ab8e1</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4e38c64897b97ec7707539947d20bcba1a6236fe4babff2d0363de9beed5786f</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.63.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">43c5ff58dad35ca5f1f5f6e75b5bd4ccc79b8ca892c5f77025ba4868217efab7</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a98484402ee63284691de7bb0bf89943dc30da7d768297f38834a7eb29ecd6e2</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f6c0f3e9552a362568e8771fe49027e2420c9132209d6ea22ace23f2350eb146</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.63.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.63.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d5ed131821212480787f7c1d55d89bab7df7d562592d0a6274f8b6fe82cbd3f4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-16919-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-30 00:00:00"/>
    <updated date="2025-09-30 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.77.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.77.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.77.1.el8_10]
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797}
- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797}
- net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718}
- firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-16919-1.html" type="self" title="ELBA-2025-16919-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-core" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c00656943c6b3c0570424caa87e52251c2a86080873ef5c0bdec000627b13e87</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ddb2cba0adb35e37589aa47f6197592d9d91b745d9b32739c3c01bbd6a5ceb0d</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c463c0a2371fc8d9665937f9427237645b62a9f10fce028c2f20247045604433</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f72391bd4232ed88f8b23c4536b578bc552b6cf5eb178c0076562ea704020387</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.77.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">6bc0c5df28014d2ce75d8c89aeddc1834feb227743578e5bc44eab7c89aeb40a</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">007a357d6c2a8b4acd3265f12b72ab8fb7a12187d50e3c32742019c00b02f783</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b79e3928b8f45f6f3d89fe0a3b14734286f91b592e8a06aefdc11a98140e0504</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.77.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">4a6d115cc55a32af2f3e927df13db353bb98759a2846c59da29d2e5e83a6fcf8</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ae241ff4d3ce08a4844d319d62605bd15b2d4d326d4d0348f6ac41f9692532ad</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c4fe7580c4263794ec0b9b84e7821bc4ca4de9c8dd8898152a6a1405173960cd</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">37de0bd60097b7ee3ff4c54fd0dd8ecf68c0bbf102c8069a09d658d5227cf08a</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.77.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">02d69811ae552d61e544a12dc5d786a28ddc86754b58e59e1af947be10cc6ad4</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a9d771906af2a4bb006571e29cb85d01166c6b89d690aeda670166c38d81d042</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">867f14a7789d41a309bc5155d1c5f72cde5ae52d4b2552ffabff40b1fecb40d5</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e0ad559719037021bf8d161f3563e5e39fad861e051dde8d3ce1c4a7adbc8fd8</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e20e711d857b2f1160cb69c4a1116e8e2bea780fac37c707fd072dc6106d8183</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fa44315b8e95ba665476cf3b5f3b22681e373cedeb7dd0544f687177ad837329</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">97b9d76a471a9ea0af165c9be8036edfe25c7706934587d2b09c18cbf8911d54</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1180eb3e1b45edd0077a9651cc22b1468212b0ec788f4d44678515a618f2a78a</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">800b8b96e649139e641f462e95028c15a2922818eed9abf8b4ef5693adc7392e</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.77.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.77.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">01de1b3bcf1c1683b46a36955671adbc20d65295185ca50336d3c5865fc8bbc1</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-9580-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-06-25 00:00:00"/>
    <updated date="2025-06-25 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.58.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.58.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.58.1.el8_10]
- ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-89535] {CVE-2025-21764}
- ipv6: use RCU protection in ip6_default_advmss() (Xin Long) [RHEL-89535] {CVE-2025-21765}
- net: add dev_net_rcu() helper (Xin Long) [RHEL-89535] {CVE-2025-21765}
- net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() (Xin Long) [RHEL-89535]
- idpf: check error for register_netdev() on init (Michal Schmidt) [RHEL-71182] {CVE-2025-22116}
- idpf: avoid mailbox timeout delays during reset (Michal Schmidt) [RHEL-71182]
- idpf: fix a race in txq wakeup (Michal Schmidt) [RHEL-71182]
- idpf: fix idpf_vport_splitq_napi_poll() (Michal Schmidt) [RHEL-71182]
- idpf: fix null-ptr-deref in idpf_features_check (Michal Schmidt) [RHEL-71182]
- idpf: protect shutdown from reset (Michal Schmidt) [RHEL-71182]
- idpf: fix potential memory leak on kcalloc() failure (Michal Schmidt) [RHEL-71182]
- idpf: fix offloads support for encapsulated packets (Michal Schmidt) [RHEL-71182]
- idpf: fix adapter NULL pointer dereference on reboot (Michal Schmidt) [RHEL-71182] {CVE-2025-22065}
- idpf: fix checksums set in idpf_rx_rsc() (Michal Schmidt) [RHEL-71182] {CVE-2025-21890}
- idpf: fix handling rsc packet with a single segment (Michal Schmidt) [RHEL-71182]
- idpf: add more info during virtchnl transaction timeout/salt mismatch (Michal Schmidt) [RHEL-71182]
- idpf: convert workqueues to unbound (Michal Schmidt) [RHEL-71182] {CVE-2024-58057}
- idpf: Acquire the lock before accessing the xn-&gt;salt (Michal Schmidt) [RHEL-71182]
- idpf: fix transaction timeouts on reset (Michal Schmidt) [RHEL-71182]
- idpf: add read memory barrier when checking descriptor done bit (Michal Schmidt) [RHEL-71182]
- idpf: deinit virtchnl transaction manager after vport and vectors (Michal Schmidt) [RHEL-71182]
- idpf: use actual mbx receive payload length (Michal Schmidt) [RHEL-71182]
- idpf: call set_real_num_queues in idpf_open (Michal Schmidt) [RHEL-71182 RHEL-90849]
- idpf: fix idpf_vc_core_init error path (Michal Schmidt) [RHEL-68233 RHEL-71182 RHEL-90846] {CVE-2024-53064}
- idpf: avoid vport access in idpf_get_link_ksettings (Michal Schmidt) [RHEL-71182 RHEL-90846] {CVE-2024-50274}
- idpf: fix netdev Tx queue stop/wake (Michal Schmidt) [RHEL-71182]
- idpf: fix UAFs when destroying the queues (Michal Schmidt) [RHEL-71182] {CVE-2024-44932}
- idpf: fix memleak in vport interrupt configuration (Michal Schmidt) [RHEL-71182]
- idpf: fix memory leaks and crashes while performing a soft reset (Michal Schmidt) [RHEL-71182] {CVE-2024-44964}
- idpf: compile singleq code only under default-n CONFIG_IDPF_SINGLEQ (Michal Schmidt) [RHEL-71182]
- redhat/configs: set CONFIG_IDPF_SINGLEQ as disabled (Michal Schmidt) [RHEL-71182]
- idpf: merge singleq and splitq &amp;net_device_ops (Michal Schmidt) [RHEL-71182]
- idpf: avoid bloating &amp;idpf_q_vector with big %NR_CPUS (Michal Schmidt) [RHEL-71182]
- idpf: split &amp;idpf_queue into 4 strictly-typed queue structures (Michal Schmidt) [RHEL-71182]
- idpf: remove legacy Page Pool Ethtool stats (Michal Schmidt) [RHEL-71182]
- net: remove gfp_mask from napi_alloc_skb() [idpf] (Michal Schmidt) [RHEL-71182]
- idpf: stop using macros for accessing queue descriptors (Michal Schmidt) [RHEL-71182]
- idpf: don't enable NAPI and interrupts prior to allocating Rx buffers (Michal Schmidt) [RHEL-71182]
- idpf: Interpret .set_channels() input differently (Michal Schmidt) [RHEL-71182]
- idpf: make virtchnl2.h self-contained (Michal Schmidt) [RHEL-71182]
- s390/pci: Serialize device addition and removal (Mete Durlu) [RHEL-95783]
- s390/pci: Allow re-add of a reserved but not yet removed device (Mete Durlu) [RHEL-95783]
- s390/pci: Prevent self deletion in disable_slot() (Mete Durlu) [RHEL-95783]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Mete Durlu) [RHEL-95783]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Mete Durlu) [RHEL-95783]
- s390/pci: Fix missing check for zpci_create_device() error return (Mete Durlu) [RHEL-95783]
- s390/pci: Fix potential double remove of hotplug slot (Mete Durlu) [RHEL-95783]
- s390/pci: remove hotplug slot when releasing the device (Mete Durlu) [RHEL-95783]
- s390/pci: introduce lock to synchronize state of zpci_dev's (Mete Durlu) [RHEL-95783]
- s390/pci: rename lock member in struct zpci_dev (Mete Durlu) [RHEL-95783]

[4.18.0-553.57.1.el8_10]
- smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) [RHEL-55825]
- cifs: fix double free race when mount fails in cifs_get_root() (Paulo Alcantara) [RHEL-55825] {CVE-2022-48919}
- security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-68090] {CVE-2024-50301}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-9580-1.html" type="self" title="ELBA-2025-9580-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-modules" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f9eb54ea8da65102cb43c4824e5435d3f6585ba86dfce484988ef6db6b34bd87</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">deafea3a70920261d13f9fd5054c551687e4641dcef284f5b3caccf14ab43d5b</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cc65c98b4b65a6b3edbffd874e3163e244a06bba403b23f6871315769061df93</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cf16b3209ae60a2c4f49cc8c49acae2dc270e24a2b469926e46624bb21713314</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0e508fcc8d8f95a7b6c09cc8ee6c11b03df57cb1c25b9517db234108617e7b7a</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.58.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">ebc865ec364624688c8c6ad89ba30803c5b5a1a3d6d9d70d0b5944563959d6e0</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">661107baffc873bff2d4ce2c8a7c1104f5e8b6a3f36c75b740707de548ce06e2</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">abd10bb08fff1142326fd79f3fe160d5b2e16857bc4686b2c32833bc4ae8b52c</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6953dd9389b215bcb9dd86c39f8f27410ef3b07408ac2f4d8cc310d85a302d75</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e3ea939723a2010d5d968e3114b96fe83881d798ec5d9792718961e6d5d43214</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f347b54614dbb5593236eeae310f751eaa1eabeba638b9538e3f7a26cfe12c5f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.58.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">7d6daa2fc9acfd4551d8aa825941390712540e49f3848f64b5eac7b0aa46f2a8</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">564b13c00c10d315518256aca671203844b765bc5f699bc2bb8fb93af79814b6</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a0656bc6e8e52e430f78530083382d4f4b4394273bc784c1eb545a734b4e9ca1</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">646bd7a760422df061d1c7d3513e080fd138fa8cf78fcd0cfc7830616c34c0f0</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b1e63de7dd7428e0dab01a9c027fe78814244e43379b476ea0f540e702242da7</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.58.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">9aecb27ea2985d71b42b8808dcdee088dd7ee0c0a5fc06f915f2d85c8e7e6bf5</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7ca597db4d9d70f00059f3eda217ca02c7612750ed846d9674847d2a03158915</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">600573ac919659b2b464a35e42d87da829e6b65d6543faab3973c1201c0c281f</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">29c25b82f2aeb7c67d106c12523e55eeb5e3d4678e554da77df6300b4689abcc</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.58.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.58.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1d6bea1ee5894ca82a0bed6d784186f1407fd145832c1548433ae28ae80ac545</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-17797-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-10-15 00:00:00"/>
    <updated date="2025-10-15 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.79.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.79.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.79.1.el8_10]
- Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305}
- KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-17797-1.html" type="self" title="ELBA-2025-17797-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-tools" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ee7a60ef388c4b640c1814c964b41645cc201aabfacb75c85f9f40d1e92fd5d2</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">94471d81c8db4de350ebc5569cbc952b28d7183bc6c361213548bce2bf27d6b1</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.79.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e713e4f26a484875a1ec293ca82dc9b6f737e40e33677eafb0d730f7f0d6d2ab</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ce9c4fb3419daf79aaf81ffc6a8991ee303c66da78759c5e16becfea594a7461</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">baabe08944c8848d420aa912d127a0077b1a30bf28721314969bc90bc228651d</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">09be3c6655a4e918b28d8b73e74e7171b45d40e690c3fec44e1adf7cf1170db0</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">42034e65395581034732ee1bd6df2d15c8b00f7c4b33c4ad2f03928b59de47b9</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5478a0f6c25165362e16986d011e823ce3c537ed10cae7f80d456a35987c2997</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cc152382116f4b56abded16bbd80e7248af8939af2e0dd51f0a2268f2fcf2aa7</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5e952a3c3edc38e54223e50e04c98444864852c9064b8b965b2a64bc4f01f7d9</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">506d20d0feec1c547c2bd6ec292bd4ef0bdbb83db051bc5fb7fcd9ee6909b82f</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8c84cc2c34d9f2d1c455facd3ded0a07f297f612e06bac45c97dba335bea8666</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.79.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">1b9fb12fe392456813d66a5fdc10e02bd6a9ac19be955766a0c9b5af494e953c</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1167c0e4312aa7e742ec87c5233c9c26d29180caaa2eaff536110cb7f05d0244</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.79.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">36f0e9bc24ddae6ce7baebb4255510ef10a3b828ab1c3e258dcb7597cfa5c29f</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e4ae7c3903ddefa759507034b81ea34ec0f3e59db04cad6f5ca8b8b7c2102d82</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e7175b3105e260781551d5d189dbfac9040abe3a174ff1d1d958c923f1314dfb</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2a99d600dfcd184a6d26ef61467046be081d687a278ffc52be630a529ebd3325</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4858634aa308db338f26bd88020566d9c0a5089ebc1c1678b2cf923be90398ef</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6644dc629aec57dddb16c956e79d3947a02ea44b83dbf91ddb2b155aa0f94145</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.79.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.79.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6485543376961be96d4b76ec601e2b95722dcdb3a616f116973722964233bca9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-8743-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-06-11 00:00:00"/>
    <updated date="2025-06-11 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.56.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.56.1.el8_10]
- tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963]
- um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395}

[4.18.0-553.55.1.el8_10]
- sched/fair: Fix CPU bandwidth limit bypass during CPU hotplug (Phil Auld) [RHEL-85171]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-8743-1.html" type="self" title="ELBA-2025-8743-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-cross-headers" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0daf479ae65ac05b22fbd77089a0d16ec7a77ebd0fb1d002a24c2c4bd052cef0</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">770c6fce4ac325ad5f7689bdb34092dbe0a3934979522d0f9c6f9f5c679bb6d5</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9bdcde014e6609ea54d4b801b7cf8b19e071d32ac4d777dd94992ccf86458d8a</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d6baa2b6def449ef1005de1767836eaf5691dcf4ba0351498f6123177519d858</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.56.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">2d0bed6d9bcf7041e3c44b1c624c83e9f9858db38faef4bef7605d54c67c2ac8</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">82b9d7beec4e64310716be76d3155b50fef7448edc7508d4c6ac51f8af9f30da</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ed70ad12d6a210623f1822e21e0345ca65ebf9c2f3670cc1411be4baed85542e</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f918d9f9a2b530975330db2c25acf9782d76ff43a607675757744f3b06bb894f</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a9e5ce67d5a94378e4bd5c8702e574f33efc2989e4e0f85948feca35f569c839</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6c7419d7846dbb17e86a2475d8beebe33e1fbb388eee23bca982b9ba4cdb10cf</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">602f9aff481c1b7c098ea7955771a03260b20de4e281281066ce2277b6ddcf6f</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ee30fcaf4eb47e03345f8868218c4a236928936d1233787b8947281d90cc620a</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.56.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">04dd893979485baf3b7cdbbbefef2316cf3e228bed3a4fb9ea40db20fe268ece</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1f4e12d9a4b67d19e9bf7b8b2ea9af0352c7fa1a450da837673b2fdee38f71f8</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">31f6bcfd0ab6fb031c30e80a5895a1eb594c4e4933725858f5a6cd8f5c4937fb</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.56.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">93d9834a25e803f6da062f3871f69965dbe213e6a4b8365a98cd73f8874cd25f</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">479dfd9a144ab2b3691a63058c6a151e9836203d739578f681aa4aeafd96794b</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">66384980dbe1f092cf459a565a042a509a9084666a8d35a7038544b42fe5d4af</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">04158da87e3ca33a41f38407ca1715603c9177ca51c24931fcc996b84f39de39</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1ad4c76839781d09f8759bdf4e6027988990b1f270781162ac6ebaad7ff20eef</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.56.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.56.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">02c7ec04d2c3cf850b166b46dac27ec68a824834300d010dcbceee19e439c575</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="security" version="1" from="el-errata@oss.oracle.com">
    <id>ELSA-2022-9496</id>
    <title> kernel security update</title>
    <severity>Important</severity>
    <release>Oracle Linux 8</release>
    <issued date="2022-06-21 00:00:00"/>
    <updated date="2022-06-21 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.18.0-372.9.1.0.2.el8.OL8]
- debug: lockdown kgdb [Orabug: 34270802] {CVE-2022-21499}

[4.18.0-372.9.1.0.1.el8.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELSA-2022-9496.html" type="self" title="ELSA-2022-9496" />
      <reference href="https://linux.oracle.com/cve/CVE-2022-21499.html" id="CVE-2022-21499" type="cve" title="CVE-2022-21499" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">930bfad66eb7b80c2db6b6ee599f8e3418262df72a6cb3dc97633e9f8d953396</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">b246a0be59df9d7e1d81c51b7024eca5237ca3a20b405139070f35cdcdc796cf</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">12bbcf2969a1759726a0d3546ed3fd82cb2081b4d4002932d7073484ca3b73f4</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">81d5e83083cdb30dbcb03c7fab8e29f6e330ab3abd056c2a8be9c38098db0905</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">8f92ad9df102f6445bcfecf355d8889bf107913761197cfb6f3b44644db9f362</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-372.9.1.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">6d0c9162fff506ee9694c805746e3b45dec3ff5f8197695e5bf01771841c9874</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">4665582a654c794c0b4d1b7907af538c52d38c63174c2587d2b55f023ef40f0d</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">84c7e3329f564c23bc219ca084856678e26d65cd96d31dc0616522613dda2c59</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">37e6c624476b58c2143753b23a19f5e1d3a6b1166271e70c6084e25e2fb0f756</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">f5f7bb4d6841d182addbcb2794d5e86ddeafb900765ae85caf6e7dffaf2b27f8</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">61318c424d4a17e1af868b4b6d0375bcf84d8e58e8e537c60ca32b3453cdac07</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">2e6be41dccd4538e5777eb7008a760989064fda306d53072417b56fb9fa3f5da</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">a2ab620dd35939287c9e4d55157dde6b0553373cad7d4bb727cebd1492e9867a</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="src">
          <filename>kernel-4.18.0-372.9.1.0.2.el8.src.rpm</filename>
          <sum type="sha256">12f612872fb8e010e1f4b4b2b8e06c0e7ac634ccbae6cb512b390f51bef8f193</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">85f4bc270b53d886fecc9b50d658f911a6a55243c6247c0f80b76aac80af004d</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-372.9.1.0.2.el8.noarch.rpm</filename>
          <sum type="sha256">b0c363fc2c2f71eed16f35a960d639104d91aa524fb2c73a87b05a1aa5251af7</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">860bd62ba73cd4720ec444e8d63ffdf8fb196f0f909b0843d7481582554ca158</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">96875c1a1812e295dc3856548b4ec9359a8d6100a4cd67f879b8f29ba3f62395</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">7e1d76b9227f10d1c66dfd5fbdf4fad47ff5f957940bad6556151a7c3a6c9651</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">d6a66a6f918ad5649f2ad3e9be202dc9264840390261b7c5633253785bf81e8e</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.9.1.0.2.el8" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-372.9.1.0.2.el8.x86_64.rpm</filename>
          <sum type="sha256">fa3835f342dd999aa679fe2a1733ca801ea363b783312d8e15b96bf8eed2090e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-7531-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-05-16 00:00:00"/>
    <updated date="2025-05-16 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.52.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.52.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.52.1.el8_10.gfd1b]
- netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141}
- NFS: Extend rdirplus mount option with 'force|none' (Benjamin Coddington) [RHEL-16285]
- idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266]
- idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266]
- idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266]
- idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266]
- redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342]
- gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875]
- gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875]
- gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875]
- gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875]
- gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875]
- gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875]
- hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-7531-1.html" type="self" title="ELBA-2025-7531-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">20384c22b17fc01f43770928bb5cfeb062234e0a7878464e75d6e555e0071359</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cb4f4b8801a1af90ab6f0cc2eeec814913cb6b0aa402085d1c591d8da73a2f32</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2c8efe0ac6ce781407700500dce7e139f3f9e2e37881a9f87c87ba837157f3b9</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7101d90870baa6a3310fac86899d18b3122f42f2a6e96590d1efce2629edfaa9</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">afeddad4486f2d900ab06333a8fb8bba78905f27bb1ae7d8e97c19fd3d3c2db2</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b6bd1d45dd6be1e1d59718fb81218a52bb7739cff17a1979d9e7df533ba6acdd</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">94d0097d935a52c34a2f069884f7661d2c7b8fe385add4f7e15145866c7245fb</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">81e581101d5788ca86303e82b41ffed4134e71b24b06893f231ca088dbdc0bbc</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">419ca73d1695038193e15ba1a01b669b6d5b511025adc7bd284297db03698939</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.52.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">f645c09ff5da6558f116335aac4feb4d13c0666d108fc0f69e0cae087a439594</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">07bc0dcb2c28bd1ea1900fd45aea43d28739851419e1b5a01f40f406aafcf159</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7bb7ca9eec2db61be9d3685d0dbb56f349c21cc99400e88959cd9864f869b286</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1aa32ea8e376c774638ae6e7880fd21e3dd892027e287f8a9c194e43aff821e6</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">edb2826cdee5fa3813bc7b4b3a33ab7b804e0727055406e37e29c71bfbe97172</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.52.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">6cd1937504bf04973a1abb9f64f153a3c0cc60052d399a021f9f184f64b1b595</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fe6ae9eeb4a47a9c58ac32b2d6344a5b4b0233328ee9c9f5ce4a621f3aaa24e9</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2772a610912713f954730c8977f563dba2eabba5fefa7d85b1c1df0db25e6ece</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d730fe26af1900d53fbb07d03572e30ac635c4b20e2ba728565c19b32391a0d2</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cdf289dee0091c7b757472cac5d67261c0b18034df01cfe53473e06af307af1c</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.52.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cd2c1a013193fae4cf9cfe2904fb96366d853deabc2ca866b49bee4269c56957</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.52.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.52.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">2e16c6e7dfbf9eb787646a1ad0a6b60c7780f7ea5edf82748c9fa5cc99beb725</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-16195-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-05-15 00:00:00"/>
    <updated date="2026-05-15 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.124.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.124.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.124.1]
- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174586] {CVE-2026-43284}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-16195-1.html" type="self" title="ELBA-2026-16195-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-devel" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d5a86dc97dc2d89f14ca8a67cf8ab01f263145616db82b14944c186b08d09b51</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">915a15cb896be6bbdb999d6e7c2867c9a22cb0d704d79092307bece4e3fb6901</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.124.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">ae513e72b878ea10616c73344cb292371a653fe8ff7a2ea9aab15ca76ac8bba0</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8c95ef0a5f17e9d96d912185f19ab2803e921c3990b3c8cb4266e484e0b20e1b</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4134dff6855ffb859e6239389f1de52ec4e72e2a203d4f82e60f8c09f8d88523</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d88e629e17b9c101b0702d8a99c985a595bb7bf600ed9d09f2907027f46a8135</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0e87a5e7851657808d8891933c8624d8d902c9384e52213c8eeb265d11878903</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5fd37d84ad1e3e3b02023ba96c99c66b6f62446d66a62ce2269447dcf16ee81a</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">19874d1b9edc601b0d8abef820aa4ba1fdd898a5b1f03093f8f4fcbde1213b53</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4bc22fc5ad5def24c854e774c7921af3b7bdf0d191f74f8fb9dbb690f403a3e0</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.124.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">87e10538ccd6a561a147743a6422b50a0730df3873257047160a17c4895226db</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.124.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">9a05e1af6e19633e488e6c0437beee2d4355011bf192d277f3ae6a2528be9701</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3699ced11e1659e0fed12a94e9cccc1bb930491b6e6aabb4e53c3fca2acd9461</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e56493f7437bc007cba05a5882acdb063cf3dca19a8da11c8fb792f68d10a204</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b9f3d10960d56d892ad0bb35b705c5930451d3e9e16231fa80dc31619952c1c1</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4bb18d96a424bb2123314e300089a13902cc8201fb86607c6ae0fba64201aec3</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">623b1cd9ea58e0ac91f9545fbf8277a8c47bdcae1adb988d6f3c768b256e02fd</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">54ccc49a6f25e0f19ed2d6c179c135c84b2954a07f50946a778573b883ca6e03</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8fe4e0a32c8ead7e1a0bd762c051d5431669b24863c6b5d5e4ac23a3bfda6d14</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ed1632ea8f80d623cd9e98707cdc8bb5d5030685b2cc3c7bd15e955d1b72fcd3</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.124.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.124.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1caac2d97a71e8f1f0d0ec662fe33e14d0609566ee516018916a1f6e682dbe12</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-3507-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-04-08 00:00:00"/>
    <updated date="2025-04-08 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.47.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.47.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.47.1.el8_10]
- nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136]
- ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156]
- bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138}

[4.18.0-553.46.1.el8_10]
- s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934]
- s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934]
- x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832]
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785}
- nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085]

[4.18.0-553.45.1.el8_10]
- gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269]
- gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269]
- gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269]
- gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269]
- gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269]
- gve: Clear napi-&gt;skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937}
- gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269]
- can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922}
- gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694]
- gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694]
- net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810]
- net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812]

[4.18.0-553.44.1.el8_10]
- HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302}
- ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786]
- ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786]
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197}
- ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786]

[4.18.0-553.43.1.el8_10]
- s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999]
- s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999]
- locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894]
- pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971]
- KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229]
- KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229]
- KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229]
- s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229]
- KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229]
- scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807}
- net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756]
- net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756]

[4.18.0-553.42.1.el8_10]
- net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261]
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458]
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950]
- scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415]
- ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161]
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826]

[4.18.0-553.41.1.el8_10]
- virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886]
- dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599]

[4.18.0-553.40.1.el8_10]
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104}

[4.18.0-553.39.1.el8_10]
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) [RHEL-73915]

[4.18.0-553.38.1.el8_10]
- net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891]
- s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385]
- s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385]
- s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451]
- s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451]
- s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451]
- s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451]
- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387]
- s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383]

[4.18.0-553.37.1.el8_10]
- arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275}
- scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275]
- scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275]
- scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275]
- NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889]

[4.18.0-553.36.1.el8_10]
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649]
- scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790]
- scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790]
- Reapply 'scsi: st: Add third party poweron reset handling' (John Meneghini) [RHEL-28790]

[4.18.0-553.35.1.el8_10]
- samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480]
- samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480]
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396]
- scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396]

[4.18.0-553.34.1.el8_10]
- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122}
- NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647]
- xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924]
- KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974]
- x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362]
- dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860]
- i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}
- i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}

[4.18.0-553.33.1.el8_10]
- Revert 'scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload' This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073]
- drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796]
- drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796]

[4.18.0-553.32.1.el8_10]
- irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192}
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192}
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082}
- gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869]
- Revert 'GFS2: Don't add all glocks to the lru' (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869]
- gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869]
- gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869]
- gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869]
- KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080]
- vsock/virtio: Initialization of the dangling pointer occurring in vsk-&gt;trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264}
- md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585]

[4.18.0-553.31.1.el8_10]
- xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110}
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256}
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862]
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862]
- cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988]
- cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988]
- cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988]
- cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988]
- cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988]
- cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988]
- cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988]
- selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695}
- gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823]
- gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823]
- arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099}
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949}
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142}

[4.18.0-553.30.1.el8_10]
- media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043}
- blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200]
- rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684]
- rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684]
- rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684]
- smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363]
- cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363]
- cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363]
- cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363]
- autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168]
- autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168]
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564}

[4.18.0-553.29.1.el8_10]
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399}
- mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858}
- cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002]

[4.18.0-553.28.1.el8_10]
- s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400]
- smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400]
- cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400]
- Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991]
- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709]
- audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004]
- KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999]
- raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263]

[4.18.0-553.27.1.el8_10]
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668}
- bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989}
- bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990}
- bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009}
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773}
- tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257]
- tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257]
- ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826}
- xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100]
- loopback: fix lockdep splat (Xin Long) [RHEL-58100]
- blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100]
- loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100]

[4.18.0-553.26.1.el8_10]
- nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062}
- cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037]
- ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156]
- gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Rename GIF_{DEFERRED -&gt; DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757]
- gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757]
- gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757]
- gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757]
- gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757]
- gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757]
- dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492}
- dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939}
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075]
- NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397]
- cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251]
- cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251]
- cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251]
- cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251]

[4.18.0-553.25.1.el8_10]
- cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052]
- cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052]
- cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052]
- smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052]
- smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052]
- cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052]
- cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052]
- cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052]
- cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052]
- cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052]
- cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052]
- cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052]
- cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052]
- Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052]
- SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052]
- cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052]
- cifs: Fix unix perm bits to cifsacl conversion for 'other' bits. (Paulo Alcantara) [RHEL-56052]
- drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttila) [RHEL-53633] {CVE-2024-41092}
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224]
- kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292}
- gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079}
- of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541}

[4.18.0-553.24.1.el8_10]
- cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729]
- padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889}
- i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000]
- sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935}
- net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608}
- net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608}
- r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586}
- netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018}
- memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892}
- memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892}
- mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892}
- mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892}
- ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676]

[4.18.0-553.23.1.el8_10]
- ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002]
- netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924}
- netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017}
- netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017}
- netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017}
- netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042}
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070}
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898}
- netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503}
- netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503}
- netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503}
- netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851}
- netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
- netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
- netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
- netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
- dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301}
- KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976}
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540}
- tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284}
- Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857}
- drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924}
- tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983}
- block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854}
- gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936}
- drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093}
- ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961}
- mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880}
- ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066}
- ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066}
- netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
- netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
- netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
- netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
- USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244}
- ACPICA: Revert 'ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.' (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984}

[4.18.0-553.22.1.el8_10]
- wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071}

[4.18.0-553.21.1.el8_10]
- s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874]
- protect the fetch of -&gt;fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265}
- net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558}
- mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441}
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904}
- ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322}
- net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246}
- drm/amdgpu: change vm-&gt;task_info handling (Michel Danzer) [RHEL-49379] {CVE-2024-41008}
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Danzer) [RHEL-45036] {CVE-2024-39471}
- drm/amdgpu: add error handle to avoid out-of-bounds (Michel Danzer) [RHEL-45036] {CVE-2024-39471}
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Danzer) [RHEL-52845] {CVE-2024-42228}

[4.18.0-553.20.1.el8_10]
- KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989}
- devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871}
- phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600}
- nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769}
- nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769}
- ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683}
- sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023}
- nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515]
- mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595}
- mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595}
- ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605}
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894}
- mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055}
- mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055}
- cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904]
- cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904]
- ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972}
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972}
- ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972}
- ext4: fix uninitialized ratelimit_state-&gt;lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998}
- ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972}

[4.18.0-553.19.1.el8_10]
- drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttila) [RHEL-35222] {CVE-2024-26939}
- RHEL-48620 (Kenneth Yin) [RHEL-48620]
- net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855}
- net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: asix: fix 'can't send until first packet is send' issue (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101}
- SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936]
- SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936]
- SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936]
- SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936]
- x86/bugs: Extend VMware Retbleed workaround to Nehalem &amp; earlier CPUs (Waiman Long) [RHEL-48646]
- wifi: iwlwifi: read txq-&gt;read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922}
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919}
- nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638}
- block: don't call rq_qos_ops-&gt;done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412}
- nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152}
- ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901}
- ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044}
- leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830}
- crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579}
- scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559}
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240}
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901}
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902}
- net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167]
- net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167]
- net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167]
- net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167]
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953}
- KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953}
- media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: avoid confusing 'transmit timed out' message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
- net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094}
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400]
- KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027]
- KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027]
- KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027]
- KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027]
- firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238}
- firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237}
- mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466}
- slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466}
- wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800}
- wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798}
- lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432}
- include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432}
- EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236]
- scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809}
- gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570}
- gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570}
- gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570}
- nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846}
- HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866}
- scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797]
- scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797]
- scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797]
- Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (Audra Mitchell) [RHEL-42625] {CVE-2024-26720}
- mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131}
- mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720}
- ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289}

[4.18.0-553.18.1.el8_10]
- scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920}
- tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013}
- drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Danzer) [RHEL-38210] {CVE-2023-52817}
- drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Danzer) [RHEL-38210] {CVE-2023-52817}
- drm/amdgpu/mes: fix use-after-free issue (Michel Danzer) [RHEL-44043] {CVE-2024-38581}
- drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Danzer) [RHEL-30603] {CVE-2024-26649}
- drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Danzer) [RHEL-35160] {CVE-2024-27042}
- net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040}
- tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154}
- NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508]
- NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508]
- scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124}
- Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097}
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478}
- drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988}
- usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582}
- USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582}
- scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978}
- wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433]
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941}
- net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988]
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929}
- Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836}
- Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836}
- Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836}
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226}
- wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225}
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912}
- wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911}
- VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944}
- VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944}
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944}
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114}
- usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097}
- nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939}
- drm/radeon: check bo_va-&gt;bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060}
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041}
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035}
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356}
- tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007}
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627]
- net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627]
- tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627]
- tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627]
- netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040}

[4.18.0-553.17.1.el8_10]
- kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984}
- vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874]
- fs/dcache: Re-use value stored to dentry-&gt;d_flags instead of re-reading (Brian Foster) [RHEL-35874]
- fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338}
- netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005}
- firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609}
- ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960}
- HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717}
- cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997}
- x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877}
- PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809}
- PCI: Drop pci_device_remove() test of pci_dev-&gt;driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809}
- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttila) [RHEL-26909] {CVE-2023-52470}
- USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760}
- cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517]
- smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517]
- smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517]
- smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517]
- smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517]
- selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501}
- drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501}
- udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884}
- filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012}
- Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619}
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959}
- blk-cgroup: fix list corruption from reorder of WRITE -&gt;lqueued (Ming Lei) [RHEL-33695]
- blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695]
- net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954}
- perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476}
- vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499}
- serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527}
- powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065}
- powerpc/eeh: avoid possible crash when edev-&gt;pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064}
- x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096}
- mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931}
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506}
- tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091}
- tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090}
- usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619}
- usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619}
- hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384}
- block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074]
- block: support to account io_ticks precisely (Ming Lei) [RHEL-23074]
- watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321}
- hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385}
- mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560}
- mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560}
- dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880}
- tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383}
- hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386}
- hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393}
- nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497}
- driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287}
- phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754}
- ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455}
- NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076}
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090}
- ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084}
- af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923}
- virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352}
- net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522}
- tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665}
- vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804}
- Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840}
- netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958}
- tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645}
- KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072]
- firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056}
- SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843]
- firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039}
- firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038}
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995}
- net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883}
- x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310]
- x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310]
- x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310]
- x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310]
- x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310]
- jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310]
- x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310]
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989}
- xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013}
- xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014}
- dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330]
- netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589]

[4.18.0-553.16.1.el8_10]
- x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648]

[4.18.0-553.15.1.el8_10]
- Revert 'scsi: st: Add third party poweron reset handling' (John Meneghini) [RHEL-44613]
- ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502}
- ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502}
- net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624}
- xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927}
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395}
- net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979}
- net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979}
- net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979}
- irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847}
- irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373}
- i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632}
- iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
- swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
- swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
- swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
- swiotlb: Reinstate page-alignment for mappings &gt;= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
- swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
- swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076}

[4.18.0-553.14.1.el8_10]
- s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754]
- perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798]
- vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823}
- cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754]
- xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984]
- xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984]
- xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984]
- xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984]
- xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984]
- xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984]
- xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984]
- usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790}
- stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627}
- s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755]
- tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489}
- xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472}
- fs/proc: do_task_stat: use sig-&gt;stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686}
- fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686}
- fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686}
- exit: Use the correct exit_code in /proc/&lt;pid&gt;/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686}
- scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811}
- scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929}
- scsi: qla2xxx: Fix double free of the ha-&gt;vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930}
- scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931}

[4.18.0-553.13.1.el8_10]
- redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko)
- x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201}
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202]
- perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202]
- Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202]
- KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202]
- x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202]
- KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202]
- KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202]
- mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889}
- powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974}
- wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530}
- cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573}
- net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740}
- vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810}
- net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978}
- tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304}
- pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619}
- drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662}
- drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810}
- drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940}
- drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648}
- drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960}
- block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747}
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487}
- net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971}
- igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853}
- mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961}
- cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615}
- cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672]
- cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672]
- smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672]
- smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672]
- smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672]
- cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672]
- cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672]
- cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672]
- cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672]
- cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672]
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672]
- cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672]
- cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672]
- cifs: list_for_each() -&gt; list_for_each_entry() (Paulo Alcantara) [RHEL-34672]
- smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672]
- cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672]
- cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672]
- cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672]
- cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672]
- cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672]
- cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672]
- cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672]
- cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672]
- cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672]
- smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672]
- cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672]
- cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672]
- cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672]
- cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672]
- cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672]
- cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672]
- smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672]
- cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672]
- cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672]
- cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672]
- cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672]
- cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672]
- cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672]
- cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672]
- cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672]
- cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672]
- smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672]
- cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672]
- cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672]
- smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672]
- cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672]
- cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672]
- cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672]
- cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672]
- cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672]
- cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672]
- cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672]
- cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672]
- smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672]
- cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672]
- cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672]
- cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672]
- cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672]
- cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672]
- smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672]
- cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672]
- cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672]
- cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672]
- cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672]
- cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672]
- cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672]
- cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672]
- cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672]
- cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672]
- cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672]
- smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672]
- cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672]
- CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672]
- cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672]
- cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672]
- cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672]
- cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672]
- cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672]
- cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672]
- cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672]
- smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672]
- SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672]
- cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672]
- cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672]
- smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672]
- cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672]
- smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672]
- cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672]
- smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672]
- cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672]
- cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672]
- cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672]
- cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672]
- cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672]
- cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672]
- cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672]
- cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672]
- cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672]
- cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672]
- cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672]
- cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672]
- SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672]
- smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672]
- smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672]
- smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672]
- cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672]
- cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672]
- cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672]
- cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672]
- cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672]
- cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672]
- cifs: remove old dead code (Paulo Alcantara) [RHEL-34672]
- fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672]
- cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672]
- cifs: have -&gt;mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672]
- do_cifs_create(): don't set -&gt;i_mode of something we had not created (Paulo Alcantara) [RHEL-34672]
- cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672]
- cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672]
- cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672]
- cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672]
- TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672]
- cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672]
- cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672]
- cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672]
- cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672]
- smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672]
- smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672]
- fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672]
- fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672]
- cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672]
- cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672]
- cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672]
- cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672]
- cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672]
- cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672]
- smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672]
- SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672]
- SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672]
- SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672]
- SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672]
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476}
- net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757}
- usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924}
- minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286]
- minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286]
- minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286]
- minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286]
- minmax: fix header inclusions (Desnes Nunes) [RHEL-37286]
- minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286]
- minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286]
- tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286]
- linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286]
- x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077]
- userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461}
- mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491}
- cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840}
- drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Danzer) [RHEL-31429] {CVE-2024-26660}
- net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555}
- drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486}
- md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598}
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017}
- netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897}
- netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205]
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924}
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952}
- netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011}
- netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900}
- netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899}
- netfilter: complete validation of user input (Phil Sutter) [RHEL-37210]
- netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896}
- netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270}
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286}
- netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065}
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019}
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020}
- netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024]
- netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408}
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925}
- netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217]
- ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796}

[4.18.0-553.12.1.el8_10]
- net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538}
- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Danzer) [RHEL-26893] {CVE-2023-52469}
- SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623}
- ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471}
- xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581]
- sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707}
- wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117]
- net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852}
- net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837}
- ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772}
- ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773}
- ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704}
- vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389]
- geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389]
- vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389]
- geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389]
- geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389]
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389]
- net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389]
- net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945}
- igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010}
- bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784}
- i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020}
- powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018}
- powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018}
- nsh: Restore skb-&gt;{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933}
- net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770]
- net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929}
- tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910}
- net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831]
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905}
- tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831]
- drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952}
- null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341]
- null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341]
- null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341]

[4.18.0-553.11.1.el8_10]
- x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-42121]
- Revert 'x86/bugs: Use fixed addressing for VERW operand' (Waiman Long) [RHEL-42121]
- KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-42121]
- x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-42121]
- Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-42121]
- x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-42121]
- x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-42121]
- KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-42121]
- x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-42121]
- x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-42121]
- x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-42121]
- x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-42121]
- x86/cpu: Fix Gracemont uarch (Waiman Long) [RHEL-42121]
- Documentation/hw-vuln: Unify filename specification in index (Waiman Long) [RHEL-42121]
- KVM: VMX: Access @flags as a 32-bit value in __vmx_vcpu_run() (Waiman Long) [RHEL-42121]
- x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix (Waiman Long) [RHEL-42121]
- x86/asm: Have the __ASM_FORM macros handle commas in arguments (Waiman Long) [RHEL-42121]
- x86/asm: Allow to pass macros to __ASM_FORM() (Waiman Long) [RHEL-42121]
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-39801] {CVE-2024-36921}
- ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-39784]
- ipv4: Fix uninit-value access in __ip_make_skb() (Antoine Tenart) [RHEL-39784] {CVE-2024-36927}
- perf mmap: Lazily initialize zstd streams to save memory when not using it (Michael Petlan) [RHEL-34876]
- perf tools: Fix spelling mistake 'commpressor' -&gt; 'compressor' (Michael Petlan) [RHEL-34876]
- perf record: Introduce data transferred and compressed stats (Michael Petlan) [RHEL-34876]
- perf record: Introduce compressor at mmap buffer object (Michael Petlan) [RHEL-34876]
- perf record: Introduce bytes written stats (Michael Petlan) [RHEL-34876]
- perf record: Introduce data file at mmap buffer object (Michael Petlan) [RHEL-34876]
- perf record: Start threads in the beginning of trace streaming (Alexey Bayduraev) [RHEL-34876]
- perf record: Stop threads in the end of trace streaming (Michael Petlan) [RHEL-34876]
- perf record: Introduce thread local variable (Michael Petlan) [RHEL-34876]
- perf record: Introduce function to propagate control commands (Michael Petlan) [RHEL-34876]
- perf record: Introduce thread specific data array (Michael Petlan) [RHEL-34876]
- tools lib: Introduce fdarray duplicate function (Michael Petlan) [RHEL-34876]
- perf record: Introduce thread affinity and mmap masks (Michael Petlan) [RHEL-34876]
- gfs2: Be more careful with the quota sync generation (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Get rid of some unnecessary quota locking (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Add some missing quota locking (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Fold qd_fish into gfs2_quota_sync (Andreas Gruenbacher) [RHEL-40901]
- gfs2: quota need_sync cleanup (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Fix and clean up function do_qc (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Revert 'Add quota_change type' (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Revert 'ignore negated quota changes' (Andreas Gruenbacher) [RHEL-40901]
- gfs2: qd_check_sync cleanups (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Check quota consistency on mount (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Minor gfs2_quota_init error path cleanup (Andreas Gruenbacher) [RHEL-40901]
- gfs2: fix kernel BUG in gfs2_quota_cleanup (Edward Adam Davis) [RHEL-40901]
- gfs2: Clean up quota.c:print_message (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Clean up gfs2_alloc_parms initializers (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Two quota=account mode fixes (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Remove useless assignment (Bob Peterson) [RHEL-40901]
- gfs2: simplify slot_get (Bob Peterson) [RHEL-40901]
- gfs2: Simplify qd2offset (Bob Peterson) [RHEL-40901]
- gfs2: Remove quota allocation info from quota file (Bob Peterson) [RHEL-40901]
- gfs2: use constant for array size (Bob Peterson) [RHEL-40901]
- gfs2: Set qd_sync_gen in do_sync (Bob Peterson) [RHEL-40901]
- gfs2: Remove useless err set (Bob Peterson) [RHEL-40901]
- gfs2: Small gfs2_quota_lock cleanup (Bob Peterson) [RHEL-40901]
- gfs2: move qdsb_put and reduce redundancy (Bob Peterson) [RHEL-40901]
- gfs2: Don't try to sync non-changes (Bob Peterson) [RHEL-40901]
- gfs2: Simplify function need_sync (Bob Peterson) [RHEL-40901]
- gfs2: remove unneeded pg_oflow variable (Bob Peterson) [RHEL-40901]
- gfs2: remove unneeded variable done (Bob Peterson) [RHEL-40901]
- gfs2: pass sdp to gfs2_write_buf_to_page (Bob Peterson) [RHEL-40901]
- gfs2: pass sdp in to gfs2_write_disk_quota (Bob Peterson) [RHEL-40901]
- gfs2: Pass sdp to gfs2_adjust_quota (Bob Peterson) [RHEL-40901]
- gfs2: remove dead code for quota writes (Bob Peterson) [RHEL-40901]
- gfs2: Use qd_sbd more consequently (Bob Peterson) [RHEL-40901]
- gfs2: replace 'found' with dedicated list iterator variable (Jakob Koschel) [RHEL-40901]
- gfs2: Some whitespace cleanups (Andreas Gruenbacher) [RHEL-40901]
- gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold (Bob Peterson) [RHEL-40901]
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Guillaume Nault) [RHEL-43961] {CVE-2024-38596}
- af_unix: Fix data-races around sk-&gt;sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596}
- af_unix: Fix data races around sk-&gt;sk_shutdown. (Guillaume Nault) [RHEL-43961] {CVE-2024-38596}
- perf/core: Fix event sibling list locking (Daniel Vacek) [RHEL-31798]
- media: bttv: fix use after free error due to btv-&gt;timeout timer (Kate Hsuan) [RHEL-38256] {CVE-2023-52847}
- arp: Prevent overflow in arp_req_get(). (Antoine Tenart) [RHEL-31706] {CVE-2024-26733}
- Bluetooth: btusb: Add a new PID/VID 0489/e0c8 for MT7921 (David Marlin) [RHEL-10263]
- mm: swap: fix race between free_swap_and_cache() and swapoff() (Waiman Long) [RHEL-34971] {CVE-2024-26960}
- swap: comments get_swap_device() with usage rule (Waiman Long) [RHEL-34971] {CVE-2024-26960}
- mm/swapfile.c: __swap_entry_free() always free 1 entry (Waiman Long) [RHEL-34971] {CVE-2024-26960}
- mm/swapfile.c: call free_swap_slot() in __swap_entry_free() (Waiman Long) [RHEL-34971] {CVE-2024-26960}
- mm/swapfile.c: use __try_to_reclaim_swap() in free_swap_and_cache() (Waiman Long) [RHEL-34971] {CVE-2024-26960}
- net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43788] {CVE-2022-48743}
- ovl: fix warning in ovl_create_real() (cki-backport-bot) [RHEL-43652] {CVE-2021-47579}
- net/sched: initialize noop_qdisc owner (Davide Caratti) [RHEL-35056]
- net/sched: Fix mirred deadlock on device recursion (Davide Caratti) [RHEL-35056] {CVE-2024-27010}
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Pavel Reichl) [RHEL-45029] {CVE-2024-39276}
- ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-38713] {CVE-2021-47548}
- ipvlan: Dont Use skb-&gt;sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44396] {CVE-2024-33621}
- mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26462] {CVE-2024-26586}
- inet: inet_defrag: prevent sk release while still in use (Antoine Tenart) [RHEL-33398] {CVE-2024-26921}
- skb_expand_head() adjust skb-&gt;truesize incorrectly (Antoine Tenart) [RHEL-33398]
- nvmet: fix ns enable/disable possible hang (Ming Lei) [RHEL-43547]

[4.18.0-553.10.1.el8_10]
- SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (Scott Mayhew) [RHEL-38264] {CVE-2023-52803}
- scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-39717] {CVE-2024-36025}
- tcp: add sanity checks to rx zerocopy (Guillaume Nault) [RHEL-29494] {CVE-2024-26640}
- SUNRPC: fix some memleaks in gssx_dec_option_array (Scott Mayhew) [RHEL-35209] {CVE-2024-27388}
- wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-39752] {CVE-2024-36941}
- nfs: fix UAF in direct writes (Scott Mayhew) [RHEL-34975] {CVE-2024-26958}
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Scott Mayhew) [RHEL-33228] {CVE-2024-26870}
- drm/amd/pm: Fix error of MACO flag setting code (Michel Danzer) [RHEL-15928]
- scsi: aacraid: fix io hangs and improve performance (John Meneghini) [RHEL-23913]
- block: prevent division by zero in blk_rq_stat_sum() (Ming Lei) [RHEL-37279] {CVE-2024-35925}
- block: fix overflow in blk_ioctl_discard() (Ming Lei) [RHEL-39811] {CVE-2024-36917}
- virtio-blk: fix implicit overflow on virtio_max_dma_size (Ming Lei) [RHEL-38131] {CVE-2023-52762}
- nbd: null check for nla_nest_start (Ming Lei) [RHEL-35176] {CVE-2024-27025}
- isdn: mISDN: netjet: Fix crash in nj_probe: (Ken Cox) [RHEL-38444] {CVE-2021-47284}
- isdn: mISDN: Fix sleeping function called from invalid context (Ken Cox) [RHEL-38400] {CVE-2021-47468}
- net/smc: avoid data corruption caused by decline (Tobias Huschle) [RHEL-38234] {CVE-2023-52775}
- ubi: Check for too small LEB size in VTBL code (David Arcari) [RHEL-25092] {CVE-2024-25739}
- i2c: core: Fix atomic xfer check for non-preempt config (Steve Best) [RHEL-38313] {CVE-2023-52791}
- i2c: core: Run atomic i2c xfer when !preemptible (Steve Best) [RHEL-38313] {CVE-2023-52791}
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (Steve Best) [RHEL-39902] {CVE-2024-36950}
- ipv6: init the accept_queue's spinlocks in inet6_create (Guillaume Nault) [RHEL-28899] {CVE-2024-26614}
- tcp: make sure init the accept_queue's spinlocks once (Guillaume Nault) [RHEL-28899] {CVE-2024-26614}
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-39352] {CVE-2024-36016}
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ivan Vecera) [RHEL-37484] {CVE-2024-36006}
- pwm: Fix double shift bug (Steve Best) [RHEL-38278] {CVE-2023-52756}
- mmc: sdio: fix possible resource leaks in some error paths (Steve Best) [RHEL-38149] {CVE-2023-52730}
- of: unittest: Fix compile in the non-dynamic case (Steve Best) [RHEL-37070] {CVE-2023-52679}
- of: unittest: Fix of_count_phandle_with_args() expected value message (Steve Best) [RHEL-37070] {CVE-2023-52679}
- of: Fix double free in of_parse_phandle_with_args_map (Steve Best) [RHEL-37070] {CVE-2023-52679}
- pinctrl: core: delete incorrect free in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940}
- pinctrl: core: fix possible memory leak in pinctrl_enable() (Steve Best) [RHEL-39756] {CVE-2024-36940}
- media: gspca: cpia1: shift-out-of-bounds in set_flicker (Desnes Nunes) [RHEL-38331] {CVE-2023-52764}
- tipc: fix a possible memleak in tipc_buf_append (Xin Long) [RHEL-39881] {CVE-2024-36954}
- cifs: fix mid leak during reconnection after timeout threshold (Paulo Alcantara) [RHEL-36222]
- cifs: Fix use-after-free in rdata-&gt;read_into_pages() (Paulo Alcantara) [RHEL-36222]
- cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (Paulo Alcantara) [RHEL-36222]
- cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (Paulo Alcantara) [RHEL-36222]
- cifs: destage dirty pages before re-reading them for cache=none (Paulo Alcantara) [RHEL-36222]
- cifs: destage any unwritten data to the server before calling copychunk_write (Paulo Alcantara) [RHEL-36222]
- Adjust cifssb maximum read size (Paulo Alcantara) [RHEL-36222]
- cifs: make locking consistent around the server session status (Paulo Alcantara) [RHEL-36222]
- cifs: fix credit accounting for extra channel (Paulo Alcantara) [RHEL-36222]
- smb3: prevent races updating CurrentMid (Paulo Alcantara) [RHEL-36222]
- cifs: fix missing spinlock around update to ses-&gt;status (Paulo Alcantara) [RHEL-36222]
- cifs: use echo_interval even when connection not ready. (Paulo Alcantara) [RHEL-36222]
- cifs: detect dead connections only when echoes are enabled. (Paulo Alcantara) [RHEL-36222]
- cifs: Fix preauth hash corruption (Paulo Alcantara) [RHEL-36222]
- cifs: do not send close in compound create+close requests (Paulo Alcantara) [RHEL-36222]
- cifs: ask for more credit on async read/write code paths (Paulo Alcantara) [RHEL-36222]
- cifs: use discard iterator to discard unneeded network data more efficiently (Paulo Alcantara) [RHEL-36222]
- cifs: Fix in error types returned for out-of-credit situations. (Paulo Alcantara) [RHEL-36222]
- smb3: fix crediting for compounding when only one request in flight (Paulo Alcantara) [RHEL-36222]
- cifs: New optype for session operations. (Paulo Alcantara) [RHEL-36222]
- mm/gup: do not return 0 from pin_user_pages_fast() for bad args (Paulo Alcantara) [RHEL-36222]
- wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44124] {CVE-2024-38575}
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-39835] {CVE-2024-36904}
- wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Jose Ignacio Tornos Martinez) [RHEL-38159] {CVE-2023-52832}
- wifi: ath11k: fix gtk offload status event locking (Jose Ignacio Tornos Martinez) [RHEL-38155] {CVE-2023-52777}
- net: ieee802154: fix null deref in parse dev addr (Steve Best) [RHEL-38012] {CVE-2021-47257}
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-37465] {CVE-2024-36000}
- x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908}
- x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Vitaly Kuznetsov) [RHEL-33258] {CVE-2024-26908}
- wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-37343] {CVE-2024-35937}
- wifi: rtw89: fix null pointer access when abort scan (Jose Ignacio Tornos Martinez) [RHEL-37355] {CVE-2024-35946}
- atl1c: Work around the DMA RX overflow issue (Ken Cox) [RHEL-38287] {CVE-2023-52834}
- wifi: ath11k: decrease MHI channel buffer length to 8KB (Jose Ignacio Tornos Martinez) [RHEL-37339] {CVE-2024-35938}
- wifi: iwlwifi: mvm: rfi: fix potential response leaks (Jose Ignacio Tornos Martinez) [RHEL-37163] {CVE-2024-35912}
- USB: core: Fix access violation during port device removal (Desnes Nunes) [RHEL-39853] {CVE-2024-36896}
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Ewan D. Milne) [RHEL-37123] {CVE-2024-35930}
- netfilter: nf_tables: honor table dormant flag from netdev release event path (Phil Sutter) [RHEL-37450] {CVE-2024-36005}
- wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434}
- wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface (Jose Ignacio Tornos Martinez) [RHEL-36898] {CVE-2024-27434}
- misc: lis3lv02d_i2c: Fix regulators getting en-/dis-abled twice on suspend/resume (Steve Best) [RHEL-36932] {CVE-2024-35824}

[4.18.0-553.9.1.el8_10]
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Steve Best) [RHEL-37262] {CVE-2024-35876}
- net/sched: flower: Fix chain template offload (Xin Long) [RHEL-31313] {CVE-2024-26669}
- SUNRPC: fix a memleak in gss_import_v2_context (Scott Mayhew) [RHEL-35195] {CVE-2023-52653}
- efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-26564] {CVE-2023-52463}
- dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823}
- dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823}
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35826] {CVE-2024-21823}
- quota: Fix potential NULL pointer dereference (Pavel Reichl) [RHEL-33219] {CVE-2024-26878}
- locking/lockdep: Fix overflow in presentation of average lock-time (Cestmir Kalina) [RHEL-17678]
- blk-cgroup: Properly propagate the iostat update up the hierarchy (Ming Lei) [RHEL-40939]
- proc: Use new_inode not new_inode_pseudo (Ian Kent) [RHEL-40167]
- stmmac: Clear variable when destroying workqueue (Izabela Bakollari) [RHEL-31822] {CVE-2024-26802}
- powerpc/pseries/memhp: Fix access beyond end of drmem array (Mamatha Inamdar) [RHEL-26495] {CVE-2023-52451}
- platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-38258] {CVE-2023-52864}
- Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (Kamal Heib) [RHEL-36908] {CVE-2023-52658}
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Cathy Avery) [RHEL-39074]
- hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Cathy Avery) [RHEL-39074]
- hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes (Cathy Avery) [RHEL-39074]
- hv_netvsc: remove duplicated including of slab.h (Cathy Avery) [RHEL-39074]
- hv_netvsc: rndis_filter needs to select NLS (Cathy Avery) [RHEL-39074]
- hv_netvsc: Mark VF as slave before exposing it to user-mode (Cathy Avery) [RHEL-39074]
- hv_netvsc: Fix race of register_netdevice_notifier and VF register (Cathy Avery) [RHEL-39074]
- hv_netvsc: fix race of netvsc and VF register_netdevice (Cathy Avery) [RHEL-39074]
- hv_netvsc: fix netvsc_send_completion to avoid multiple message length checks (Cathy Avery) [RHEL-39074]
- hv_netvsc: Allocate rx indirection table size dynamically (Cathy Avery) [RHEL-39074]
- net: hv_netvsc: Fix a warning triggered by memcpy in rndis_filter (Cathy Avery) [RHEL-39074]
- gfs2: Fix lru_count accounting (Andreas Gruenbacher) [RHEL-32941]
- gfs2: Fix 'Make glock lru list scanning safer' (Andreas Gruenbacher) [RHEL-32941]
- gfs2: Fix 'ignore unlock failures after withdraw' (Andreas Gruenbacher) [RHEL-32941]
- gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru (Andreas Gruenbacher) [RHEL-32941]
- gfs2: Don't forget to complete delayed withdraw (Andreas Gruenbacher) [RHEL-32941]
- gfs2: Delay withdraw from atomic context (Andreas Gruenbacher) [RHEL-32941]
- gfs2: trivial clean up of gfs2_ail_error (Andreas Gruenbacher) [RHEL-32941]
- ext4: fix corruption during on-line resize (Carlos Maiolino) [RHEL-36974] {CVE-2024-35807}
- ext4: correct offset of gdb backup in non meta_bg group to update_backups (Carlos Maiolino) [RHEL-36974]
- ext4: avoid online resizing failures due to oversized flex bg (Carlos Maiolino) [RHEL-30507] {CVE-2023-52622}
- ext4: use time_is_before_jiffies() instead of open coding it (Carlos Maiolino) [RHEL-30507]
- ext4: unify the type of flexbg_size to unsigned int (Carlos Maiolino) [RHEL-30507]
- ext4: remove unnecessary check from alloc_flex_gd() (Carlos Maiolino) [RHEL-30507]
- tracing: Do no increment trace_clock_global() by one (Jerome Marchand) [RHEL-27107] {CVE-2021-46939}
- tracing: Restructure trace_clock_global() to never block (Jerome Marchand) [RHEL-27107] {CVE-2021-46939}
- net/sched: act_skbmod: prevent kernel-infoleak (Xin Long) [RHEL-37220] {CVE-2024-35893}
- tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Xin Long) [RHEL-38307] {CVE-2023-52845}
- redhat: remove the merge subtrees script (Derek Barbosa)
- redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
- redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
- dyndbg: fix old BUG_ON in &gt;control parser (Waiman Long) [RHEL-37111] {CVE-2024-35947}
- dyndbg: let query-modname override actual module name (Waiman Long) [RHEL-37111]
- dyndbg: make dyndbg a known cli param (Waiman Long) [RHEL-37111]
- lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-33437]
- net: usb: lan78xx: don't modify phy_device state concurrently (Jamie Bainbridge) [RHEL-33437]
- efi: runtime: Fix potential overflow of soft-reserved region size (Lenny Szubowicz) [RHEL-33096] {CVE-2024-26843}
- perf/arm-cmn: Fail DTC counter allocation correctly (Michael Petlan) [RHEL-23841]
- perf/arm-cmn: Rework DTC counters (again) (Michael Petlan) [RHEL-23841]
- perf/arm-cmn: Fix DTC domain detection (Michael Petlan) [RHEL-23841]
- perf/arm-cmn: Revamp model detection (Michael Petlan) [RHEL-23841]
- perf/arm-cmn: Fix port detection for CMN-700 (Michael Petlan) [RHEL-23841]
- perf/arm-cmn: Move overlapping wp_combine field (Michael Petlan) [RHEL-23841]
- Partially revert 'perf/arm-cmn: Optimise DTC counter accesses' (Michael Petlan) [RHEL-23841]
- drivers/perf: Compile with gnu99 standard (Michael Petlan) [RHEL-23841]
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Steve Best) [RHEL-36994] {CVE-2024-35801}
- watchdog: softdog: Add options 'soft_reboot_cmd' and 'soft_active_on_boot' (Waiman Long) [RHEL-19723]
- tipc: fix UAF in error path (Xin Long) [RHEL-34278] {CVE-2024-36886}

[4.18.0-553.8.1.el8_10]
- udf: Fix NULL pointer dereference in udf_symlink function (Pavel Reichl) [RHEL-37769] {CVE-2021-47353}
- net: ti: fix UAF in tlan_remove_one (Jose Ignacio Tornos Martinez) [RHEL-38940] {CVE-2021-47310}
- ARM: footbridge: fix PCI interrupt mapping (Myron Stowe) [RHEL-26971] {CVE-2021-46909}
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Kamal Heib) [RHEL-37454] {CVE-2024-36004}
- net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Kamal Heib) [RHEL-37424] {CVE-2024-35959}
- net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-37420] {CVE-2024-35960}
- net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-37091] {CVE-2023-52667}
- net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-37428] {CVE-2024-35958}
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356}
- mISDN: fix possible use-after-free in HFC_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-37763] {CVE-2021-47356}
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-35106] {CVE-2024-26974}
- crypto: qat - implement dh fallback for primes &gt; 4K (Vladis Dronov) [RHEL-35106]
- crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-35106]
- crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-35106] {CVE-2024-26974}
- crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-35106]
- [rt] Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-36172]
- drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-36172]
- drm/mgag200: Fix caching setup for remapped video memory (Jocelyn Falempe) [RHEL-36172]
- Revert 'drm/mgag200: Add a workaround for low-latency' (Jocelyn Falempe) [RHEL-36172]
- mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-33133] {CVE-2024-26826}
- ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-31730]
- ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-31730] {CVE-2024-26735}
- net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-14195 RHEL-33243] {CVE-2024-26859}
- bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-14195 RHEL-33243]
- bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-14195 RHEL-33243]
- x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [RHEL-15495] {CVE-2023-5090}
- EDAC/thunderx: Fix possible out-of-bounds string access (Aristeu Rozanski) [RHEL-26573] {CVE-2023-52464}

[4.18.0-553.7.1.el8_10]
- net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311}
- perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835}
- crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813}
- drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656}
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854}
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855}
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853}
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852}
- mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007}
- can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456}
- usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495}
- usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495}
- net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835}
- can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878}
- net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236}
- net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703}
- usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877}
- usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781}
- gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890}
- tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700}
- erspan: make sure erspan_base_hdr is present in skb-&gt;head (Xin Long) [RHEL-37230] {CVE-2024-35888}
- scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366]
- scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366]
- netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397}
- net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061]
- crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669}
- net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893]
- net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893]
- net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893]
- net: replace calls to sock-&gt;ops-&gt;connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893]
- net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893]
- wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845}
- wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838}
- wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410}
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789}
- Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801}
- tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585}
- Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982}
- ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
- ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
- ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
- ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
- ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
- net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626}
- Revert 'ACPI: bus: Rework system-level device notification handling' (Prarit Bhargava) [RHEL-21486]
- hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615}

[4.18.0-553.6.1.el8_10]
- powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686}
- crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361]
- crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361]
- KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361]
- lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361]
- net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804}
- s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048]
- RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907}
- ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972}
- x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
- x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
- x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
- x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
- mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
- swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
- mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
- mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560}
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783]
- block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130]
- null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130]
- block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130]
- block: null_blk: only set set-&gt;nr_maps as 3 if active poll_queues is &gt; 0 (Ming Lei) [RHEL-8130]
- null_blk: allow zero poll queues (Ming Lei) [RHEL-8130]
- null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130]
- null_blk: poll queue support (Ming Lei) [RHEL-8130]
- null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130]
- platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073}
- Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555}
- Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555}
- Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555}
- Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555}
- Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555}
- ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675}
- powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675}
- tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952]

[4.18.0-553.5.1.el8_10]
- tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238]
- tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238]
- uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439}
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013}
- keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772]
- keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772]
- keys: Break bits out of key_unlink() (David Howells) [RHEL-30772]
- keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772]
- wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048}
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052}
- wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056}
- wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892}
- wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897}
- wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693}
- wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694}
- wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594}
- wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595}
- wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610}

[4.18.0-553.4.1.el8_10]
- cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117]
- net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014}
- x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676]
- x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676]
- net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171}
- net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171}

[4.18.0-552.3.1.el8_10]
- netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643}
- netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642}
- selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576]
- md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307}
- usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919}
- powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669}
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059}
- NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912]
- USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934}
- usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964}
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993}
- xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659}
- xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659}
- USB: core: Fix deadlock in port 'disable' sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933}
- USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933}
- netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521]
- netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521]
- netfilter: ipset: Fix 'INFO: rcu detected stall in hash_xxx' reports (Phil Sutter) [RHEL-30521]
- netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521]
- x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516]
- x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
- x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
- x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
- x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
- x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
- x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
- x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}

[4.18.0-552.2.1.el8_10]
- s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598}
- net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615}
- wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779}
- powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401]
- vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401]
- mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055}
- mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055}
- pid: take a reference when initializing cad_pid (Waiman Long) [RHEL-29420] {CVE-2021-47118}
- i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153}
- RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872}
- ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723]
- ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870]
- ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870]
- fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973}
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901}
- idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652]
- redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652]
- idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652]
- idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652]
- idpf: always allocate a full page (Michal Schmidt) [RHEL-15652]
- idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652]
- idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652]
- idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652]
- idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652]
- idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652]
- idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652]
- idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652]
- idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652]
- idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652]
- idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652]
- idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652]
- idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652]
- idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652]
- idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652]
- idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652]
- idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652]
- idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652]
- idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652]
- idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652]
- idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652]
- idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652]
- idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652]
- idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652]
- idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652]
- idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652]
- idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652]
- idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652]
- idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652]
- idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652]
- idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652]
- idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652]
- idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652]
- idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652]
- idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652]
- idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652]
- idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652]
- idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652]
- idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652]
- idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652]
- virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652]
- net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652]
- net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652]
- net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652]

[4.18.0-552.1.1.el8_10]
- redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko)
- tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185}
- net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579]
- RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744}
- RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743}
- hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664}
- RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776]
- net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
- net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
- net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
- net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610}
- net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528}
- RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130]
- RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130]
- cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444]
- powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607}
- powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606}
- usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477}
- media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565}
- media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445}
- i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593}
- overlay: disable EVM (Coiby Xu) [RHEL-19863]
- evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863]
- evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863]
- net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286]
- media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784]
- i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162}
- i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934}
- platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520}
- vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340}
- RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513}
- vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627}
- x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603}
- mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782}
- crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240}
- crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240}
- crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240}
- workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136]
- RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456]
- RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456]
- RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456]
- RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456]

[4.18.0-552.el8]
- i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248]
- i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248]

[4.18.0-551.el8]
- x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742}
- i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992]
- i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992]

[4.18.0-550.el8]
- mm/sparsemem: fix race in accessing memory_section-&gt;usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489}
- mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489}

[4.18.0-549.el8]
- dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678]
- dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678]
- RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934]
- RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934]
- RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934]
- net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934]
- net: mana: Fix spelling mistake 'enforecement' -&gt; 'enforcement' (Maxim Levitsky) [RHEL-23934]
- net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934]
- net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934]
- net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934]
- net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934]
- net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934]
- net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934]
- RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934]

[4.18.0-548.el8]
- gitlab-ci: enable arm64/s390x/ppc64le debug builds (Michael Hofmann)
- arm64: Add missing bits of AmpereOne Spectre-BHB mitigation (Mark Salter) [RHEL-29005]
- [rt] enable CONFIG_DRM_MGAG200_IOBURST_WORKAROUND (Jocelyn Falempe) [RHEL-13214]
- drm/mgag200: Add a workaround for low-latency (Jocelyn Falempe) [RHEL-13214]

...</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-3507-1.html" type="self" title="ELBA-2025-3507-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-devel" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1b95d0f129085989aebb59a217518755e1ba9bad170f2b8ef630e854ec061490</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0279f6cab759a708401f04d1703a02734691804b3581217a564bef683a853c11</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">74e16d6287760fc8117937dbebacdc28a42d53a1de1a16b7ba567754d129eb7f</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6fa206cb50b4e7c22c368e6ce876ae551eff8fe2f7e0e9d173435cd4ca9e4804</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e6967803645779cd061ee78101fc6ed6c919c7310e8fe85ee8338641ca692305</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f325cff8ac7f12e9054e4a883e05f126ae4d5e10e379944f2700b44f986c9168</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.47.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">4204967689c75aff4134138344bb7320ff9ebd7615d5c32be5ea847925449696</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">54f3370d1d5a50dfa9b83281835718f76b6a0beee5656e70d8400e1b4bb5c59b</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3550cc9de3611f96c5ba7c6bbdf021e124d41e6d62a50dec16ba82fe01c67d22</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1ac8a387ffbff3566e256d171bf932c32872cd5b21c79b63da7fe96452ae6ddc</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c399d03a0c7efedd6610d2aed1d208933810021e1b011795a250b438f9e7d92f</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6adb3fef727a9ef71f028867ded11c6ec9e88e2b404d743aaabb76404fc8d54d</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.47.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">7b86557929fde61fdde8d28c29e44193ac786c6d35e1eeec2ff831ef413352c2</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.47.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">26a30c7e4d13b67db2dc3d9ef2351d4fd678222e03cdec2c1a2497246e1b63d1</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6e0903589fce29b9664064c1687af86a67d65ab8a3c2a53ecc463d97dfde0408</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d9184bc751bd12cea737d4a6b504aaf00f6174c23b9aeec2abf1261f7654b191</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8c1f2be1a5ea5243db5d0ca036372d7e924f0e02ccdc449e5c2312678e0d906d</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2d6f60c2d1924757ef6d5db209b0d92fa873c7a3ef98d806f5b0d46646ee19f4</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">03014a05314536a7143e749b9409bd61ac57b4d9aeba3faacd4a5b64c9b5249b</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0bb736cce405fbf2fa74aee39459bd990f67a40295e4a03d9945d28095536258</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.47.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.47.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9a1d4f289f34d473546925323ec8538faa14b8b99574ba6fa7ba751d919a3c90</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-13589-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-08-12 00:00:00"/>
    <updated date="2025-08-12 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.69.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.69.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.69.1.el8_10]
- Revert 'sch_htb: make htb_qlen_notify() idempotent' (Denys Vlasenko) [RHEL-108140]
- Revert 'sch_drr: make drr_qlen_notify() idempotent' (Denys Vlasenko) [RHEL-108140]
- Revert 'sch_qfq: make qfq_qlen_notify() idempotent' (Denys Vlasenko) [RHEL-108140]
- Revert 'codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()' (Denys Vlasenko) [RHEL-108140]
- Revert 'sch_htb: make htb_deactivate() idempotent' (Denys Vlasenko) [RHEL-108140]
- Revert 'net/sched: Always pass notifications when child class becomes empty' (Denys Vlasenko) [RHEL-108140]
- Revert 'sch_cbq: make cbq_qlen_notify() idempotent' (Denys Vlasenko) [RHEL-108140]

[4.18.0-553.68.1.el8_10]
- ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759}
- md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991]
- md/raid5: implement pers-&gt;bitmap_sector() (Nigel Croxon) [RHEL-57991]
- md: add a new callback pers-&gt;bitmap_sector() (Nigel Croxon) [RHEL-57991]
- md/md-bitmap: remove the last parameter for bimtap_ops-&gt;endwrite() (Nigel Croxon) [RHEL-57991]
- md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991]
- md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991]
- md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928]
- md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928]
- md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928]
- md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928]
- raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928]
- md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928]
- sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376]
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
- can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670}
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159}
- net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644}

[4.18.0-553.67.1.el8_10]
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727}
- redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek)
- ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-13589-1.html" type="self" title="ELBA-2025-13589-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-modules-extra" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e34fce40cc86b44d674e562d5a399be23a3e9ed13dd78b5dbbefc5c8486e4f57</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.69.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">182468d0f50f5685b9369dd20aef0400c450e31250a1af446408474f66fcde08</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">14b0df6095cb65ce60883cd14a7515582d8d4485d981f7422175327d58067528</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">28c42e93fe38a39d416f48c4f378e7cbeca59f6785860e46f5061ec75949be80</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">88bb56a72dbfa87b73f6b876e68d1ced0d9cc3edc9352696af2c6931309735cb</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.69.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">c29e5f5c5a6af385254542c91f7db24f02265b97b4008ecc81b2ab652e54f5ce</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">08ba6a5915583da393cba457e3a4bae92d9b796c648dfae60cfd9004532a05fe</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b783b1c0059eceac22698e9253583e0e8b48157735b4c71012bc0889a399cb0f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.69.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">f71a5b91b83d1f6db2235caba85a5baf6ca61eaadd18cafa1935a1e6881d5298</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">42bb0ed19a80fabdc1d7f9769f1ef39bcca7544cda0fbd2c48f2d0b021e8c3b1</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">648d5bd3653f8181172ffb7f8a70dac7a5477ebba6dd40159e5b5809f22f3002</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9be2be1547458523c17973300401ea1801f5f0ff201f6c530006909ca57ce803</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d27ee128b1ccfdbc291e6923ee77ea6c2a9e5b1de801a5bf361f75e233661a1b</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a445052a7225a8cfbbd16b5d10ce6b61830e85aec842907a9856792b34bef4f2</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4c84d6219230bc0fb7cacbe20c095fab5a1c23552f62ce55821b0e571c0a6066</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d1d7a2c4384e5376551e781744c19a2588f66a0242c25e724f4dbc48b5dbe4a2</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3637f895352d17601d795b53667c80d3e2e13ac655d7d2b03048bf314cb4cd4e</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5f0ca966d7cbd244f8499f493dc5ccaea3b94d1f3572aa13b613f458da692023</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d6c050f3c3937eeed6b3605f2029be19d472bddfd1c725bc1643346461e48bf7</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2d2dce5ee01c2edcd47528c64a918970fbcfe5c09104f3205a39c56f62dd7d5d</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.69.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.69.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2584a3f10285584d09f2508bc663e6ce1157d0bd894be23430792f4d282c1af9</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-19666-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-05-25 00:00:00"/>
    <updated date="2026-05-25 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.125.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.125.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.125.1]
- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176090] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Rafael Aquini) [RHEL-176445] {CVE-2026-46333}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-19666-1.html" type="self" title="ELBA-2026-19666-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-modules" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e1089ada2bf9477aeff3db858479c2f5129ab8b88273c967cbc6d215b3a5984c</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">640baf4888a60c50fef8000d840771c23ab2e1720b50952b153a5b5f6437a1f1</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.125.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">29b95a0a875dfa5482b2d00e1bbd34eb0231b4754f038f727a60257fcdebbd8c</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">807834b466a479089cd61ad826afdc6d2aec51a60cbe2ca1efb2e29192966441</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d7ea61da2b57e584e0d020c620c8dcc940c6e6d59a9cdc489b714e06cd9531ce</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6bce40529ed41fc9f6f1a22bd4b91bc07b2cf3a51f7fc3b7e8acc6f0a0542b16</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1d0e1972dbbce6b0124c196d8e575079ccdbfd764f6eb78e2c37e2ec4160659a</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.125.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">43b9294f8cf5ee5e09e1fa598699a5e167f8fa86b490bbd03c9741df5aa682ac</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">16d97b4ea2e576cd1ea70345506b231ab7f9cf93192cb3f111372277971e6ddc</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">add20589b8f72acf3a15d9166b2a2487394acce17e4721112bf50537d31c82d4</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.125.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">7f3927eaaf8d3a76bb800c62d7c8afad3afcd0b293d4da34ffebafff102eae1f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b9691c2a8adf7604c640a9c422c7df1017ce03b9f93316b48153abe0b675aa3a</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7f075e13b75310a4ae8b16fa387c8810cf55e462648f177c696c2307808ce188</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f0d83e60b9d44651529f19a58ad1b8906165a14f796d0469b4f0b731a6537b75</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">847c90f7c204df6b608f45785156d13ef27fe07aa2a854e5e9b4281a5e2107f9</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b43099d81baa6fa827109b574a0c55e9adad47650f2afd0fb2538bfef517300e</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1e12cac1d3c7ad2f2f2be76acca178edbc388651908d8bbb01678a49f2109093</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2bb4d56b6f8ec7a0dc0798e726ebb2285b37c31b97d286b75b7244e1308a15d8</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">33d13983a60a4f3b12ff0c909fca146918677ada5c870d894b8e6fb24906e14d</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d0391273f65e9b1471bf82d8647c76ccce7c7e2c17a9455730bda5737afbfc78</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.125.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.125.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">280414ec2e3fd9606d45f76fdf616d5d3c0ab1611d080460906f19b842940ec5</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-7110-1</id>
    <title>kernel bug fix Update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-10-27 00:00:00"/>
    <updated date="2022-10-27 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.18.0-372.32.1.0.2.el8_6.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-7110-1.html" type="self" title="ELBA-2022-7110-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-devel" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">4acba30424097cb1c48da7a62bec516c79e8ede0610bb422bf243812e6542b75</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">ae9fbb53ca1ad6d57c00daf7d63fcc5f87943edb8197dd9f6db7c8702738a179</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">92d6fa44e525f91986e78fd4d8d6fc7c5cf701555ee790ced88397e35aa64cc1</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">47c18f6090604b6593bd584cddf095fe7899a22e34973a77accb48032a9a0060</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">f2d3d93b61404571c7fd5668ceace9e7b5f4926aaa754584553ded1bb72c99dd</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">43cb2c4a3f91df85fc2085c7f0d15d8ffc128cd96f3568d78b7f958037ca3fcb</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">a51d07b1a4ee76b61c447bb70ab41b9d61cb170a31d7151cd1524e686d3a3e3f</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">e4896fd1709a8bff910e87a97f5a51d36467c2904e07ee39a9f891f8a5d86fe9</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">11793b51476c97c2c54afa422c03188c752bcfc7939db565aebc36acdebf3ca3</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">9a1fe7c7014d3573e0d3158abd5d73c56ace48094b698890142563c8e94e94f2</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">5041981d828fe7e437a08a0ca6f4a6edc2589133683e6abf09036dba2f22ba3a</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">0f1db1e94a7b600b814ba588d67ebf6edad0413b58d90524a4023b5380130398</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">19f7e18a681dc8eb0b348d7e0962e0c53e380f3abad7b8cf2cc5a8c8b6607c56</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">70d2fc9670aa668a1e3fd86a1117069affefe6111a354a809ef47eb0b1149387</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-372.32.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">040b8fcde95bc3042e95c508463c7a364386c313f77460be22e7ebe5cad58fc1</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">0a66e7bd1f5c7ab3f5a8c99c784581da3a903bdd2096805dc4e53783b754e8d6</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-372.32.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">094872a4efac31f70fa7ab74bf195025ccae28a28a89e51639231d5588a63144</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">a5c4dd6eed8bcfd3926ae74a7526cf361f4bc70f7ccfd9d3b40d583d02314bdc</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">bedbb040bdd799431c4b56d2a055c97d7607e68894fbe0a25e05d18a79c0482b</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-372.32.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">e8e9c4707b9a0aad0d212e87ad9e29af61c67768f900d6dd61250edddec2af4e</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.32.1.0.2.el8_6" epoch="0" arch="src">
          <filename>kernel-4.18.0-372.32.1.0.2.el8_6.src.rpm</filename>
          <sum type="sha256">0e7d37f56f58c78a3e5d34bc70147ada919e2db76d1a0d4ae66895f2d8f09884</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-15008-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-03 00:00:00"/>
    <updated date="2025-09-03 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.72.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.72.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.72.1.el8_10]
- scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332}
- watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211}
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696}
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285}
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
- net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976]
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894]
- aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313]
- filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181]
- x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369]
- efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369]
- efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369]
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464}
- sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758]
- block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758]
- blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758]
- lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758]
- sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758]
- sbitmap: use READ_ONCE to access map-&gt;word (Ming Lei) [RHEL-81758]
- sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758]
- sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758]
- sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758]
- sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758]
- sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758]
- sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
- lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
- lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758]
- sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
- sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758]
- wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758]
- sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758]
- sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758]
- sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758]
- blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758]
- blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-15008-1.html" type="self" title="ELBA-2025-15008-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-tools-libs" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a0a3daf14568dd7b6545cc146c9f56e652740f5b908d3c8529290c6517b87450</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0bb3a5d9070d06af53c37f877466febb20fb43cb5268346ed9641c367e204a4d</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4606c823743be8fd05a36e9c09913b31eff00bbebbcf59dc75461f5f3e311987</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">605d4134ba04a7826586e1ffbb676aec7965035ee974b68014babd0fd7196a0d</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">549272bce9b4cc5d6f943d4926477f58a34a186ba542f818b5121c4dabab2524</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a133a77501b5ebe2a6cb5fc7c6cd04e3baf98e5106884199892664806aef2e4b</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.72.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">b2de76a25d042af4290221ae22b2c804fd7657adb9d2d3334d2e48f07f1077b9</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">be9bddbd5ff335204b764231a0660d4283043c2abb2bb5c0bd0457babda69382</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c63eb56a1c0acd03cd88caa55779594e0f3607c80d051bd99235aa70b84c4192</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d7abee32cf4541041bbebdcdd1c50c93ff428385541cb3e3d2bd0ca83e812f23</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.72.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">57da09cdbdc571aba0abc1e16c530cd9bc016b2bf7795e9473cd6233a982a82c</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e61fb411f6909aaa50c9c5b7bd5fc91846a4ec8a16bb6e1f1af6fc882b01697d</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">29293e3f2848adcc9fc59d9baf7ef6930c36b02c2f6bced7b692d33b0a8bf8e5</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7742b0ff8297605717b775e18ee062e78f18107157258e82f37f29b140bac31a</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2a0939d0c0ff10406a4b1215229008e339edf0acf7f84ad09681ce0c0f3f6f8f</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a8ff200b9fb0918ba716b9d7af76c14f414b9453556dddb7f943db06ce89ccfb</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7f20c759929e39ef9b662b96c13437349115c29590dc7891392429e596ca7033</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.72.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">401948c359ae9723601728eddf4f588932a7d893634a627a277c8291932826a7</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ad8a64eb7d69cde386bd8774a3969b91f267457b6be65ba808616ad9cf75d82f</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d8d985814ebb05061e6cea044aff4a3cc58f02a4c4365c4d2b71fb3115cd0a5d</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.72.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.72.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6f3fd35df4fdf6fdf4c70d4c8c77931852553f18cce74e458aa8a7e112fd18cb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-1566-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-04-06 00:00:00"/>
    <updated date="2023-04-06 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[4.18.0-425.19.2.0.1.el8_7.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-1566-1.html" type="self" title="ELBA-2023-1566-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">f990cae20bc9e600cfcca77955678b3c12c2decade7530360803da02e7cf2b8d</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">9e39b9ab1c82a258e466d57d405b573c88b5a3c41b3b488d2c0c6e1616b7ed23</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-425.19.2.0.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">a50ae65705951847c1552ed0f5938d589dc0cdb51f25b5ef1437f4e2850435b0</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">7e3089d6be33d529216d3e8f71242bcb14db843857305245724c23837bedd404</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-425.19.2.0.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">17e8e2ec04d1e30a4ffabd8fc9546648530bb094be058d4c79d6d154efe51d06</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">7a8c527a607ead487aa33ff43ec6f43e36d2be409e9c9a721d5e8db7c5e12253</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">3db6951caa289a789504ed64f79e00277a680fa2b096dd54624d565ea23a7c8d</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">225b00551e47fff391df9b9f10b7d28757f4fddc60985eb411b6043e0f2c2db7</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">ae77149c9d9f933abf18a9e52472fa3e542ffd8e90774f8b9a5519b1b8e86e27</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">f199b876a69c399915c8e3dcab368969d7bd106fe2aac3f4e5b23a13fe9b0aae</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">9b55ab0a9b83964ff28ce7d8d950578b5bf5a67645789b30301902802cee80be</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">ca01c99b9cd9574466d52ea68e70c78b7aa9bf449a0b7554d17e817921c5eae5</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">0add753fcbe3f80c38fd9a56ff2dd141a50899bd9be27c27bf75b420ffeb1ea4</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">74a20fc677d693e5fad6e255bf40f296a63c838ad0860dc58c0ea9e7291832b5</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">268ec72391f2b147aad05cbb0d6c1f4f42b4919b321efa94f4ff526ba1d9b682</sum>
        </package>
        <package name="perf" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">3f531bcf49637ef2e9cc5e0da875424ecbf58a527fe26bacb76db9fcc2957083</sum>
        </package>
        <package name="kernel" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="src">
          <filename>kernel-4.18.0-425.19.2.0.1.el8_7.src.rpm</filename>
          <sum type="sha256">80fa3ed9342800cc30c8b79a59f0b80f5bba031143276656100e21689d32e0ac</sum>
        </package>
        <package name="kernel" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">51f68e575bd8e55eb3a380474a65eb41822402b5b36c9437cd144e0e40797185</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">10a9ed27777126d28183c13b618cebbc5b927f59c80ffec0f74b6cb37adc55da</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">9cc9b66be5c5fdfe980d1e8c9b5a5370c1b156a278aafa794fb71d636704883c</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="425.19.2.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-425.19.2.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">e254529cc56bc7d10d727ebc3414eb556caed2e9dc28dc202e7441222d935809</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-19102-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-10-27 00:00:00"/>
    <updated date="2025-10-27 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.81.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.81.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.81.1]
- Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386}
- Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817}
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841}
- mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920]
- Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297}
- net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111]
- mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909]
- mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909]
- mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909]
- arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909]
- mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909]
- mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909]
- x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909]
- arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909]
- mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909]
- s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909]
- s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909]
- mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909]
- mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909]
- mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909]
- mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909]
- mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909]
- arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909]
- arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909]
- base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909]
- mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909]
- mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909]
- powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909]
- writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909]
- vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909]
- mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909]
- mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909]
- mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909]
- slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909]
- mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909]
- mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909]
- mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909]
- mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909]
- mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909]
- radix tree: remove unused variable (Rafael Aquini) [RHEL-104909]
- mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909]
- tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909]
- powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909]
- powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909]
- writeback: fix dereferencing NULL mapping-&gt;host on writeback_page_template (Rafael Aquini) [RHEL-104909]
- x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909]
- mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909]
- mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909]
- mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909]
- mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909]
- mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909]
- mm, compaction: rename compact_control-&gt;rescan to finish_pageblock (Rafael Aquini) [RHEL-104909]
- mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909]
- mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909]
- mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909]
- Revert 'mm/compaction: fix set skip in fast_find_migrateblock' (Rafael Aquini) [RHEL-104909]
- mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909]
- mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909]
- memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909]
- s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909]
- shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909]
- huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909]
- huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909]
- huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909]
- huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909]
- huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909]
- mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909]
- mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909]
- mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909]
- mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909]
- mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909]
- mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909]
- mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909]
- mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909]
- mm: add find_lock_head (Rafael Aquini) [RHEL-104909]
- mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909]
- mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909]
- i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909]
- proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909]
- mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909]
- mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909]
- mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909]
- mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909]
- mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909]
- mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909]
- mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909]
- include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909]
- mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909]
- include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909]
- powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909]
- powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909]
- mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909]
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849}
- dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-19102-1.html" type="self" title="ELBA-2025-19102-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-doc" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.81.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e4d92b59a26111f0bf80b60ce1b698f4019c04447788d9570f2d44d43177727e</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">29bbb674c1b7d868835a8bf4611e4329bced6505072d579ab7998156de78fba5</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">20e0f41c57884e936049b582c42d5f7264fe253c2a5a43010b00c61f740d2f45</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">33a09498504bf4bfd02b8a13666fccd5343a75ec1b951610d6e7b02d0f3f11aa</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">828a35bc242b4ed2c2ac1e8f9f3055eb076877a03493c325872a9dcb7e922df7</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">224df577c9e97268b6339d739860aa262d489627c49a56e38a185a9f60fc062c</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d6e9e507dd319d4581bad7ff4c03bb058e0d4cc62cd4393c49895b4e014cc996</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8b64b0909958f88fce19af7ca04d80f9d6b35a91fba50f6cf37694eacabe035e</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">437622cec499aa7d5bdf3e1ee6b8fce5d53fee06dec890e9fd04a192a8e60a95</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f8c8145ccc9f70799a776094a8cb38864c1dd959b521b73dd7baecaec8380f43</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cc5b518eaef0e09d62ed532a81fb5a0d7b21f29ea2d17010a9f1fb11a4524b18</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d45b1e76776bd3da4cd217790738d5bc5edbeecd665c76ecc9a6f1b831ba9fc2</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">40197d02dca080ea1328be01acdf6670e7abdb8053bc57722d02df067d9b3404</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b457ef2d291d097f313e5a3501ab7d4c5bff219c4581b5f38376a931a2b3451b</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">430b8a3c03b32d41eb6bde68a6b0beef0ac40ed05687f3da699e9c717a838631</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">69c8b43b2b91c5cb4649ad67a0b7065aa071e975aace48306143c7a13393e214</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">686d9b2a06af39edd8151f3120f338408df2792ca288ffc9371992fe327ccf87</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.81.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">7140874632ad08bad6b6fbeabb3a02d8462ebe4cce1d74d19d25ee606a59c967</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.81.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">ac21208f9a51a1367fb28227d51e38cb6824c7f59e53b88386cbe5d49ddc8d4c</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5faaa2b0232d9a3841fbb9a7d03da2b842b0b59addd3eeab05175493c96a5870</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.81.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.81.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f77e4844058d8d40692a7c9dfce5edbbe7c859560e58b2328071ce0075e046ab</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-17397-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-10-08 00:00:00"/>
    <updated date="2025-10-08 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.78.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.78.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.78.1.el8_10]
- mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302]
- smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-17397-1.html" type="self" title="ELBA-2025-17397-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-tools" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">56d84561121c22aa7ef48d250d38501a58833039a6647cee8ac33af8bf41b4fe</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3e30ff7ef19e8e201152566e8f685d1ea6b77ffa9b5bce20099f7cba44bf8e87</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0a366b63efa183922b5faa0f06052f8c863c99f1848f337f101a29756db5a3ff</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3ac492f9ba1704dd72a5845b46293dc4efcca918a7546cd9076b43cf19e64b3a</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ba1f56133166ff46888aaf1976e40a42f3aa8cba6afefdba0b059ffb5cb59236</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.78.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">71bcda81c4ad0a8b4ddadb591f8fe1517430b82bc978cb34c0638079dab0ca59</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6b421e5e4bf1f89a5ac2acd7461b768f07c9233e8ecb5c2cfc868eca171916f4</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">80e1df05b07716feef24570194e9db1d63f230dc3328ab852f0a7029a7986526</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3f9028e7b27ab76b5ccf40a67cf7ef670617eeda913cbbc94ba92aef373e0398</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8491d4295fbde0b9030ce8d6001bf24514d82f4a731876c66e4bee2d502e4202</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9c7d2710e67edc86629608d8138e8c7e9a7a91d58d57293c513e0bc6973d70d8</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.78.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e6eed5dd574b9b5f7b49d9131067696800231508de50e9f6c4eb4e9f3a264819</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.78.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">534429859e28b438b1050310a1df19c4e17a0a872c3d4bda0b0729216ce7fbc5</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">09ca50a1d919993fbe4f388babc8275d81b00a0cb8f167b78cc1ea415b747bcb</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">230e43206459fd72eeb4055dd771e81a381af0c7a3a1f5bcc35d020f9aa43b2f</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">23c3c53e82a2cd50e2dd7deb51ad7a479d04d57e7f6314cc242551ee690c7fd9</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">258e2954a99a44a283305cbd95caba7345429f347efc39dcdf75b97f1a5e8668</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">865c6cb60c8e7cbd8745e30704f713ed886653564cf5db31d6d96a2d4ab33def</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">53e7c08672b7d1acf33ef8cb0382a93e9753271be2448649ee0c0ed27b24cd27</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2235212caeb125e45313ac36390886111fe1b684cd617e8f800ce22554ef58a6</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.78.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.78.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2d9f34646f7003fd7fd39933071e4b8680e8ee1205ce4806d7b142f7c05a85ca</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-10669-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-10 00:00:00"/>
    <updated date="2025-07-10 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>- [4.18.0-553.60.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

- [4.18.0-553.60.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.60.1.el8_10]
- xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-83037]
- xfs: don't allocate into the data fork for an unshare request (Brian Foster) [RHEL-83037]
- s390/ism: add release function for struct device (Mete Durlu) [RHEL-97192]
- udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (CKI Backport Bot) [RHEL-99113] {CVE-2022-49846}

[4.18.0-553.59.1.el8_10]
- SUNRPC: Fix Oops in xs_tcp_send_request() when transport is disconnected (Olga Kornievskaia) [RHEL-83291]
- SUNRPC: Set TCP_CORK until the transmit queue is empty (Olga Kornievskaia) [RHEL-83291]
- tcp: add tcp_sock_set_cork (Olga Kornievskaia) [RHEL-83291]
- xfs: xfs_ail_push_all_sync() stalls when racing with updates (Brian Foster) [RHEL-88132]
- Bluetooth: Fix use after free in hci_send_acl (CKI Backport Bot) [RHEL-90428] {CVE-2022-49111}
- Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (David Marlin) [RHEL-90468] {CVE-2022-49136}
- Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER (David Marlin) [RHEL-90468] {CVE-2022-49136}
- Bluetooth: hci_sync: Only allow hci_cmd_sync_queue if running (David Marlin) [RHEL-90468] {CVE-2022-49136}
- Bluetooth: Cancel sync command before suspend and power off (David Marlin) [RHEL-90468] {CVE-2022-49136}
- Bluetooth: hci_sync: Fix queuing commands when HCI_UNREGISTER is set (CKI Backport Bot) [RHEL-90468] {CVE-2022-49136}
- fix backport of 'filelock: Remove locks reliably when fcntl/close race is detected' (Scott Mayhew) [RHEL-89709]
- NFSv4: Allow FREE_STATEID to clean up delegations (Benjamin Coddington) [RHEL-86932]
- NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Trond Myklebust) [RHEL-86932]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-10669-1.html" type="self" title="ELBA-2025-10669-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.60.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">3eb43a3f0955c86b6fc2ce1b1fd6620a14b9d651045a28b83a1889faf24893e4</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0c3bf8b94dff45ad62a132f9a6397ea878c2c7add6633b98c5d7dcff7a3f2627</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1291244488149d2b9bf24823ce80c162952ee62b99edb00f1e08a7c962f3a38f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.60.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">421035ed58c4d0969c0ef249281514518f78e20788668051b3f667841c9dc405</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6d888171251012a71df8c8cb298a4ee3f022d5aa9f00d000bdd5dbf6893573d2</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6d6e4ab6f35570b7daf92ed6f7e4a143316e871de4774d68fa7dd9d43cc6fae6</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f5bfe749fa2657a67d58f9c47ba0eb28a614b3d980c329e3c09c152c23b65248</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">23edbd8970676179be5e27b408d5cb25ccc4efa7c1eef97ce463686587aeb177</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3e841f275873a850f5a4e4fd1affb4e61d589ee7019a0ec726c98c62a350391b</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7bb2f7d467b52b3d47625a09834475c23fc2b65a33832c6b55d97c94c94b25d0</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2de5e9968117c53eb734dd94c3ccedb208fd70e72b5f34fd3ba59e84a286324e</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">65e1ad33b8f007641613317e6542a11111fe5063932b288daded78bde327bdd4</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9c9d9ba6ef65a08ac62fb228eb9555265ca2367bdac8497b63a8759ee11d6655</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.60.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">06ca39661491057ba7885439b5d49a9d91e8feba715596e82cb6b997bd9dcfa6</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c1e17e461139cc9492f4f4cab459e1ca39e688d51f0515285d4c60a7fed02762</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">00be83cf72fcbc4e0382c80d3426f283b65c3b56ddc8a9155602c55e97f978b0</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">eb8a6e8d3d12bfb41bdc3ccfd96885b8c35014373d4a53f83c65adc0a45c4d03</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ca5fe6eaf44fba50b2220fb6d250922ad53ceb688ea998771ba6878a7242d83f</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5e97a3676cd0cf4111b4d8b94546eddf837f5abaf5aae0d9a6c7cf09b76baeb7</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3209412a6491dba127b5b59daa06b6ef60f3dd3d0a7386b06120b44d71fe878a</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.60.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.60.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a4524c6c6a03d968fd882cecd08dac0c11d241f8c8b334b2c63e03a1e6bc9d04</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-18297-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-10-20 00:00:00"/>
    <updated date="2025-10-20 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.80.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.80.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.80.1]
- block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816]
- blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816]
- block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816]
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751}
- crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-18297-1.html" type="self" title="ELBA-2025-18297-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-devel" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">41984298196d086d300e4d7cab590d8a68e3129efbabeed026a411f5a03c0eaf</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bd02a34cd048fd9424867a97885250896d02c34e3ba6f5160dfc666bb5dc3f41</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ae2cbf0f76ce21cae668aafe6b0b1fdffd3d333543953341846939257b560fd4</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e941f038f903a09855459abc57fa52dcdaf582a31481d0187e3700c438792486</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b2d066fef71fbd96dcfc96ac49b49469fb34a64f693c85270d1c5c645cfc6ffa</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fc7fa32cda1466a43e3e92c9ec4a2024864db193d203bfd34b9e323f4e08a411</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f6cb14baba4eabbb32b03d698bf60622b398edb008499d5cc2e8dac83a1c4626</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7fdafb49d4b1ab177e65cb6935b0112bd451590e645b74890d8b582389c938c5</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4fda8925f8df1eeb27919ffdb785fee13eb47316f066a5f87584d46732995352</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4ce6136c3bfcafcd60185e0a8ddad37cc7f42fd3ac562bbe43394bb206d3453f</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.80.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e40591045a1d0b4ca302280d51762c5f6920ebf90ddf76e2cab5e5e1f7498b0a</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.80.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">ec185e0858bfa9a4cb6251abbb00c13f4af9dca6e088fe6a9530351c75c9e274</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.80.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">3d7b6f642ee2a750fe202771a9238c4280170015775e099ecf45c5f2109c3d0a</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">682db9e9f299deb5f4d18009b17b32cf22a72ab54c59b7d41ae07197714c5d08</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a81dac969dff3520f84e5033b49139edb40b6b85dd7abb508be6a4b67930058d</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9aecf15560d44f736ec993bfb1575f579e2e51c97645ef6aee096a9cdfb12e72</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ade5dbb1163f540b933a777ccfa2a24ea9d9ed9e940d8e4c64d4af047797114f</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e59f256834834484a0f6b09beb6f91e14fd15e3e9532bd85777d5e1e4b2cd6e9</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ac3c3c0182fdfd60f470a65b767100e8254b4e95982397540f31315cdf54e02e</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0a2ae720d21ae619c5892760de261f680b55ec6594d16064ae9848e326d350ce</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.80.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.80.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2002a5341d597bbc86b813a7c092ead08151c7c2976b06a49809fc36ac1b8379</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-5316-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-05 00:00:00"/>
    <updated date="2022-07-05 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.18.0-372.13.1.0.2.el8_6.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]

[4.18.0-372.13.1.0.1.el8_6.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15-11.0.5.el8
- debug: lockdown kgdb [Orabug: 34270802] {CVE-2022-21499}

[4.18.0-372.13.1.el8_6]
- openvswitch: always update flow key after nat (Aaron Conole) [2068476 2066885]
- KVM: PPC: Fix TCE handling for VFIO (Daniel Henrique Barboza) [2085572 2062687]
- rfkill: make new event layout opt-in (Jose Ignacio Tornos Martinez) [2087641 2023175]
- ASoC: Intel: soc-acpi: add entries in ADL match table (Jaroslav Kysela) [2090423 2052011]
- isert: support for unsolicited NOPIN with no response (Maurizio Lombardi) [2079433 2035915]
- iscsit: increment max_cmd_sn for isert on command release (Maurizio Lombardi) [2079433 2035915]
- net: tcp better handling of reordering then loss cases (Marcelo Ricardo Leitner) [2080972 2074566]
- tcp: tcp_mark_head_lost is only valid for sack-tcp (Marcelo Ricardo Leitner) [2080972 2074566]

[4.18.0-372.12.1.el8_6]
- sctp: use the correct skb for security_sctp_assoc_request (Xin Long) [2070959]
- net/mlx5e: Fix wrong source vport matching on tunnel rule (Amir Tzin) [2088610]
- net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (Amir Tzin) [2088611]
- net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Amir Tzin) [2088611]
- net/mlx5: DR, Cache STE shadow memory (Amir Tzin) [2075553]
- net/mlx5: DR, Fix the threshold that defines when pool sync is initiated (Amir Tzin) [2075553]
- drm/i915/display: Remove check for low voltage sku for max dp source rate (Jocelyn Falempe) [2066644]
- net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Amir Tzin) [2088638]
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion (Amir Tzin) [2081011]
- net/mlx5e: TC, Skip redundant ct clear actions (Amir Tzin) [2079918]
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Amir Tzin) [2088639]
- CI: Use zstream builder image (Veronika Kabatova)
- ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured (Petr Oros) [2081794]
- ice: clear stale Tx queue settings before configuring (Petr Oros) [2081794]
- ice: fix crash when writing timestamp on RX rings (Petr Oros) [2081794]
- ice: Fix race during aux device (un)plugging (Petr Oros) [2081794]
- ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2081794]
- ice: ice_sched: fix an incorrect NULL check on list iterator (Petr Oros) [2081794]
- ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2081794]
- ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2081794]
- ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2081794]
- ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2081794]
- ice: fix crash in switchdev mode (Petr Oros) [2081794]
- Revert 'iavf: Fix deadlock occurrence during resetting VF interface' (Petr Oros) [2081794]
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2081794]
- ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2081794]
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2081794]
- ice: synchronize_rcu() when terminating rings (Petr Oros) [2081794]
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2081794]
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2081794]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2081794]
- ice: Fix MAC address setting (Petr Oros) [2081794]
- openvswitch: Fix setting ipv6 fields causing hw csum failure (Eelco Chaudron) [2086549]
- sched/cputime, proc/stat: Fix incorrect guest nice cpustat value (Waiman Long) [2084138]
- procfs: Use all-in-one vtime aware kcpustat accessor (Waiman Long) [2084138]
- procfs: Use vtime aware kcpustat accessor to fetch CPUTIME_SYSTEM (Waiman Long) [2084138]
- proc: read kernel cpu stat pointer once (Waiman Long) [2084138]
- proc: use 'unsigned int' in /proc/stat hook (Waiman Long) [2084138]
- sched/cputime: Support other fields on kcpustat_field() (Waiman Long) [2084138]
- sched/cputime: Add vtime guest task state (Waiman Long) [2084138]
- sched/cputime: Add vtime idle task state (Waiman Long) [2084138]
- sched/cputime: Spare a seqcount lock/unlock cycle on context switch (Waiman Long) [2084138]
- sched/vtime: Move task_struct_rh-&gt;vtime_cpu back to vtime structure (Waiman Long) [2084138]
- net: openvswitch: fix leak of nested actions (Eelco Chaudron) [2086590]
- net/sched: fix initialization order when updating chain 0 head (Marcelo Ricardo Leitner) [2074221]
- PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2074829]
- Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2074829]

[4.18.0-372.11.1.el8_6]
- Revert 'xfs: actually bump warning counts when we send warnings' (Carlos Maiolino) [2071713]
- SUNRPC: use different lock keys for INET6 and LOCAL (Guillaume Nault) [2079856]
- Revert 'netfilter: conntrack: tag conntracks picked up in local out hook' (Florian Westphal) [2065266]
- Revert 'netfilter: nat: force port remap to prevent shadowing well-known ports' (Florian Westphal) [2065266]
- KVM: PPC: Book3S HV: Add infrastructure to support 2nd DAWR (Laurent Vivier) [2079069]
- KVM: PPC: Book3S HV: Rename current DAWR macros and variables (Laurent Vivier) [2079069]
- esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca) [2062114] {CVE-2022-27666}
- esp: Fix possible buffer overflow in ESP transformation (Sabrina Dubroca) [2062114] {CVE-2022-27666}
- NFS: Don't loop forever in nfs_do_recoalesce() (Scott Mayhew) [2080998]

[4.18.0-372.10.1.el8_6]
- Fonts: Replace discarded const qualifier (Nico Pache) [2064762]
- Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Nico Pache) [2064762]
- fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Nico Pache) [2064762]
- CI: Drop baseline runs (Veronika Kabatova)
- redhat: drop the -sha512 suffix from default rhpkg invocation (Jarod Wilson)
- redhat: switch release to zstream (Augusto Caringi)
- ceph: fix possible NULL pointer dereference for req-&gt;r_session (Xiubo Li) [2080071]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-5316-1.html" type="self" title="ELBA-2022-5316-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-modules" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">477fbe1d7b11f17826852634c0a558c3e80c4a0cebfe1ace6e4ca85cd3685771</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">0ff984b26ce70425095aaaffc227edd6ed76b1e3f6dc8bb20a5ef42cc15bced8</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">62c44842f25528c2f6cf186fd0dc6de43743653ebcba562ccef9e56eda2075f7</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">76051a87b181eeff5d35bd368b6e9742032bbf29d70c3182f16d54adc289b14f</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">05e1467649743947da1cb5eaeddf0c76c0b3ab0582624b8e26c955faf12eeb8b</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">c4090c84c28b3245ff2a05492cc06cfc0c25204407c39d316a7f80fd6ab6e630</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">0cd353a1720ea5bf9cd8ad3d50766e3b554925f4dde9e794985055b348fccdc5</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">90dfdae09befbdd7c5dca3730c535c3a4aa32c649c37bbf359ca06ec7de95d02</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-372.13.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">57ae2ccb1e70778b22d7f0b1869cff8b26bc8ab248bdb89e7c1bf4d5c53eb9f6</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">a4b1eac8572d4fa06a264a4bafe7e7d07ced95ecce3e31ce58d63e37c149382b</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">7d599e34bc27410524f5aa6d7195acbeef1c4c6abbad97aaabaa651c3a443d5a</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">7eb89c1ddfecd549fdd8176072fdf3930504c18779d63d4543c67f35417adfd1</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">73b5bf7995e1dc12d7fa8dde235b10e30c8ae8e09f16bee7e17a978bebfd15cc</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">e3de3f0811d6a05dbf56d1c7a47aa2e912c067fefc3c7dbb7261c6a89dc4f143</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="src">
          <filename>kernel-4.18.0-372.13.1.0.2.el8_6.src.rpm</filename>
          <sum type="sha256">5c9734e7ca1309dffc63f9e23d4230f93892728db590e41abd305b544c43faa5</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">d04fd8df279d48300b55f353f0b2910c8d87ff60fa52080fcc77ea28d1f7f2b0</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">b355c11416619f7eb4c7fd7921969581fb10a1e224d49adc3c329a5dcaf962c8</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">d7af6d808db9a09f34a41c04a3d521976d938b42438805db92d898ad37fd7727</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">6cefdd48290fee134ce4862772038032bc43c10f94f8ce19a6af1b0a426382c1</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-372.13.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">97bd84484bcf7d4458fc52246e5e11b1ce673abb0357ea173db89101bb573d9f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.13.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-372.13.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">226b6c080441f89aba6aeffb4bc705686babc61c279e9982092d9c3c5e00bfdb</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-6037-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-04-01 00:00:00"/>
    <updated date="2026-04-01 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.115.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.115.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.115.1]
- x86/microcode/AMD: Revert 'Backport AMD microcode commits for better microcode loading support' (Waiman Long) [RHEL-155860]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150398] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150398]
- tcp: fix forever orphan socket caused by tcp_abort (Paolo Abeni) [RHEL-146187]
- xfs: fix minimum agno handling for xfs alloc modes in RHEL8 (Brian Foster) [RHEL-102464]
- xfs: fix uninitialized use of flags variable in xfs_alloc_vextent() (Brian Foster) [RHEL-102464]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82523]
- tcp: use this_cpu_read(*X) instead of *this_cpu_ptr(X) (Davide Caratti) [RHEL-82523]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150221]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150221] {CVE-2026-23209}
- x86/uprobes: Fix XOL allocation failure for 32-bit tasks (Oleg Nesterov) [RHEL-96016]

[4.18.0-553.114.1]
- s390/kexec: Emit an error message when cmdline is too long (Mete Durlu) [RHEL-144946]
- s390/boot: Fix kernel size in bootparm area (Mete Durlu) [RHEL-144946]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-137123]
- gfs2: Fix data loss during inode evict (Andreas Gruenbacher) [RHEL-151614]
- gfs2: minor evict_[un]linked_inode cleanup (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove useless transaction in evict_linked_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove unnecessary check in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Call unlock_new_inode before d_instantiate (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't remember delete unless it's successful (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Remove redundant check for GLF_INSTANTIATE_NEEDED (Andreas Gruenbacher) [RHEL-151614]
- gfs2: fiemap page fault fix (Andreas Gruenbacher) [RHEL-151614]
- gfs2: Don't get stuck writing page onto itself under direct I/O (Andreas Gruenbacher) [RHEL-151614]
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146419] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146419] {CVE-2025-38323}

[4.18.0-553.113.1]
- scsi: st: Skip buffer flush for information ioctls (John Meneghini) [RHEL-136288]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (John Meneghini) [RHEL-136288]
- scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-136288]
- scsi: st: Tighten the page format heuristics with MODE SELECT (John Meneghini) [RHEL-136288]
- scsi: st: ERASE does not change tape location (John Meneghini) [RHEL-136288]
- scsi: st: Fix array overflow in st_setup() (John Meneghini) [RHEL-136288]
- scsi: st: Add sysfs file position_lost_in_reset (John Meneghini) [RHEL-136288]
- scsi: st: Modify st.c to use the new scsi_error counters (John Meneghini) [RHEL-136288]
- scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (John Meneghini) [RHEL-136288]
- scsi: st: Restore some drive settings after reset (John Meneghini) [RHEL-136288]
- scsi: st: Fix input/output error on empty drive reset (John Meneghini) [RHEL-136288]

[4.18.0-553.112.1]
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-138235]
- cifs: reduce warning log level for server not advertising interfaces (Paulo Alcantara) [RHEL-138235]
- smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-138235]
- smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-138235]
- smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-138235]
- smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-138235]
- smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-138235]
- smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-138235]
- smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-138235]
- smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-138235] {CVE-2025-21673}
- smb: client: fix potential race in cifs_put_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-138235]
- smb: client: don't try following DFS links in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow reconnect when sending ioctl (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of @nlsc param in cifs_tree_connect() (Paulo Alcantara) [RHEL-138235]
- smb: client: allow more DFS referrals to be cached (Paulo Alcantara) [RHEL-138235]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-138235]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-138235]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-138235]
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex (Paulo Alcantara) [RHEL-138235]
- smb: client: handle DFS tcons in cifs_construct_tcon() (Paulo Alcantara) [RHEL-138235]
- smb: client: refresh referral without acquiring refpath_lock (Paulo Alcantara) [RHEL-138235]
- smb: client: guarantee refcounted children from parent session (Paulo Alcantara) [RHEL-138235] {CVE-2024-35869}
- smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara) [RHEL-138235] {CVE-2024-26822}
- cifs: change tcon status when need_reconnect is set on it (Paulo Alcantara) [RHEL-138235]
- smb: client: fix potential NULL deref in parse_dfs_referrals() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix mount when dns_resolver key is not available (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs code dep in namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: get rid of dfs naming in automount code (Paulo Alcantara) [RHEL-138235]
- smb: client: rename cifs_dfs_ref.c to namespace.c (Paulo Alcantara) [RHEL-138235]
- smb: client: ensure to try all targets when finding nested links (Paulo Alcantara) [RHEL-138235]
- smb: client: introduce DFS_CACHE_TGT_LIST() (Paulo Alcantara) [RHEL-138235]
- smb: client: fix null auth (Paulo Alcantara) [RHEL-138235]
- smb: client: fix dfs link mount against w2k8 (Paulo Alcantara) [RHEL-138235]
- cifs: fix charset issue in reconnection (Paulo Alcantara) [RHEL-138235]
- smb: client: fix missed ses refcounting (Paulo Alcantara) [RHEL-138235] {CVE-2023-54076}
- fs/nls: make load_nls() take a const parameter (Paulo Alcantara) [RHEL-138235]
- smb: client: remove redundant pointer 'server' (Paulo Alcantara) [RHEL-138235]
- smb: client: improve DFS mount check (Paulo Alcantara) [RHEL-138235]
- smb: client: fix shared DFS root mounts with different prefixes (Paulo Alcantara) [RHEL-138235]
- smb: client: fix parsing of source mount option (Paulo Alcantara) [RHEL-138235]
- smb: client: fix warning in cifs_match_super() (Paulo Alcantara) [RHEL-138235]
- cifs: fix max_credits implementation (Paulo Alcantara) [RHEL-138235]
- cifs: fix sockaddr comparison in iface_cmp (Paulo Alcantara) [RHEL-138235]
- cifs: fix status checks in cifs_tree_connect (Paulo Alcantara) [RHEL-138235]
- cifs: fix smb1 mount regression (Paulo Alcantara) [RHEL-138235]
- cifs: fix sharing of DFS connections (Paulo Alcantara) [RHEL-138235]
- cifs: avoid potential races when handling multiple dfs tcons (Paulo Alcantara) [RHEL-138235]
- cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (Paulo Alcantara) [RHEL-138235]
- cifs: avoid dup prefix path in dfs_get_automount_devname() (Paulo Alcantara) [RHEL-138235]
- cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (Paulo Alcantara) [RHEL-138235] {CVE-2023-53246}
- smb3: fix unusable share after force unmount failure (Paulo Alcantara) [RHEL-138235]
- cifs: check only tcon status on tcon related functions (Paulo Alcantara) [RHEL-138235]
- cifs: return DFS root session id in DebugData (Paulo Alcantara) [RHEL-138235]
- cifs: fix use-after-free bug in refresh_cache_worker() (Paulo Alcantara) [RHEL-138235] {CVE-2023-53052}
- cifs: set DFS root session in cifs_get_smb_ses() (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused function (Paulo Alcantara) [RHEL-138235]
- cifs: remove duplicate code in __refresh_tcon() (Paulo Alcantara) [RHEL-138235]
- cifs: remove redundant assignment to the variable match (Paulo Alcantara) [RHEL-138235]
- cifs: use origin fullpath for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: fix source pathname comparison of dfs supers (Paulo Alcantara) [RHEL-138235]
- cifs: fix confusing debug message (Paulo Alcantara) [RHEL-138235]
- cifs: don't block in dfs_cache_noreq_update_tgthint() (Paulo Alcantara) [RHEL-138235]
- cifs: refresh root referrals (Paulo Alcantara) [RHEL-138235]
- cifs: fix refresh of cached referrals (Paulo Alcantara) [RHEL-138235]
- cifs: share dfs connections and supers (Paulo Alcantara) [RHEL-138235]
- cifs: split out ses and tcon retrieval from mount_get_conns() (Paulo Alcantara) [RHEL-138235]
- cifs: set resolved ip in sockaddr (Paulo Alcantara) [RHEL-138235]
- cifs: remove unused smb3_fs_context::mount_options (Paulo Alcantara) [RHEL-138235]
- cifs: get rid of mount options string parsing (Paulo Alcantara) [RHEL-138235]
- cifs: use fs_context for automounts (Paulo Alcantara) [RHEL-138235]
- cifs: remove various function description warnings (Paulo Alcantara) [RHEL-138235]
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Select which microcode patch to load (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add more known models to entry sign checking (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Limit Entrysign signature checking to known generations (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use sha256() instead of init/update/final (Waiman Long) [RHEL-132479]
- x86/microcode: Fix Entrysign revision check for Zen1/Naples (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add some forgotten models to the SHA check (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Load only SHA256-checksummed patches (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Add get_patch_level() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Have __apply_microcode_amd() return bool (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Flush patch buffer mapping after application (Waiman Long) [RHEL-132479]
- x86/mm: Carve out INVLPG inline asm for use by others (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Split load_microcode_amd() (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Pay attention to the stepping dynamically (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Cache builtin microcode too (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Use correct per CPU ucode_cpu_info (Waiman Long) [RHEL-132479]
- x86/microcode/amd: Remove X86_32 specific code in early_apply_microcode() &amp; get_builtin_microcode() (Waiman Long) [RHEL-132479]
- x86/microcode: Move core specific defines to local header (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Rename get_datasize() since its used externally (Waiman Long) [RHEL-132479]
- x86/microcode: Make reload_early_microcode() static (Waiman Long) [RHEL-132479]
- x86/microcode: Include vendor headers into microcode.h (Waiman Long) [RHEL-132479]
- x86/microcode/intel: Move microcode functions out of cpu/intel.c (Waiman Long) [RHEL-132479]
- x86/microcode/AMD: Get rid of __find_equiv_id() (Waiman Long) [RHEL-132479]
- x86/microcode: Add explicit CPU vendor dependency (Waiman Long) [RHEL-132479]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-6037-1.html" type="self" title="ELBA-2026-6037-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="bpftool" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">35f41799123fda12b41d19d076bff173fe0e8390a71a71e44162b235ec2d1e55</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0666cfa16a06c787953b95e2ee070348b2be4aa0124dea2515fdb165e82fbf9e</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">51d75f3c4b54b92f27d4b12fc449f31775451fe4a08f7f3e53f9eed57d4b9db5</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.115.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">eb00b6a4a25850a78bf53267a7cbacb7ac580e72d48b13e0a5b6ac888a22d69a</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">54c294eb219c9908464faf812a6cc2abbdb2955a67834bd553bca8a3b7c04941</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7611870e22177c52c03e4d6fbf9e5ff61e47b66b6cb407f4f0d21627c412daf4</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bd361a620ed93044cd4b71a62bb3e3cd29490183b7a9e2e3aed688ce170ff15e</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b3aff6c91d888286d81ecc05acbc2fbbba73e6fde6f3c11fe6ffa039bd4add93</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">962ff9c56b823183a203579b14e6ab59f05f0148a954f9a07ad15652b453baed</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.115.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">3d0fce638d1df4945bd309c9c9ad78aed16e3756610ce0701a8b023c914bbb28</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.115.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">7a80e6053e6659a2f1c24eec55049a531b2932edc933f1c20b0c2b3e80e8d2c4</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">12a2dbc1d2b14d84a7950e937431447fb61fbd2a720afc9fb8445a0a69048e5c</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a058903faa996985772b0bb4ed87ca4b3f70aa6285966be72931b47071bed458</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c8d2353962b50ad8b8a2649997a375c87ca606ec4a8e2939c809b2911b38a0c6</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">28d71594d47ab8fc02903b40e429c716d08fe5585658809c5971c880fe04f1b8</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">312b69da18287c15e53f1d7137741f0ee8e7cc178184f1715f12417de149993c</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e9aa76d36534bf8346f99111f7407ee1aabc2e5b60ffb0359ec0a2a3a5d0cafa</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">47c5ca0940a4e7b4bb6a6b6d2dad67e758557f9c1cc264c43a84f8c154dc0316</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">826ae15bbe0f1927d257aa78894a5b98eb0e8b57626410e9619e29427b028a6c</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6f95c0f1d4b661e3ad9cd0b0e0331c5c4303d34c86dbea9f186d853fda9a704f</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.115.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.115.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">43f8d1caf070845579c0855be691099b7c06312a29a97255bc3e73858e145881</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-5819-1</id>
    <title> kernel  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-08-08 00:00:00"/>
    <updated date="2022-08-08 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.18.0-372.19.1.0.2.el8_6.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-5819-1.html" type="self" title="ELBA-2022-5819-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-372.19.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">e86e974a01947e902b4c2d1238d25d6ae06437166e68ed6a1c34e104686a247f</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">1e27be4ae97a1521f1a46ba3d2c2f3cea34e8ce45d81fb0799f9ccd25fbd33b6</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">45c5c0b778f13dfefc5c899273a4452082c83097343a25e0e49f2d65eadf7944</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">c55ac7187ed72ae8148d7ef9813c2b4b89b159ee5bd6bda75247fe0140a2b4c6</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">4b6b6ca62a990337fdebf1d9024aadab0b65e1e78e5eff7bf74c78561829f1d0</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">2db92cd2f6686a351bde5fa42acdccfead337824dc9adff0f085524842722560</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">eb007f572bcf190a689b6ebf241b083c7739aec276841b7ae6c4a26f28adf46f</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">eb803a23c66fbe58da872d10094a1f4dee899dc9ec8408cd5826395d5834582b</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">8dde2ca02f76a2608ca50ec4ccd93f527fb90ce5ccb8e9aa4c34c5ad7d407ce9</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">ed704568684f484db784a24c3797e9c53ef8a4d397e44e22587a960cb50b1e5d</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">cbeb02dad337b894ce363dfbcd2f825453339ca4928bd5d957ecca139148e8b2</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">d0c1638c00ff01ebf5ff6a1ccb3c7f67c34edb3cfcbbe0d8c166e2d6fb896cd7</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">3886dd87d20803476c4cc2a50ddff756ddae6c0094790c0d3fc6383b2bc3049f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="src">
          <filename>kernel-4.18.0-372.19.1.0.2.el8_6.src.rpm</filename>
          <sum type="sha256">33922111634db73e90d585f1f19cbf781fb65f2eb9ef57b9a6b3eda52487d030</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">0975135f2415008bdd281b6f885e930fa766b191ad90c86eb2cf7e0a74ea7282</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">63b6d7854e29a059aca6cff9b0717ed479411f5e738fbd44bed4ef6d2ee15db0</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">a3ec944b0da08b4791bb225c9b39700ffe5a0959b04ab7bca46721474b93523f</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">d56d296669973f59c0b77e94fcd4aa3afc7e1d805d3db9dc6bb085f1ff9c2ea8</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">396cab39baade96e564c91218cd85ed802d75437d3d27083b6a8eddd4298ef79</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-372.19.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">dd780a970bc0ab6250607e5e9578690dc5f3817f42acb0ccd4206e29afc98cd9</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.19.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-372.19.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">30ff0dea4edbbc660d65db69fdc1b431a839c46393ed63e03ad25e6ae9ebbdcf</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-12752-1</id>
    <title>kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-08-05 00:00:00"/>
    <updated date="2025-08-05 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.66.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.66.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.66.1.el8_10]
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415]
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079}
- Revert 'smb: client: fix TCP timers deadlock after rmmod' (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077}
- Revert 'smb: client: Fix netns refcount imbalance causing leaks and use-after-free' (Paulo Alcantara) [RHEL-100698]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698]
- smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680}
- smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095}
- smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698]
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052}
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928}

[4.18.0-553.65.1.el8_10]
- x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422]
- ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-12752-1.html" type="self" title="ELBA-2025-12752-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">86a2d845ac620fd1b1adf237290ae73911890d44ba9a0d3903bcea31051e984a</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a361fe5165522fa4049189576b42e301c59c575319509201e0b33066548dc406</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e3172feb38b91ccbecbdead60a69fc92570e629d397d88c0599759650d5d38d7</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">79815a0ec2183a3faff69526a2fdcbf9e08ea7da1023a53881264ce8f1f8a4a0</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">59d3f959b7f8a15a12c1f713902e98e0ff401de89883defbb71b184fd58a2b22</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.66.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">d71c4cd9219716daea01fd24ad429e80377ea34aef7d16e9175f5eef94d239f4</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7648a1aeba23fef7c0ef67a6d1a105d0567705508c72f52da26a8802de42d915</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">83420a61b2f8de4ab96fc0361dca271e95b630138bc1defce0e6e0250f53671b</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">600111fb8592a6a586b1b58b7c251b055c1878514c50726d1d05d45f1eafa49f</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f05c1c34feff8cbad28ef583b6e0fc87ad102af073b774126043da20a0571b2f</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8783c873fb7946bf31e124b5987acbd353fccb97b1666dcd284a942dc18cc8fb</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">855eeb345143b3cd019b3e4a747b70c7f09af521d6b30cb4a83b891133f75044</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bd4dc68cb88096edc1b580eb4bc15bc37691c05c9457d967214702e0b5d48e5e</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9db7cecb36edb0229a442b7178f95f6177dd415b95744801b11c941a2e89ee43</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.66.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">774de2176239db0c4f791a9d152e1f38e3c3295b240e8403f1e366b0988e39b1</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b1724e769719c1ce9600cb03292342d4f5516280cbf3981cfade064bc86c9a10</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b5b110148d7a8cfc155c1f05b3e11753234b09cde3e95a87d3a9a066dc45b144</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0769a20acfd27c5b2df8d9ee8296e37dd5bc7921381cb687524ebc6942323c92</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cf303ccbb9c67c8ac1cadd79ab3c431d3b0b9f6398aa01024e5f26434d3fcdb7</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.66.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">0b57f77bb5f03c94570b3aa2c78fc930cf90fb8504e07c456e0910760ce18f96</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.66.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.66.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">05a91f516886abbf28c2273f44cae2132dcb154609ad5a12fbc94065366a8681</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-9131-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-04-22 00:00:00"/>
    <updated date="2026-04-22 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.120.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.120.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.120.1]
- gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075]
- gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075]
- gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075]
- KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657]
- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657]

[4.18.0-553.119.1]
- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532]
- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532]
- s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532]
- redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417]
- s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307]
- dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538]
- dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236]
- dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236]
- dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236]
- dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236]
- dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236]
- dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236]
- dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236]
- dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236]
- dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236]
- dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131}
- dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236]

[4.18.0-553.118.1]
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191}
- ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-9131-1.html" type="self" title="ELBA-2026-9131-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-modules" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ba3a98c896e5b8ce1dc00feb4b142b282c696167c0de7b2c483eca64bd50878f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.120.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">7b553b07c669eda624b506a3ac62b2d9d50e58abb930ef4bc3168de743fe0f7f</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2ef2312b9e1b2c1d58e5da0c781eba3d808828aeeed2fa89d7956582fa698211</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e406d65d1933884f413e33be5b7722bd0e598783a8804c9c06fac85ce81ffb85</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b31e4d960076532f7cba689194fd0beebd00554911185d7eca8e3ae7ae0521b1</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5c197a33698791e741e54a02f7c4de02373d68e527801acce26c6ae398f8a55b</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">81a41acc77efa5e7e637cefeed4cfc655aa2ce67e8e29cac4dad943deaa36d0a</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bd367b14a1d61e51343f3012fd9aacf8751ee777f150e768603fc96ced3362e3</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4a6430347eea45092cf3e6867e3d0a4a63006a761712406b683e490343afb927</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d7cc0e311e43e6ae8f6dac30637eb9a0c56433753bbb19c339cd30454290b695</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.120.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">1a4d0299a55d107f44963449ef643cb4d22d79ccfa7fb8d1d9e34425307581a6</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fc7ac0659c6d8e8156b41ff256b91a651a967c7fa1e83e0b877d8315433ab5bf</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4b8521a6bac4a3de487490b246f12d8bc9bf078b2a0366ac2b9122e67d0387f1</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.120.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">ee472669244888fbc850b30628b83887924d826afeec2b754defae29ad3c920c</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">88025c3663c9301f820378772334572ac225294c2672740062161231c5644c5c</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">16954f15c7f78353bc6ad054ec02db152e8c538ac3cf7611f74df1bd314acca3</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e12a4e8e20b4dd7ca24ca44d0555570702673dfc0d060aa63ab13876aeee3a7d</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9138d463411a5bdd1810d47d8849488c3353fb01644d4d53b75341605c0babb2</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7853a48a2e1cbeb6723c639d24be31baed3f4f6253cbb587fb00a01c8ba483a4</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ed92f1a02928de1b4ded79f43faa162f83ced860a6cb020fcde4447eef284acc</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.120.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.120.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d2c87fb4917cdafb965a6a9ab09d9c4705c682d69e6fa48e7244a859a6203187</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-15785-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-16 00:00:00"/>
    <updated date="2025-09-16 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.75.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.75.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.75.1.el8_10]
- Revert 'module, async: async_synchronize_full() on module init iff async is used' (Herton R. Krzesinski) [RHEL-99812]
- mm/page_alloc: make sure free_pcppages_bulk() bails when given count &lt; 0 (Rafael Aquini) [RHEL-85453]
- sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350}
- net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932}
- idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392}
- drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449}
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713]
- vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160]
- xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655]
- xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655]
- net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125}
- net: usb: smsc75xx: Limit packet length to skb-&gt;len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125}
- PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-15785-1.html" type="self" title="ELBA-2025-15785-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">62b8915ba62781b84fc49bcb5c121dd3251dcd9fc0f959e56fa32663c1278fac</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">45a3e6ca93bff348d71a8d19e3b8a917b8a2e0483bc99bfa1bffb0f155e6a3ad</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">116ea9a1328399c55a41d8e2edbf41fa2a784be45b5f82559c0bdc84a7783d8b</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">965237cb64767fef7fe970a98e9665258e70adb61612caed6dacaccce17efed1</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.75.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">f3f85bbe1b8aa0bae7007f9c6f6061e969a787a249a0e112a0bd69a17c7dff8e</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f537c4fd4c8918c598c2606e8398740915560f9ab859854393d268edc5e88f34</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fda5b994756a3f6184b8074dead3a56f90a000a1442c204e1a26cd54f01e968f</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b139e516b49798a2290aa260473d10bc35a0d6e2339630d750118e119599b5d3</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5c89e9d029e5a571e802f8dd4c02bc431a711650d2775ef97d13d355901c4791</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a9e00ea1a0c4457b88fce12902c81aab4474d6ce008aa4de6295d4c989969b22</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bdf7a86906d95295816b9b97a2cff38455453f7617960def390c3bc88c37f8ad</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bc2f53990f3a7a981932a89ac7ff1b7c6c5a6413da9333e29f7b71ef51324000</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">655c7ea7dfe412d369fab6be7680b968adde84c36a017eb16509b9e11fefbaff</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.75.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">58835f70edda6c9f746d98078f8d0088e2a2a3e6d5b78e1355e4f9b5b289c2d9</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f45dfbb512c9ca3f333d1ec25edb0548f6006ef6ebf169f0087c91b39e6b218e</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b5d0ee733e89253bb28b335118a25fa86665290d028091aa9b18c84fbd3581c6</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8668e99b69d030e6450df49f1fa6b780c0947dfcbf3f8825dc2df79903503e4a</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.75.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">04d1193078ac03b2db47df09f2e6485c8b60f2aac9a904f02b66938b52552af0</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9e68094d0e62528d249876dd35aa5d9bfe9c894850196bbbc1a2d9240419bfb6</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fd4076b30b84630a1c7999af41600ff6d8b173db831c3cacd251c7bd6c2a7b0f</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.75.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.75.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6f4ba91b7073b4e1a08e97306e3987ffa9c911389240f811f2554f99f8121e82</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-14438-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-08-26 00:00:00"/>
    <updated date="2025-08-26 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.71.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.71.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.71.1.el8_10]
- udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058}
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200}
- gfs2: Don't clear sb-&gt;s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072]
- gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072]
- gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072]
- writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072]
- gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232]
- gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232]
- gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-14438-1.html" type="self" title="ELBA-2025-14438-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-devel" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0b0f7ae5dc962e8cf17fd1a9cb52f2885e1d0ee6ca9c2d9831da41ccd8f0c825</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">47b2255efa87e7aa5261e6589c900a4e733ceec1838ec420f54150731692a780</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">925eb20e19e2227fd82621795289f5aa89df4c25cd39a10e535ced1bc2811c3b</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2383e8f0454176bc284ae95f03706d3843d892c67403a1e34f86290777af8959</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8bc62ad3701801410b1fd1354baf14c616111279ff62516f34f61d337b1d8766</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0a9372a582ab62b0279dfaef4b663be4b070239f405b0993e3abc380d674c165</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a7165ca68258ae20f71b81f3ae18dfee4e5f2a772259f95579f45fa68ab14c61</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5152490bfbf112f10586d089fd98bf182343cdb13ff993f3d69a124fe22dc24f</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d7ee94951c6d6fa3afa8e84a8886ee26f15eb6006c8ce8178101b064ac636859</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">482be9debcb8739ede2b282429a71b526b04df035275d51f8f9835f8be43bd0a</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.71.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">46776b69421bc3dd06fd7ce204561a8fe3455e0f2f07e9f76e4f901ccf4b6cac</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2ab57741850e79070f31853ef5e6ed88b872a7cad9b361d6208ffae3f2365f6c</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">42b1645088e69af7c76ba1fe5ec5138dedb723646e89ddc253edff4790fac327</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.71.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">b01f7b5fda0a5d4077928a601c6496a372c2a6da9e4304c57568e551546581cf</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fa0665c3189fca85b1d33b275ca6a6b9ba01ffb12889bcdce0836d11cd19552e</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7c0d7b133300001cbfc023b4875982c77ca460519baba6c7c9e18245594a555f</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">af53c82481f134216fa7102458db30596dea5e915168156d38e997962d943a44</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">440dc0b21cb1eec6dcc22fe42154bfc6ecd10e829112065a872e8fcddeb8d7fd</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4f9130296965751af181cd4dfbd5c40ad5f6d7e4f0067fbcdc12ce45fa399436</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.71.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">7227067e064e63a467c87f610495e59bf441c0509214cc5d81268a7b2df56f89</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.71.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.71.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">727c0eae66e6e3cbcdbddf4d04f11d86d985c4a5d9a0edaeec64d1eddce711e4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-0759-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-01-21 00:00:00"/>
    <updated date="2026-01-21 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.94.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.94.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.94.1]
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139482] {CVE-2025-68301}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131387] {CVE-2025-39933}
- smb: client: Fix use-after-free in cifs_fill_dirent (CKI Backport Bot) [RHEL-134369] {CVE-2025-38051}

[4.18.0-553.93.1]
- mm: compaction: update the COMPACT[STALL|FAIL] events properly (Lucas Oakley) [RHEL-132449]
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttila) [RHEL-125456] {CVE-2025-40096}
- drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CKI Backport Bot) [RHEL-124682] {CVE-2023-53552}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-0759-1.html" type="self" title="ELBA-2026-0759-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="perf" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">717b56cef4c5ee9b4623b717b9205d1e1361ac0e7852b09ad0049ce605f3c69e</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">204cd6b27b799594d22c3c030852b0fd094366d64734cc43ac222b2827a793fd</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0e92c0036cef49d8a7559f5e6a75bfaf26aff64dd3b33119379bb11811c3fd98</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8332d1832558eb9f8e60fa88ac78366d078f8a344802dd8d72d735b468b19627</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7e07a5c82cb170f66a011c1b8f4d37053d80a740eb33a221c227d7df8878663a</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5ca048e9851c32c5e31e6ad3ecd49f1084876a2377c17d3a4824ff9ed88c83f7</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.94.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e78c1493bce1855eeb0a462cd03623392f34544a8a408869f04edcd3fb527b75</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ca97c2de6d00f3b5ab4101c7c18c0b57fc7bdd9c07d3f65d02c36cda84e8484e</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">427a0ed7b53d199bae4fa3f654343276ee895f949e8898f694c9b5a6c53b6071</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a54e94a755ea523a08514bc5b6fa78e67e5c02ec1e5e72d3890a67ace06fda58</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e3d1550cf3526beaee2fb0237ad8980d0df649ffa0b871956a2afc06db3382c9</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">61a669be8fc3ba11a2906db62b718b1bae9dac0291ec8139b269a7f19414f259</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c63b0c74f1599903edc4143dc8baf2aadfb3d68829061d33453173aa728351b0</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3ca3617cbf24af299d99089d4892481c2cc8d85cc0545c2334ca5c90ecef6af1</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4b8ae4f9acf8b13bfd56bd93a61df8cebb4e6f25df64044048cd0ff5d03f4b7d</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.94.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">4dfc944f764608fd38be13dc420466cb1af91997f8b8656f24a1cb20ea4e206d</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.94.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">9011485063b08c62199211023f2f86057c3a28c983b2a264b8fd5d3930af9c4f</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d37ecc26bf1f1d7d3eaff8cad50a94c9a3b75def7b159e1415eaa4362afc0e42</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">23d68436e71e112f619a31e078ca5a2ea2a36811274b4efc3b033cb9b32977c1</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4ef1de833677876c0f49e0773f294ba4262fa570e55727ed3f7295ed059b086f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.94.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.94.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9d7b5c815f65c075e14565a4c0d0a0d61316342beab742aca61727aa8715292d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-3083-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-02-25 00:00:00"/>
    <updated date="2026-02-25 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.107.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.107.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.107.1]
- autofs: use wake_up() instead of wake_up_interruptible(() (Ian Kent) [RHEL-143685]
- autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Ian Kent) [RHEL-143685] {CVE-2023-54134}
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141709]
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-136693]
- audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-140442]

[4.18.0-553.106.1]
- bridge: mcast: Fix use-after-free during router port configuration (Mohammad Heib) [RHEL-138422] {CVE-2025-38248}
- net/sched: Enforce that teql can only be used as root qdisc (CKI Backport Bot) [RHEL-146992] {CVE-2026-23074}
- page_pool: Fix use-after-free in page_pool_recycle_in_ring (Marc Milgram) [RHEL-137838] {CVE-2025-38129}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143189] {CVE-2025-68800}
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126886] {CVE-2025-40064}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-3083-1.html" type="self" title="ELBA-2026-3083-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="perf" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0b5ef7a5d55d5d3c55539c0aebdf020ca275fd2d9194e8fd88a6357ba25c07bf</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">df935a51e0651500842792a50213d9a002fc1ace7d0da088ddb9f5ef9e729591</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.107.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">18c3d99441487f4973fe433a33f7661f81d8dd05f2f419d793287369a4a4139e</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9741ac995081c3d5d6b57389070e8ed83e0717c6995c4c06a7f245a4a11083ba</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.107.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">57816cf2353265f17f6d2576799bf54ef78fb5d5f2ccc922dd99ba5a9bd360f1</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a0706330627a8d0272873c46bfefc5915f9246e9703c94d5a51e142b6f8a9e6b</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ace540e3efc34790b0b246dc95aa4e825a9adf73d046a3dffc746f7addfd256b</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7986dde972fea280a68e1cc1b11365c2b3081b9d3deae49fcda592b600bf8463</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8c9c9cb0c03ecbec5d420f4e13a64946802716bc38e02ccbae73543e1662a61a</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">54a0f7e414d892be9426f8b501498c70b8bffdd1d2c90fee94f11bacc520fe09</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">64ea7d0104263f911c9893cbce8bb6990f0eadbfe6ab7d118578cfd226bd764e</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">906cf79494f5963ea832cbd4ab1e41a0c8b96c8e4bc2d50a7361181605004fa5</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">07609a453cf3a17dc389d774ff091e14e96ab3a7529e5792ad8115a8acb797f2</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0e4e93fe6ef0b98f0c07ee7aaac0701d2d945fa04bb9ac2378ef7d36a96bd4fb</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">931f95800194125ba97d8cc39c646e986bea1ab47522368aa04cdbd7e3db60cb</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">90d07bd364b11404c459d94f0d431a9c55c20c8a2c84c12e942ba3779ae992bc</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">35bc6a66437c661d82368f5a75b25b581346733c7eed3c7278a561a5c7a84135</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1e9d34d9d99a498ec6f97f7c599afa63ae81ed5549be28cc028f20e104c78f94</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4da84a402d62a7f7e9588a061f0473fe8c6ad459f79bbf40b41963bbea55ae0a</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.107.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">81e8dba8092a957cec31c12e6a703dd4fcada4568709b16b9a2f0a550cbc5629</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.107.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.107.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e42aa8d605f8b960f7ff0ac26e70f3afcdfc21b2825c4a5b5be9162c8ee685bd</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-4337-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-05-02 00:00:00"/>
    <updated date="2025-05-02 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.51.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.51.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.51.1.el8_10]
- x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072]
- Revert 'usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB' (Desnes Nunes) [RHEL-87280]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-4337-1.html" type="self" title="ELBA-2025-4337-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.51.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">d94c91b4b89518eb8a27ef2abc5c8bfb386c0c7d7bd3dd7823b5431b92e3de87</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8d4336e06742325a1874079f2476b23226eba74bb35a56c510e2262672308f55</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">57119b52c543e6bd0594904983b400c9e13b40e978d8b95200c040ec8d218078</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6908ea5e44c279c4430db4caa0a735c5fc83de2058973659ca110283a6be1ff1</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">240149f987393a6c9d75959ca4d0948999f6f0320a15b5f95983b696d5bd41c9</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d39d536e14d42a26c51ef5f3e79f1436801adccb3f9066cd53e0280f43e2d46d</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b7ee3a6f3f0efcc2d1ffecc5f6dab448d07a3c0e1ca4eb8cc21dd7ff57a4a7ef</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d6c3d687395643af710e3e7ffbc7797ca2d4134640d741b1f4e08fb1071f7bf2</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0b2cd955a07c4cd3464f1111fe5d9982443405d69e5ef47e8bee5db0446bdc1f</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">82072af4b30ed68ded98cc5df711306800133cd2269bbe6b7bf3e539a232b9b0</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1999c9ff943e874ce40f7a1ff7f36e3d0850b7a3a81d0e89946997ab8d1e3b12</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">20bf5f4096f8493e0c7d23605f4117f46430da1bfe2e433e5a07936e9a9a9c35</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8c1aa68ff0b90020a6c12fbbb9926162c97caebfe79544600518cea398d569ac</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d8a420a4299b586099291d4df329970d99fe3d9617e0ceb1d900535dc4e47bf0</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ea57e68b444e4228066405ce82be96eca862b0de7dec0c228d2ccaae61f19a92</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.51.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">4647ed9b1825d5f1ee327e3f3bd7a31f046632ffabc3e50fb326b19cbc9257ab</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.51.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">667d5346c879b0e5e6705a5220428f6f80683a4782b7d931939575961ade60db</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">748956bccfd70deb15cb16e7651614b92064b6605dc7f23d759ad62cd4fc6ee4</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a6a60066f194862873594ec0e14aed2ea527129ec9ead531834557b13de6bc43</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">df62436c2fd50336d13ff3161ba2778c3f0b815b434a4d6ae1dcf408164e45d8</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.51.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.51.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f0bef23f833c1e22d2d71d37b19754cb40fb475df2715276f296c8e80b808391</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-2720-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-02-18 00:00:00"/>
    <updated date="2026-02-18 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.105.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.105.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.105.1]
- s390/ipl: Clear SBP flag when bootprog is set (Mete Durlu) [RHEL-145334]
- Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Consolidate code for aborting connections (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Fix printing errors if LE Connection times out (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: hold hdev-&gt;lock when cleanup hci_conn (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: Move hci_abort_conn to hci_conn.c (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: mgmt: Fix using hci_conn_abort (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_conn: Fix hci_connect_le_sync (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Fix checking for invalid handle on error status (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_sync: fix undefined return of hci_disconnect_all_sync() (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: hci_event: Ignore multiple conn complete events (David Marlin) [RHEL-137111] {CVE-2023-53762}
- Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (David Marlin) [RHEL-137111] {CVE-2023-53762}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137678] {CVE-2025-40304}
- gfs2: Fix duplicate should_fault_in_pages() call (Andreas Gruenbacher) [RHEL-130505]
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130012] {CVE-2025-40168}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-2720-1.html" type="self" title="ELBA-2026-2720-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a74ca76c343685be01e3a9d30d53ebbf8893f06813d55e14180860d2a4314a86</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4ccfc57ad5bc7b9362e2bed5d5ecd9ddadef1a9c7130b744c19049983eb3856d</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">eeba847e1c52eabd231e0c42d385fe14e429588fa93d9e2341ff190b2dba7983</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8796b75e51648a0d6abfd6eea105189aadb99217bd4ee8bf008bbdf3591ea471</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f9f0dec430929e73b82ac56160c3342f76627ea5a1c8a9b9cc286e7636d19fe5</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.105.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">ab0a83a521d0c2850b0a6638c1a80b9b888a5b819a8168940e9fd13b54135351</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">720fe6f91b0cfb66d71335747ccecc0f46a2aeb433a5026d0d5665487df13751</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bd81693c3dfe65cad7c74e0170aeeceb660b2a6d808501be1519b9923f68d657</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">44b4fcf3f3dd75460b4b35cc2ab09351aa65df7ee946960abfe4831048ab3eee</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9dd86fd09321259121c1faa4ce3950fc81a298ada307f3adae6bb305885543f6</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ca44c2bc7452f91b3eb4a9e855c2a8981b060fdc833a59fdf3f3b158a42725ff</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3e0f2cbb56893b124ef63a8cd332f6ca7148f5bf7a60d71e67816ac98d342e1b</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">043675291e03da908e6bfbc5589bf9394c97f42c8d877d41ee339ed8c46e8707</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e0a33de8d32a19e6638cfa7f9ccb6202791f56f873718136d9a3337937854e0a</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2a5a572454b422b96bfb9e6f046de0438cc610a0927c1f14cee5fb62fe325150</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.105.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">87ca69ea933ad7f3232407da0f422f37df9cca68397e971b50679fac2706a6ab</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cd4429c12d1aba664e9b3552198858398d580de0098832a7702d7496cabcfe1f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.105.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">f38eb792901ce7875cbe9a4d47a2b0b5579a9d6e49029d4e290fd6f101889400</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">761df6b2731719e64fc3d42e2f6c8d5cd03b1ac95906d84dc5d30d566ffb1858</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f82a32bbf4086d600e0fdc7dd1311aa81e0bc1f5f7e89061c9e80907a213c548</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.105.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.105.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4bf0bd381d4cf5249cb060179aa054b37d7d969a5cccee9e8af3abd8562c7523</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-8056-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-05-27 00:00:00"/>
    <updated date="2025-05-27 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>- [4.18.0-553.53.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

- [4.18.0-553.53.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.53.1.el8_10]
- net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906}
- net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712]
- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970}
- net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819]
- platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714]
- platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714]
- platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714]
- platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714]
- platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714]
- platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714]
- platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714]
- platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714]
- x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793]
- vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756}
- vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756}
- bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-8056-1.html" type="self" title="ELBA-2025-8056-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-core" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c798cc6b9ada07cc400a618ef23c7bb5e585470d7a06ace2d89e97c2c016d9cc</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cdb4f2eb7d9f9eeeec4206e53f1ececfc0f52952ebec64c7352cba6a24e8f4cc</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c1f0cd010b2c532f1efeebdcab9b6f5c19c4850b76ab1e67f00c63b5a19ea1ab</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e5e4f54b1280f433f691f6fa32a17d090e0c99140f5aa5a02e57f759d3c89a79</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fba2486b5003f838b5dbc64660f2beb01e2f6218452caef1221dc12a7b147856</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.53.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">8ffacf7394e2c1ddfaf3aee3a19b1114738229d16f195e6d080f00bd64a70867</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">25652e271aec6eacfdb268e64e9cfe26d95944f600a59f2faf3a0cf2ffdb8f48</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">42e9f71411a9674562e126e89c9c89fa2a5f5f34b784c3a6523779d43a9248e9</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.53.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">f8a2421a7b514133124e6e51d44b1df5285c7162c450d6edc68d43783e74ea02</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7bb70959c434c1179cbc5cd49a6a145c3ef83fc53a0515ca83abcf03f03f34e0</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">515d544812cce8210802b80739f5a6cb214dba0b00572bf8a982633f010b659e</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">40e4dfcd87c7fe906bc1473bd035910c3746e9ec0a3abfb3578914569254472d</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">80838daa4bb6a5d415b9e300614dabffda4516644dc380327eac715a97ecd3ce</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a56ae16cb6f25d41e2e7ec86d18b06a512e604c643fd8080c71e4a7835bae18e</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">70267cd3cde7c0619a9fb1163a42c170efe522dfe9eefd6e26cff3914d6dbd5b</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">eaf064bee4772d8429e3e5f17ff55d8129e90e0311cbb7d581f2badb5dacaa7d</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b8f5787bb797f035e40869c82821b6ae0bac18cb74f30028523da6f845cc7486</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8177ded8df7692983155f887a9eaa0e04311ab69ab62b769ba2b4d968bca916c</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">13263e2234d0095bb14cf0110b3cf6a507eacc81ed5e51aef4c5020cb5b80c48</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.53.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">8bc2f7867679b1b0337e290be15bff3c3ece2d06ad013f42626e3604568c8ea2</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.53.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.53.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ff6add154fe8020969f71a9d42cc8a427102b04ff64457d99c29e90f290daf5e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-15471-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-10 00:00:00"/>
    <updated date="2025-09-10 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.74.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.74.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.74.1.el8_10]
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352}

[4.18.0-553.73.1.el8_10]
- ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360]
- ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360]
- s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234]
- bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985}
- s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-15471-1.html" type="self" title="ELBA-2025-15471-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-core" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">01337d61022d6f442c7716935ffefd655c04d7f1bf3b6131f6227cb84a4bf41e</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">10b5fc65663ec03793013780a263cbaeb5a676e81e3cd7967bb9ed78da3b8b66</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.74.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">ff8fed4e2e5ee7884c56030c133e6e8677911dba7ab70bdec131b775f43554d8</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">454294802d57edb6a251a5c7815eb7a86b4ac10529cfb5323bd2de20f18298f1</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1d1be76740b1c5338f76f3a0581c5a1c8eb5c7e05613336da411d064009b512c</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e16dae123e6bf59394950a8015f7a1c2d66a3f5e6f2c4cd9db2536def953e24a</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b76715a5fc7367fb993f0b4a36366252eb339b7ae2dadb0b3604aa603bb11362</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">edb33a8b9436b1a09f53f8a837f47931788a1c337441fa2940ef5c2a00f63fa3</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bc0854da4f89ad4c5a835a121644d59b35b80c16a777ad8bb5e29b957df8a4d7</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b10f6b78dc8f8de98e1d3220019587d810ff873b214d4fbd05cbec776190d39c</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">904db7a506110b7626a0ff18ff7daf609f401e8cb08bae36feca2da256524e50</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">681f161157adfdf83d8d48a8613c01fa5f49566f763dd09042ee953f68d2c502</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.74.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">cc18c9ddbdc27b1aa611e64ede6c6d388645f8458595f3ea0bbd2550b58b9f11</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">10e9987d2fef33d9cbebf3740309f67b37edf04325d1ae92561414a82d4b70b9</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0f5450221ac0e897f2718cc1b5c33ae252d0aa0b92a09f525b84630118dcab10</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a9362419adf2c6339bdb09f6adc50563931f7eea61ea8fff1a31ebb11d25d705</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c87e556a274212869e2ba18584c53c67ae768d4285a3295155a4acced40c6e7c</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">65e3801bdf3973a7d085b6d78f116885f670474ab7487cfb393737869f835bd7</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.74.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">bd137690e5d42fbe6936c939b99cf6a1a2a1512463beffeaa0691c4ee5d09866</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3061f398f6d3d9a24346ff33956c2f80de132cbccb882d669b3248277fbca48d</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.74.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.74.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">dc1def7993e12fec94540ce13eee733f2e0faa5f4e7aa8321b4209ed19198bda</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-19931-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-11 00:00:00"/>
    <updated date="2025-11-11 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.83.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.83.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.83.1]
- fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367}
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
- i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781]
- i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781]
- i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781]
- bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781]
- bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781]
- qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757]
- fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215]
- jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215]
- jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215]
- s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611]
- mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}
- mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-19931-1.html" type="self" title="ELBA-2025-19931-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-doc" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.83.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">dcea97f925fea30b6a20250116abdb39397cfe4fdfeb54a081f770a45bf72808</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">377d943954fa7198830abaf2b889604eb8ecc66070e09145dba395f79b501d84</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">af8b557bd845f9b05d8bc98be91afa4dae74765354435ee5c1d6911e447a4d6b</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c2f636dce5fe81eaeea427f95cffcf839a6044e32d117e581f2bb0cc765eb4e8</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.83.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">011b136d2491be851e5a6356d54831d9005454d7bf485348de4e23efe717bbbe</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">18cb921e4fe022bca1c9d4449dcd6546b12438bc4f9c9dc069f9055be10c58f6</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">96aecd168a72519baf123d79ca81dec10f3864fead57caa829a1812f6ae9eb96</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a4cfbfc53ad76e9c9b0b825692f0d1494230002df4eb5bad36f0e5592bcbdc51</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c2ee1f8f03c0c6b8d553cbafe9189657d3684396e5ee508fba3cf4e5fb82efaf</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2fe196155b33a7bae1626ab9b643eed2fe05c785e7fc39e71b8a48bb12a0e449</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">15900d7f39f8d7b2996366f955d9800de25a78e73f29ab6b2531b9dbd31cffbc</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">738635a46d8dde420d14e3694896c86ad735a5d3460d204118106a7c721eede7</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e440336c3165df35dfd08264baf9dcee846b3603e1ac5c7e630002f7b598a26d</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">238fef86fdbe41e1ea42eeab90a70c4d073d8e6174b6dd43160cc7fcd7c65648</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">13af6f17bfbd628be62c38e64f2e9e97682b9b3ce024eccb8fd8fa20f242ed0e</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">34c2b6577edd775611816f2399cd5a32c24c917cab1d436a2a4f33750493ef16</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.83.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">50f4b77b318c0e2ac4e1c12966569fc7d55a2f0c0506ab9b63d4f64dc31913b7</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1603c40739d49157c9d58e056c48b60526ca05ca40b7c985b6f8c508e3cdf90e</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8946119b325f4b1c681b83a7a899ef9927cf29174b1c24ea46d8bc987beb070d</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">237e507f5668c1917b78b8e6b85b8adfd2d475843c932664759cc6c8a015f7ea</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.83.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.83.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cff2798b9049c10bc70d3ce5e0ad7fcb1eeff52781e1ca5d6282f7b1a5687fb8</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-6571-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-04-10 00:00:00"/>
    <updated date="2026-04-10 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.117.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.117.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.117.1]
- nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193}

[4.18.0-553.116.1]
- nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930]
- NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242]
- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242]
- pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242]
- NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242]
- flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242]
- NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242]
- NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242]
- pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242]
- NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242]
- NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242]
- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242]
- SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242]
- NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242]
- SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242]
- SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242]
- SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242]
- SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242]
- NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242]
- NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419]
- nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419]
- pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419]
- NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419]
- NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419]
- NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419]
- NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419]
- NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419]
- NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419]
- NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419]
- NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419]
- NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419]
- nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419]
- nfs: always check dreq-&gt;error after a commit (Mike Snitzer) [RHEL-156419]
- nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419]
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238}
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231}
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-6571-1.html" type="self" title="ELBA-2026-6571-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-devel" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1c7a6e14f0c0ddb97030daff9bad03ad42789ee00493bd2a61b13e56f69501e9</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">78f108991a4e1da6224eb4bba0c04fa1db380d16be3085cb3836cb9be6f9748f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.117.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">b4e76ac2aa8224b065dd9d904666e399347302e8e8098e9dbf8c3bf491e80912</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">42183d513ab467b69b35ca97ac36693fdf6373ce651fd6b54a423e040c36d988</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">32c6f5c0ecc79467d3c3ba2fcd850032335e16c103314468b2a4bf3d6201732b</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a7bd86e06b6c8f5e07fc179d33588763762fecf80928382b22cdd61d7cde5c9a</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.117.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">24b2e3ecbe0558ab272f242a4cde00f6b3f5de81fe2848432cbce9ab16820ed3</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.117.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">85104dbbf63ae7d8df812f8f48058095b49b42d5b837d4d46b4ff94855723ac5</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">28145e9a0af776ed4a85c29191eec82b90a68a2cb2764c173e28c53c8db1beef</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e727d2e12a3a8873cc7cc1a1a927256502fea7c293915bc707ed1aecb637eec7</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a446ba14eae42ce6f95447c639788f9f6abaf616542fa2d5cc4d1b0d53f00436</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">233ef0502134f7a6277d4cf30449c994e2e99e0a0257ff1f355e65341b45dbb5</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ad78dac7262f0cacec8bd882d0538ee9a3dc88d6b19f95e5a1043d3500dd06b2</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3efd46dcb4a089a7ee9addf8c25c4fb084f9bed44d7377cf94889a727309cad0</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ebe24e383a5c73dfea90ec01a30259617e47ce488630e6e859f94f3ccebbf332</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">adc0bbcc498582015e5313dbf3864dee943bec6b89ae9669b7ad851e1b3483db</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a2d3f02b960e8036029a8d61d417d0e3654e93226bf756a5a252a3c5267dab88</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5acbd6ada1c6112e5496f6709070583e7e8c5f272e4c92737ef64a95eca5af94</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9d9c4a4a0f31fbb20a318d3fcd39e97301e146e6c7f9029801d780c4fe2328e6</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cde16f433c3d164113b115b2d90263f583f54d09c9711e4952317d08e2ac3402</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.117.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.117.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">155888e3cde861c54c0cb5b417009c5b3e4ba206dc114be2527ad8f33e294879</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-1142-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-01-27 00:00:00"/>
    <updated date="2026-01-27 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.97.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.97.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.97.1]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129107] {CVE-2025-40154}

[4.18.0-553.96.1]
- Bluetooth: hci_event: call disconnect callback before deleting conn (CKI Backport Bot) [RHEL-137039] {CVE-2023-53673}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134423] {CVE-2025-40277}
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu&gt;=32 (John J Coleman) [RHEL-111354]
- xen: Fix x86 sched_clock() interface for xen (John J Coleman) [RHEL-111354]
- x86/xen/time: Output xen sched_clock time from 0 (John J Coleman) [RHEL-111354]

[4.18.0-553.95.1]
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Olga Kornievskaia) [RHEL-132819]
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139273] {CVE-2025-40248}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Prevent failure to reregister with NVMe transport after PRLI retry (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Update PRLO handling in direct attached topology (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Add condition to delete ndlp object after sending BLS_RJT to an ABTS (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Remove NLP_RCV_PLOGI early return during RSCN processing for ndlps (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Allow lpfc_plogi_confirm_nport() logic to execute for Fabric nodes (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi() (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix possible file string name overflow when updating firmware (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Validate ELS LS_ACC completion payload (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fill in missing ndlp kref puts in error paths (Ewan D. Milne) [RHEL-32324]
- scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login (Ewan D. Milne) [RHEL-32324]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-1142-1.html" type="self" title="ELBA-2026-1142-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.97.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">b6f6567ae0c4f4b08a393de605c385f208fa13dceb2bd31f9e4a4659563ed42c</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.97.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">e9a934aaade33bc29c159007c748d581a873667657c78ca7a9197a410fb5f32b</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">adc89351082e15374bb1df3a960958fdfa90923f44b6f8016e137e4b7720509a</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">96dd686c8fe10e2c9401ae76c6d217ea9d28b400d501cf97c18ff10e2f8df253</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cc189126711acb1c35687e916c204ae59e9f715384ea95d9ea4a9c3f93272582</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8aec44e929e79e6e1d68fa3b156a7df3f9a578d74f70f2bf2eb1c9d558d0ff1b</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1c36bf930228888ed0159200c34897f95e001a5ef6c0facebc6abd84c89d1b39</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">482265bce13ade12383fb6266073b689073c6ca3fc57f81a0a31438af0efd515</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3f6ac87773eaea167d78002fcfb8bd708d98814192a2986acd81eb0e686e067c</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7e7a228b4762f88843b699e97db631ba49ab6746ed422c2b1775915874091214</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c0eb1b9daba4b9c4178f6bd8264980968b17920df84b99516e28daf19df3e231</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">08f620c4467274fc324307adcfe78d17a0b7341a072246a16d53439e97eee4fd</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3a1ebb17308646614935cc467e03bf96eef9a0db432b1808bae6ccb0dfe539ba</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">76d9bfc13a1e1140582f6f71e17bd81078d17aaa8dd1b43e9fb7ebd7abca7343</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6dbc8fbee96961e2c15df682911e3919c6bb705e46775d3381159c97cf7a33f8</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fbeb25de5da2eba34f8a366711391e4609d83ca0866adf980cf714d3b4ec9669</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">00caadfa4e1c4f5f635d5242d15d3ef52f5337661b7b67ca2c7d124a5198c56b</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f386838ac9b4cd906c2e18cf8d3c4f87377f51322b967c807a5473bb14526fa5</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">822ed6291ec6ed7bec896b73c4e5d5fe3b69637f4e3f7179e83a08b240d3d5e2</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.97.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">22a2bdc8a43fd7224fe8d19dbe4ed4d834509ec84cf551dc34927bf8b1f56b56</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.97.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.97.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">64e465bc82b499d65c7a01ab2f2f664f77987740ab6be779b4d0418e54c1ae9e</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-13960-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-08-18 00:00:00"/>
    <updated date="2025-08-18 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.70.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.70.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.70.1.el8_10]
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380}
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250}
- net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717]
- drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097}
- s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600]
- s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-13960-1.html" type="self" title="ELBA-2025-13960-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b6a30f74e69ef97d7786255934bb091428ff8b75cdf041acc905209a03d66c40</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6b0aa745c7aa6547969dd1c8cabe92ec3c89fe005d767eade72bc62389d90a3f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.70.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">bbe8d6266c3cad05b0b1210af98ea43b47b0bc0bc69e8e0955e38f07cc3c5052</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fbeca03471bc13a0c2fd7574db57fb50868fcc1d1eac074b58be11e826f14f67</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">110e9ad88f2200bf5ce32dbb60a7b50607f755c7238c204542e5ec55aa491569</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a17314f5dccbdb854178b912c1f96a506cbcf28449cb7efdd6200e4d459432f9</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.70.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">425e0084b6893e75c557a9247eebfdb2080e39b6c6b1e206527389bc38f4b922</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4368d225e36e6d2da3ac057c334d41927b84a796985a58be445b0118fbe9c166</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">84861e65a08f38377304fdd9d1f7e00e759c4a84fee9b7aff57e5f972b0d4892</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7f042cb0e79dfc94e29c1e05db36e0a8e7b7218689fea7fad588aa12770d8d4f</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">18a33f9cc969509a0712fa3c30981cd3e08a10e8f9c08fc7d55f818de51cb4e6</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.70.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">5a4e16e79d6fca92965a8db853305e58627b5e15a6ed5042fe3ad0fd0dadbb2b</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">35f9f9f0d6919ea3866fdd49fad572b66e6535446a3544fef03e2e21f78de8a5</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">781094de8d497c49f352cfd53dae9d805996aba87551b91ba550844c2b1644f8</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a578be2ddbb5e5e9c32f96c927701401c319448b56e9b56cb684afcb4ad1b032</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">32970bafc6ba773b6a0a1ab23d6b5692a9270a0e1dcf938d09908d211cf09e59</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bbd414b9b323a74541f77ca9b62f29cb4553d8a007eca7b94da89f3760f4c35a</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">46bcebcf3155b5d4ac7e3abd8806288b0df382e1e2cc22eb0f77c1e7c36e9b9b</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9c333739f4388036c160971d41f644f8884a5c8d0c405ead8008418ee5856420</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f136caf7907fdd3e71a601b98a19eac775f0b89f47e4786f2897c51952a7768d</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.70.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.70.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">64e5b15b3234baf4b6824643d12ffb54ee37290800507dcbbc84029d9f594b2a</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-22388-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-12-01 00:00:00"/>
    <updated date="2025-12-01 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.87.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.87.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.87.1]
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955}
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883}

[4.18.0-553.86.1]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825}
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237]
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898}
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724}
- nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513}
- arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921]
- perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921]
- perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921]
- tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921]
- powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921]
- powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921]
- powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-22388-1.html" type="self" title="ELBA-2025-22388-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-doc" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.87.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">eccfaf87b32b26ca800fc2512b6301746de4cf4fe5699036dab17246bc661df6</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4763a3f32cc17268b2dee4771d7feb925731ebefb55ef2b9d1a87f12a66ca934</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">deade62266b552d4c97df0d94eac7f455dc6ea84e9bad2550e1e26e6b9f081ce</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">688751a58256e21bb633936cc5d15590eca50e2286df2c5e4e017887bfe2248f</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">17618ce944f547ca181aa04d09def06cb1be32c8df42b6d9ef90090d7473c825</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">300f8de7f6bf6318a4a14824acf3bea503dff59956cae8de7e5f2676f207dfc2</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">001bb83cc3eb01bbfe1ff53509330bc9c219d73160d3afb7e614a5b67566694f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.87.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">1d4cd1def10479dce64174bb2d90057b600345270cdb66ec1ed74b3e3c532f44</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">285c1c09667e605e798379cfb7cb1d4ff9724343ea44f09c4e8318605fd06741</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">84d9fa2267e715940a83e0403b2fea0ecba53f49b48375ed98eb5998f9bd6e30</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c2dc01584ab136e5cc9d4232c828b16f16ec01c13f5e42a8a4fb0400c16fa63d</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9431aa2f7cf03db94ae9bbc4e15991d72316b0146c4c252efec6d196db727e4f</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">234a5f62f4a91dfb978cf1ee060316146d9b7867922f711d33b3d0adbf53d2c4</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8e61ab52ed0f05b89a477abc4f962a0606ef30c4a7182a83a53c012575a1025d</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">797ead576dbdbb596d513c06df73303cc0ef3cecb8cd7722214ba56f33284051</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">190d9931f59181453d48fa167824a75e0c60309fed86c5acc7d869e4e146a526</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9cb4de32013c32fd0a2572526c097151de352247cb9330e329e1ccedeea5c3e6</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c121aa313c1f72b5fdc0b5b754dcb76461514c487868e4f1e4bd1c37f5cc2ea8</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6feccb6c4659250e03923ab03e0e9d4f9a134333bef3e62aea13f820f051d04f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.87.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">bc21cf7895e175e7415220354630b4292209c9420757eb62b80c2394db240279</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.87.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">99a97a45ad7d227d7845b2e60ce7bda97867e1efd455ffd918b0425b9c99b067</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-0444-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-01-13 00:00:00"/>
    <updated date="2026-01-13 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.92.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.92.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.92.1]
- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137395] {CVE-2025-68285}
- media: rc: fix races with imon_disconnect() (Kate Hsuan) [RHEL-124396] {CVE-2025-39993}
- media: imon: fix a race condition in send_packet() (Kate Hsuan) [RHEL-124396]
- media: imon: reorganize serialization (Kate Hsuan) [RHEL-124396]
- media: imon: drop references only after device is no longer used (Kate Hsuan) [RHEL-124396]
- media: rc: Add support for another iMON 0xffdc device (Kate Hsuan) [RHEL-124396]

[4.18.0-553.91.1]
- gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355]
- gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355]
- gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355]
- gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355]
- gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355]
- gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355]
- gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355]
- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240}
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963]
- perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171]
- perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171]
- ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226]
- ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226]
- blk-mq: setup queue -&gt;tag_set before initializing hctx (Ming Lei) [RHEL-30744]
- blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744]
- blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744]
- sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744]

[4.18.0-553.90.1]
- NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew) [RHEL-129945]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-0444-1.html" type="self" title="ELBA-2026-0444-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="bpftool" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">84045c836a4ec302a00efef68596c69c5ce59b7b8d970c5a69e9f736d43406f6</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">816b375fa8cf455e7fe6916e17be23384a6a3346fc5b17d328eb02be9bab178b</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d5d4fa2433fd89095d31201e03aec856485d53018c6d744c92aec64ca41eee26</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.92.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">eb2f9a7fbae5cdf0ec124c2ff8214f15cbb00accde199d24cd100932a7e86f66</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1be76caa0535b4ed9ab75089a7ed5d7763ad903677a4e11c5cf4adcbfb633c13</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.92.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">faecada5ae339bdb896523f5aab1c1c363c328f7850ba0ca0610a5382fa55ac1</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3fa12928b2e880e87d714e2bab959eb4c02baa0e0366adf502454ffd411cbc8e</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d245e106117774d62d936846d461efc5b61e98b80aa3cb7b2b525409a0cd6671</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">35f5ad2874a086a10c2bfc7d31c98ccb092b0aaae368b7c3ebd05855f34bdc44</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fe9f5981b160b8273ffd605df360bb4a076263b8df66865fe61a8f928e0bd07c</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bab16683e7ddd966cb2523d64b5ef4768eb8ccd77f73f5626ba1c998609ccd1e</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.92.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">da4f66f9d9a6f5887a5e64e8b637b8b5ee49b83996b5168ab6f6ad5314e1666f</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">25598f5f3bdb1cea574968757b1f7d86dcdfb507227a966ca92d65eebad6024f</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">287d604ef09aa993c1a277c5f567a7d0192fa0625e9120e4641b74335774e0ef</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b74dc1bad3b0e873e31ad4727a766e0591c16fd28f395f5ba19f6c3ae4a989c8</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5a6a0deb9977ebbe6889e12f0bba45b5b2087b881f57131bf25d19358ec759a3</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">79446e8e33b28c90dd26875bce08391f1c64f2ce404c4ac3f8707e09a5543f88</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">80f7c85a6f24d503f54192e76b1a42ecece32843ad0d14d976b3a2827d68f25e</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">79429c975454f3974ff89d24f057092283e431be3199fa04abeb16ac89aacc72</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b9e92462a33d6595e70cc3036c1e4d769fad7e53b0ca7e4f0fa8401e19193ceb</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.92.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.92.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c660250b7f83df1ccfcb08e10a15481b33f78ce9fc300fac642b6065c30e05f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-16372-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-09-23 00:00:00"/>
    <updated date="2025-09-23 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.76.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.76.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.76.1.el8_10]
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
- HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498}
- xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193]
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-16372-1.html" type="self" title="ELBA-2025-16372-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="perf" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3f7d423d46f182bed913814dfbbae268459c8b18f32960956e29c80cd0b41814</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1e816d5203e62640bac83a65c94df72dc0bed099cfd9b62dc600b70b1e159fa0</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1ea3bad10b8156a9337bc1bfdbe9b6c822d2cf183862e5058282daf0cd92a7dd</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.76.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e84de08049706136525f87a78e84e0a201f6e60e38f2a8a91d411c7b56141adf</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a6cd9449e6128494b4ebd346966737d12d03aa2b3e116cfb4ebec0a306c97005</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.76.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">42ffc14e077546cdba96e7ad0306900528af9f78184d67bc1996836ff800bdd9</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f4966593f261a8ef6d0600a174551090baab7f547052ee60d3f553818b3ecff9</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e7ae9882c99ed903ad808cdb644b42222fa5ee956cb31ad9ab3dde456d73d115</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0287d12fcc61a53e06275f86f7daed6ebbef36c64f800d23720bc12f9888d456</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6643ca49344c8cc412878e755e8c20d56075fbdc8c4fb33f3023897357245b11</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3809b9c4b720a0433e9d4f2648875f8532383a7fbaa0fc4f55b44aa170e5dadd</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6426b47f6064cb3b90612bfde7223fb2405dda639c57d8b3c98297da9857b841</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">eee6a0c44ae1c7a2fea5d5cde0d6de2ac4e172031480852214acaf531eaada5d</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">41ab98eac3d5959bfe2588612b94fc8248c6265b3c2ede6c12911a60edbc7c1e</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">499530763069c3dcb897a8097d92f95f1eaee0cfb29d6b8d58671ac2ef933b96</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ceb0962a30a10a15423f93d1ae3507658455686f3ce0a229e0118792b4a65368</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">73014b3ed8d7f9650b019619a47a07e87cf0d1970b812333e4e895acaf91e3c0</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.76.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">1be5f33cbe5f157f463c5adbec639d0c301ad91a54a3d836994070949c2afeeb</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4247f13318c45a9df4949a2ae20278102bc8c9d46f22f072aedf827222f80ace</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3bee63f3e88c393e9005f55d8e29389caad79f35cddbdfcd4e615b7263f49fdf</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.76.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.76.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f345fa674724146787ab0f4c43883b6b78e10550d777f59b808182f7e202e932</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-10068</id>
    <title> kernel  bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-12-16 00:00:00"/>
    <updated date="2022-12-16 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.18.0-425.3.1.0.1.el8.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-10068.html" type="self" title="ELBA-2022-10068" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">dea1d0037ef89c4e0c3aef8d0ff0a6fb2d596df47dcb037f6e9ae27262b0750e</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">caad13854ce257d31962b7645157c38c7c45c6d0f3a5d834f7cbc4c0893b5530</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">be19f48b4fb8aac6d59e9b960e8e415d6e917ffc5b839c04154e8968456a1f4a</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">ab20fe165cc5ce7f5a531d8acdb3326707d223829e471ff227d09533ddbbf6ab</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">4f0d5db8258149c2c34ce4c9d9c1451f3ca18276954aef40aa96d997a4e92c46</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">34185e4f4b41d4dcae4238aa7eb93b94a5cc2d9d682e488536a076c72e0133c8</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">fbb6568e19f2a7b9dd9b05782924f9e3d2274d2768c4349410112faef782baf5</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">6a37b660776935e639e99b19517fa000487de703479a5fb9755b6ba205b2149e</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">971e2ae6fd5cee0b984acfbf7ff829003e315e0dac163fee35ef2c1082acef27</sum>
        </package>
        <package name="perf" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">34e7b4cdb60b11f0accc7f15156ee317d68638f5ab412e99aa9644bdda78c763</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">0024a8d153da4350418459000f983b9a8258de78f909c6db5b650e6f18bcbe38</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">63d56fb5a1204e9368df5586e995cd9e17c4bb35fb3f7bcdd6206bb9ceba908b</sum>
        </package>
        <package name="kernel" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">d690036cb7de0266586aa4187d54e5ce52b06f2da593167d8e349245db196899</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">3bc4019e8dcd46a73af35cb38ea27a5df4436d2795e2c893c51c4268a6a01d30</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">b5d6e7dd17d7af2e67c36fd96280b0984f9969a6069bbfa7f8b76595838cebe5</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-425.3.1.0.1.el8.noarch.rpm</filename>
          <sum type="sha256">c6e2f35604f07661668073f93e18d174db39cf7ef769d5ef040ca6f6126e0adb</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">7c967ae28beb04d4d6a9563ac56942e110c4e20de970b76dca2c0ed02c0fd472</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">cb442619265528583c0575a940415b50e8b4cac16b7961c435d318ef01f648da</sum>
        </package>
        <package name="kernel" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="src">
          <filename>kernel-4.18.0-425.3.1.0.1.el8.src.rpm</filename>
          <sum type="sha256">0380141d7b2e132161707024a9a6e716d9d24df80c14881bdf9bff2b344cb071</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-425.3.1.0.1.el8.x86_64.rpm</filename>
          <sum type="sha256">e41c61ccc382ec4268966c2cef4cc60b847172f0abb299c6d5b1b282489ba35d</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="425.3.1.0.1.el8" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-425.3.1.0.1.el8.noarch.rpm</filename>
          <sum type="sha256">7bae00babdea60d572931f5004c43b79dacac37d365a2833c26dc50ccb7083db</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-2264-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-02-10 00:00:00"/>
    <updated date="2026-02-10 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.104.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.104.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.104.1]
- Revert 'audit: Avoid excessive dput/dget in audit_context setup and reset paths' (Alexandra Hajkova) [RHEL-145856]

[4.18.0-553.103.1]
- ext4: fix use-after-free in ext4_orphan_cleanup (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ext4: lost matching-pair of trace in ext4_truncate (CKI Backport Bot) [RHEL-136000] {CVE-2022-50673}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136904] {CVE-2025-40269}

[4.18.0-553.102.1]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144327] {CVE-2026-22998}
- NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-121683]
- audit: Avoid excessive dput/dget in audit_context setup and reset paths (Waiman Long) [RHEL-140776]
- lockref: remove lockref_put_not_zero (Waiman Long) [RHEL-140776]
- lockref: stop doing cpu_relax in the cmpxchg loop (Waiman Long) [RHEL-140776]
- lockref: remove unused 'lockref_get_or_lock()' function (Waiman Long) [RHEL-140776]
- lockref: Limit number of cmpxchg loop retries (Waiman Long) [RHEL-140776]
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129079] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129004] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128966] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-128966]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-128966]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128966] {CVE-2025-21766}
- net: gain ipv4 mtu when mtu is not locked (Hangbin Liu) [RHEL-128966]
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-128966]
- ipv4: add RCU protection to ip4_dst_hoplimit() (Hangbin Liu) [RHEL-128966]

[4.18.0-553.101.1]
- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141878]
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140255] {CVE-2025-68349}
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137692] {CVE-2025-38403}
- sched: Fix stop_one_cpu_nowait() vs hotplug (Herton R. Krzesinski) [RHEL-85625]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-2264-1.html" type="self" title="ELBA-2026-2264-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-core" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">af7ccbbb68ea84680233566c8099813f2e4b018a866dc6f8207c7e75de53100b</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">457538864e808d20426cb1be8626cb0251cf63780b18c839bbc93e024b294b1c</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d0b088802fbdca748855e0637e47e49ca11bcbd1a1e1baff54bcb44c17d278c3</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">181bff14d7e29a1597c924b25cd5ab06c8b772e4c3b616079cd54f519e4ab93e</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d357e96bfc6d59f9569379f38e495a3d2edcbef81cca64ad0235aa777bd13782</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">17930b3b094c878638ae5bd8e373a4e7f21fa57ba110ed2587ccbfc1763a49c4</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.104.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">25bd7ae6f2255b5430aa8ec6ff2e366063e51051734e55086076ab19b5f42899</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8d7ddcca0788c670eef01c60196731690776df6887d6e91f6a83bdc9f5e10c9f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.104.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">a63e4ef433dcfb6a47e83466ddf28259d3725a6057465bcbf6c31035c711735d</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4ff60e4e30041e828ae2257e637a50e49e8bbb07cf36d6da09944c72b3593f12</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">105dd052acb91ab7aae0e397bd2b27c8eb2c410a5fd0e7720212ee4c39859d85</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">018167564cfca6f10854bedf35811d6a42c945293cd134f47e0d120f94f2d278</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">819f8e52f210a4a69f6698bb6f9de73ae3d762058a3b1a7f503ea2a8aeb5afad</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2ee4b574a838e1a73a69585aeccd736e0465a01ad8a6e5c1638899701ad06e71</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">65b35d8f027414ca8307d586628db4081bd5e8ae1ba4cee51c5a507abf4a94c8</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.104.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">04faf1b273941fbfa11bb17896f67ede49196f2644267db14832b498f8dc0e25</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">90abe60933ca657c34e2b53f44d7b520c717c6e82e941b2b4d1fd03186ae0a14</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">534eef78aef56c62ae2ad4416d74c000a16016d4d088b9a7495f595c03011d1a</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ecaf14f6cd8ab607e5c878c2b2d7e3f0b1592e7dec5d031a86b7b4a6e90d0059</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2c9d5f7d96cd51dcae54b3ff51df650ad4d0a469ee82fc3853a9c7aa56e6ff56</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.104.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.104.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b18e5210997f086f9eed94694a9c9c969995ea9d151509e7060de56cdd5a9aaa</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-21917-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-25 00:00:00"/>
    <updated date="2025-11-25 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.85.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.85.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.85.1]
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970}
- i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971}
- i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799]
- i40e: remove i40e_status (Michal Schmidt) [RHEL-123799]
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973}
- i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799]
- drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122]
- NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
- The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hajkova)</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-21917-1.html" type="self" title="ELBA-2025-21917-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-core" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a075a476633016e61e8d3d140a43c930ff670da6d3a4ba06b50520da3ad9d99a</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">da5074f5d6fa793004e62ee718430f4a9aea9399fa60d391bcb820b0a6c5c760</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.85.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">07412e70b2082ba85d1507db8f45116093cfd9497bb0124b5aa65024a32a1d12</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.85.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">adb358bc353f4b53b370e2a629ebc048dcc077c74d77b824d65a2c07c5ac213c</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">16b9a12f404b24671db9e1771c7afc3b3f77c919f078ee1309d6030163904a70</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0e3c1a12854bd5c1bd779790bc0ee9453c25db29d1ecd776251c3ccc59d20a13</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4965f3c5e6f3d36958d793c90cce301953024068fdab7512272bab44d1287134</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f1c705e17fc4e8eb582d1f4fb2891ddc57bed995d040c3c98ca1be249dce8683</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">da81012fc58a9df6f2ef6f0b77ddb61bf2fb05f168aed01c139fba0616135778</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2973d163bad41e233ad0994092d50b06ffbbd507523e287a911faab06f490e80</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">debf5c27b70870a4a3ea2155397109ae9f09b2487928c32503ec34595df6c40f</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a00968dcd0089608007100225a9054f5e8cc54477018f0b92221b68ce5f246c9</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8241ec11febfa491902206de1cdc5097e715cd7cccab9690e8a30bad3f4daa0c</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">aa954c1ce4fca16ee5016406723640f00b07a282707896e211c3bcb26f3b2014</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8bc8ec2e1d4f2b9d698ae8ddaf111624c43681fe8f9bd0602d44b77b06826f4a</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">abb52afa427ec9b22472e43f75b7a7adc9ad695c35afc66624df72e5701b4380</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3822557e6c61cf88ddc200283351d5678fecef22640f3cf3b085bb28fdba8d2c</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1c077459bc358846cd4717243d97b883aae691db321fc5a73e9c0a65f0ce9226</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.85.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">3a105fb564fddccf25a51b0dae1c0efac0a70d2bc3a9ad3e3e54e279d4ecec09</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a360126c3454963a0d60953ea43a50223afcddc66c28ec9d3957a8de43601145</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.85.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.85.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b09b2ea67db3ff312896ab2398c614c592b361d221cdb4e7f21094177180d4f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-8246-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-05-28 00:00:00"/>
    <updated date="2025-05-28 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.54.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]

[4.18.0-553.54.1.el8_10]
- ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834]
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842}
- sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-8246-1.html" type="self" title="ELBA-2025-8246-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7ac23b4ed867e8ceda829b788f75299d36756413d35c32a3a6e1897c36a89179</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.54.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">3f6282bba3792e1d70ca7e783a584071e0e0fe57de47cdcd620c9e7e2d420316</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a0f65cd45516742288a5e9a277740f4a84fb7af9208e1db85bde348262ce194c</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.54.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">d432fd772dc4467a8571ed675a872a036d3fca60aa571534f08494e957f00e00</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c1e9ac0614c71d9c7e3871a3d24a9a01bc18a4b6b92c09bb94f7ae592be19a8c</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2ce59a3f1672f06b9a0d7241e3039128e9056a95b27607c4f1df38d5c8241dd2</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f0b165690b6371bb875c56d0db12a953be6e2af2ecd958804041bdf7a0f54fca</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1657ae4e4a07ea776a73ad39eb1e1e9dab4c656419a6df34f8fd8962a4f7fbec</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c3f7719f4b2f3c86f2b62297c13dab4cced20d8c6f7da1a87bc0d55a63c11b7f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.54.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">074b2190afb9adedc34bcfc9c990c31059c1e072e05d31068568b229a3924721</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5650c250b28f4ee92539adee0afe28c88066695ce8c1ca6b032f8d25eb2ddc22</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c27e2661072d2a00ac40f282b2e3eac86b2354f720f303455e52a5fc5e9c9f0b</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a17a2e67d41b72ae2e59f5de5fa1a722749fb5e7433c24c830536fce1177c1e7</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3306934e0af3d756cb1d4b5839a9baf927e65aab3f12f6907f76fedf7e73c7f8</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3f310a11f760cdcf11566b0a3579c2e0d41530e3a6c2deacac3e7d7111772a5a</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a3e1dca5fb55d935fae5fd6598fb83739b78fd6691dd2688b8ca8507f79c83f0</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1987122a1704ce55003812001fca51a9273427539779359782527a7f363e4494</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">83b25ef05b958ef310d24cbf0c7f7726cddaac0a52b86d7dd54d217375bc421f</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">482ed784e808d86bba9c0bdf2f497f1482eb6efd8f02fd3b6d97885bb0ae65bb</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7cb72b7fb48729dd319a63b6fb5491c90c3d9444ba92e6c40e60103f475b0b8b</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.54.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.54.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1c757026ccad14009b88cddddbc3b4a050ab516280c5eb029a0a57444cc756f2</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-21398-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-18 00:00:00"/>
    <updated date="2025-11-18 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.84.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.84.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.84.1]
- cgroup: don't put ERR_PTR() into fc-&gt;root (CKI Backport Bot) [RHEL-123775]
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718}
- NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-21398-1.html" type="self" title="ELBA-2025-21398-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.84.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">469afe36795f67298daa2837708fe1041ba9dd5849d0fe7ed416a710d530d0f2</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7e66ee392bb4fc7e63eeb43d2e7ab9c06c7847b395154b17c3c951c5ea03dac1</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">84d63877c43822116f3a5127691a47ce557bf3f17d34da807df49cc4bbb848de</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">adc85cfe50d4ae64fa3f7b93e956bbee67236dcc8a3ba24982e4b8f861843a35</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a46f87fa2caab2bc9050f1eaeda1935ecbe0ad9e2015ce177610f42bb8f64529</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">979d1947f434d2c3a5571c4c68dbe48e349b1117e944cb4995e3e6c2b5ed4ead</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cb194cbc0a58a7c63c3e11cc9eae24e3ef6f0854baa938c319feec2b3647d6b2</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1e4debbb15425d8eb702fc5e1e8075333b840b8ecddf29653f44e4c50c61a7e4</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">db5f433338c689fb110d76bdc1c80fb2c1b0182feecfadd9229c473e84232edc</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9806cba9ab74a594e2d54a51e49ad39233ae3a5f0f4a03e53c360c036f296b86</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5bef725e08997d1e32d192fa55979b9437df07e42e1ac617f6299796e22ef6af</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bef8f61dd081a58cfeba1b61dd6ce7b3783664c00dfd1dd10c52b5b07e793b56</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.84.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">f7c84db17f2c92b9d0900471fad97cec66e3f0adf2bc7eb5abf159917d4af501</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">36c7ecd5dcb67abfff17ac5ad86ed08a9ac5a5859548d6a61f7b143b1e0d9c94</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2eeb5f60a6794c4024226a71d2dac8f1ea4d5eeb6abe5b583b0fb12f58451968</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.84.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">0312324c4352371b04e682e9829af9bef2d08a0ebc45b78b109bfb466de9d22b</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d730855e3372af707319e8ffc7dc5acb2701b51146342f1298fb0ce045ae7418</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6dc774773df202e05ddba20d8395b060f3a2805701fd0ebb413adce54d3b93f5</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">781ad57e65151f5974d9343ef877fd2e7ede31bd6510df93d1ffc30e8789f514</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1337f7fc4309a0d1ef7bbc96a9ab7f4c29afbbfc773d7602becc90fd8ce70688</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.84.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.84.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">260b4d6e043893abc4244b4b6977791d53a4345d7799881bdad5a031f771b76d</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-0832-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-02-23 00:00:00"/>
    <updated date="2023-02-23 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[4.18.0-425.13.1.0.1.el8_7.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-0832-1.html" type="self" title="ELBA-2023-0832-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="perf" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">6652be48513ea55fb13484e744b1e21b2b975041a5a4ec11ebfa8e07fe894a15</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">09a78fe5714665c0521993c42171820b343484aab458c49e96b834854f57ec6c</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">60534431163a371e30cf6db0f1fd916807a64e814fcf2ab5f0b169418f1df5a9</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">bc7065c1fe0a33e70ded6293ccc12bdb239fdb87478d7c04eac223fc4adc2684</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">92aea26b98312082bef644abad0176dddbd51418831938f47b63e682a8021f09</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">8445c509795e8db051023ffecdd4d350b52b81f8f501c707aecf1d4b293b4431</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">e60c1223579312b82e0aa521b56a057ae24a695ef4fdb5192c32f8b8dcea8b64</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-425.13.1.0.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">f52278088f75d3d446a69f1b4caa5a539c23da5ae6f6a14ea913157a45d27762</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">f24ed25c44b6d0ac4a45daac81e7b5e9bd37002c2edebed7b8ef0a8f3af65af0</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">d225e4f63853379b72b7922793ebfaf184c65739ce7f54f837f978a144bfa09c</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">ddb8feac9e66e42d4e14c4842692ab2ff6aa44e372853ed883e27a1d99460f50</sum>
        </package>
        <package name="kernel" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">5edbcb0c46895d4d3512ab83e07a1745968d6eb3c326ade126ae4808d21d5fb1</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">673497ccb641605225fbcafe1fe90d80b21fd4b4b4e4c6ac61a54dac41714ad9</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">64b2a9cafc468c7f6d34472286f0673ab731df32e924a089bf9b52af8ea071ab</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">86c197016007e413801e22b14738f52abf6b8a3c64d184c9bd5c02f48f56757f</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">a623f59f7c267d4d5b3a7e69c854420102e0084720a21e5d5279ae99d01a3a19</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">b5b06f4fec76c5f34dc09e606d26861f4b973a5bc0ec79ca35d1dc033abdc033</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">dc1e0c9baaa50b023c88b5b0e1c017e0c828eeca6b7c1e939742cf6a0f76bc9c</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-425.13.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">adce981a2584a2684b53daa6baf31a78d14cd79cccd7ed3518d540b3f157fa29</sum>
        </package>
        <package name="kernel" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="src">
          <filename>kernel-4.18.0-425.13.1.0.1.el8_7.src.rpm</filename>
          <sum type="sha256">769850f8c230dade48027ca32784fd75e75824068b6494bb2ce82da3255eb50e</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="425.13.1.0.1.el8_7" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-425.13.1.0.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">1b727e9e17460973a317edfdc335a8d948fc125ada622d27ac5bc1769d4cbe88</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-1662-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-02-03 00:00:00"/>
    <updated date="2026-02-03 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.100.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.100.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.100.1]
- IB/hfi1: Fix sdma.h tx-&gt;num_descs off-by-one error (Kamal Heib) [RHEL-138396] {CVE-2024-26766}

[4.18.0-553.99.1]
- fbdev: bitblit: bound-check glyph index in bit_putcs* (Jocelyn Falempe) [RHEL-136937] {CVE-2025-40322}
- atm: clip: Fix infinite recursive call of clip_push(). (Guillaume Nault) [RHEL-137591] {CVE-2025-38459}
- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138010] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138010] {CVE-2025-38415}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137362] {CVE-2025-39760}
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137058] {CVE-2025-38024}

[4.18.0-553.98.1]
- vfs: use READ_ONCE() to access -&gt;i_link (Jay Shin) [RHEL-141790]
- fold generic_readlink() into its only caller (Jay Shin) [RHEL-141790]
- fs/proc: fix uaf in proc_readdir_de() (Pavel Reichl) [RHEL-137093] {CVE-2025-40271}
- Backport 'create an empty changelog file when changing its name' (Alexandra Hajkova)
- mptcp: fix race condition in mptcp_schedule_work() (Paolo Abeni) [RHEL-134443] {CVE-2025-40258}
- mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) [RHEL-134443]
- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- tcp: minor optimization in tcp_add_backlog() (Guillaume Nault) [RHEL-137976] {CVE-2022-50865}
- RDMA/core: Fix 'KASAN: slab-use-after-free Read in ib_register_device' problem (Kamal Heib) [RHEL-134347] {CVE-2025-38022}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-1662-1.html" type="self" title="ELBA-2026-1662-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-headers" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2ec9aa6e669602eb4ba2f3ace665165c5c1eca5c4dadd357306c664247d44518</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">16ee4270810d702a06df812bf727605bcc7e8eaa8c5f452571a0f468b53a7ef0</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">433b7cdea90be18f2aed31a16caed25edcb1f32d7661f269303218509632304d</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6926ea014b8edf15a940a651aaad679bf2fd1a2a94250fd38bb28d88e3393ef1</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2930e57660a8d3704c7db3189cbae6770dc1e935ee88bf8dac6aa371bb6d0d9a</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8cea93ae2b32483440f11b2c4275a2f1c5358fe84b7440ae96aef9069799bafe</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">34a9905c568822b29768521ceaddfcdfb10e41e81ee374f9bd4985dfe6858dc2</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.100.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">a206720a853fa2118596b793aa85683a7e32e82dd64362686fc68284dd81b755</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a21340fe6e03e8d1226fb6dffa158ab561e8c35f6dbdc8cdc7201ec100270f6c</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9c6ffb9dae2726694f37427c6e38f20df912adef712c263b7a9871524e164a3b</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b8bad6f5b7838ecb3150a2a39c6a4cc6b3ea8b1a42ed12da87135f8401c496c6</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1bdbfdcf01fbd3bca2022f86e01a791a46e5bea8e944765514bd5691a2e486d4</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.100.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">850628ecc8cf2501c78f388a2213d251cbb25c20fa214d59434ae3950cc45362</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">82efb6424100e352899279411f88729544b42d554def431e70fb8a7c34ae45c8</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">578ee89b9767236a245040b8adb155c451ce5f2f1b546a4ce7d82ce17df93a01</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7177a3df5e0e94bac716d77a690721fafaaf9c1804c8193e844b3285fd26fa55</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d78b82075a3c049441a29723851bd1306030aeff451c9efe8db73dfced956c51</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">55990ca904c3abe8a06fb3f572d8f39068c43156c6ecec2cc351ffb7dbe6e5ba</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">dcae95b58037477703406cdf68c6f0ae394211c3f38731b8d2e62e43824fc0d9</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.100.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1a65d2445057743f4565d2834bee01da4bdf1f945e277ad3f84ac3bbbf6bb0e9</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.100.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.100.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">83a51766babe474c1f0acbc2314b089391635fcec87dd9dbea6d8f42c99c3703</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-3464-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-03-03 00:00:00"/>
    <updated date="2026-03-03 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.109.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.109.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.109.1]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147261] {CVE-2026-23097}

[4.18.0-553.108.1]
- autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-134673]</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-3464-1.html" type="self" title="ELBA-2026-3464-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-tools" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e4c095a2cffad3e4d55aed64104b4ee4071366ff67afd1ca204374cf9e622ad7</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">34347f09e6d08a14a2cb690a0d97e87d7707dbdd309790c4835ec589922de6f1</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d909567c87a257b2b0e7b444e25d917dd8d42b6f969559c9d204ace305632e8b</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f47b80626664e7f407246780fda72a9216c051b3ad5c559b11d787f7d3fe268c</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">33c5792215712d88a0a847db9f69ecae164ca31a438e22c220f1e0eb4e4913b3</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8c962f2ffd97a8531c88d9da04c4e1ba9087b4643a8e990637001b46e2d10b0b</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d5de440503587e38567c92cdc58a3724a9216698d6733b32c66626ee6e748e91</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e92c941e3634b8278f7e7c5469a6e4374dbd65ef300dc3fef3068d7c83c959cb</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e4f0b9622dce6d8a8f7e3d9bdcf533cead16681f14b8dc5aee410a5cfcaec962</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.109.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">1cb06b9bfd0ba607c5edbf7b5d75da564db7099de7da03193334ec47f7d83fa4</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c2942943b5c23f3364448f9a9f224e40b45586927c1e51037ab17d35b6de4b15</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9c32e8c27c7e0fb4599d4ee1be473786862e52ecacb17ffa562b99af495f0086</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">027e7b0033fd88e977e6a0aef9205f16ca7e3c8ca37903365b439882fc17ba36</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a51842d7296480c3cf80a0c954d0340590e070383e67bd4611b93b1d68111bc7</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3785d1eb304764b4949d14025ab8f6f8276b808622a26620a7dc67b7bc6dcacf</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.109.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">59ec58d82d013f239cfa11a78a081fdedf717c8b8a19a202e09f3c0f36dfae0c</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4381df6ed354368998e40ab80a9ceb69f237cc1e2cce96c25db81782b65abe14</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8e98b56020a4d8fc1661f484a8e51b04bae40d970f0b641043721b475f78360d</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">24273b60ca4cc963c0006ee2ec6001cc65d6bb99022d44adf545f24b7f616f4f</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.109.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">693acc733336939b939404c3886015123b735405589bf3b78fd5077606799417</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.109.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.109.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1e89fc10ffe8da9451b0ced8bfdab486d60d8e54ab9681e027863e9631bd6f81</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-13577-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-05-06 00:00:00"/>
    <updated date="2026-05-06 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.123.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.123.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.123.1]
- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187]
- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401}

[4.18.0-553.122.1]
- nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724}
- net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252}
- kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252}

[4.18.0-553.121.1]
- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-13577-1.html" type="self" title="ELBA-2026-13577-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="bpftool" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cb877d97860b9f98049c6065aad256f0cb0490707bbbc971fb608ed28f66ef97</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">abeb324c325552ef8ca5c37ed95c291dfbb3afa44d6a8cd897307d4a4c94ae20</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.123.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">23028cbb42a424e2478e994339b588514c1ea3d32449ac366e82f67557122360</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">93b234012596a1964bb34f871e13146f375f0868190c6c7d97552bad3b5367d8</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">135d07556946280519c4076144fc96d9b10948d570fca3c3d2ff349fd36d512b</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">dca76311130f87050b2f6c7119e6070e037fd48ec21e326aaa00615363f81973</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f59cd52f4d894b523c13ed786fa34e18ee6c4378d847c48c6054fad87d341010</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9fc12646929a25e8cad7abf880ca365e52cd38c96182dd378fa9473e541e9150</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">107adb757cf5f76659066426c7f7e05bddd4bc1d959a885287e3b4cc64cfb097</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">bcdc0252b1a0d4a826c9b2340de579a01e01e30943be0bfc70ddcfb27ef35d4c</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4fed3a2ca247af6e1a01d7057408c2ed77f9296573fa0bb72bcc6a48740ff3c9</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">10618b0386963e07a8949224916798d0f7154abba7251489208fe60f924fa737</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.123.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">92ca42df67bcbdc312813ffaccb968451cd47c75e00a3cb6c952c41ce2bc7881</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">12066975f9fadcd0533520a8439d02a3198230b54b7ebcb704f46bff9a3fbb9a</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">82dbd82a5f15348b148ede3b1ecf602addf70a11a29cc4c85483bfaad632bff1</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.123.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">bd1b0c8f2d65854684df8ea3de7dd55f02e78425b86fb5e871ec36ec45754f64</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cf754bbd0887a66fcd15c6dc6bbeff914af427f6aa4a5fc71f64388ec0489faf</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9d0ada6b0c002348834b3108d380252d58ae21fa6be1d33312a882aa9653f998</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">320c2a8a4b5493dd4780170a674b695cfe6a69524e7a428c141b60eaec0fe8a4</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3898b6a9dd81334c2e5fdf68f82e1fc0c8b0d2e23ebe47ad85da35ae4560667a</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.123.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.123.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b4d00eafa1282affeb13a79ade1c0eaf47f58633ef189f18688b73d1163f3fb6</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2026-3963-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2026-03-10 00:00:00"/>
    <updated date="2026-03-10 00:00:00"/>
    <rights>Copyright 2026 Oracle, Inc.</rights>
    <description>[4.18.0-553.111.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.111.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.111.1]
- macvlan: fix possible UAF in macvlan_forward_source() (Hangbin Liu) [RHEL-144120] {CVE-2026-23001}

[4.18.0-553.110.1]
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-131922]
- fbcon: Avoid using FNTCHARCNT() and hard-coded built-in font charcount (Jocelyn Falempe) [RHEL-148636]
- audit: Use the new {get,put}_fs_pwd_pool() APIs to get/put pwd references (Waiman Long) [RHEL-146026]
- fs: Add a pool of extra fs-&gt;pwd references to fs_struct (Waiman Long) [RHEL-146026]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143535] {CVE-2025-71085}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2026-3963-1.html" type="self" title="ELBA-2026-3963-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-modules" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cda24a7a7b2c299a2c1ecbadaefe5b73e7671e7f5ed285ac4978ccba1671b345</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">336fac82f633fee2f9495bc42f97241275c45de577efa05c3d376ec435c73c04</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7ef9656f493cf143f3c259a65d232dd3c853f66997eeabc23194a0a8aed29eb0</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">52ab068a5e86239ed9b6cf42394617b3f9456d2c8238d921d6f7430f8963e6e2</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b1b4f092296a3bb8602290503f49939ce0973e163236a7630bec73a3a35877cb</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">8d6c34d8860595724c4cfda28ec9ac170feefab44e72b4210cf6c9d720088d0c</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fce9a4052b0be6d431ebda27b92188be3fe308b9b47fae930f096659131dd1f5</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">356d23fc7ced6159692e47558be06edbd72aa1b00068b8edea9309686c8e4e1c</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.111.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">e4450897252f602211d868f6db1c21992d7938035f49f5d6271b768a3a415d64</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">1571009510bd2a74adc773214ae3f7b2a0ae37bb317a4c804225f502a8cab3b1</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">cf0f7d4f55f9f3a7a9553af28935959e9c7e05180e9bd1f02d56aa1cf74c69fa</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c45234db35b4aba9bd35cff2b0156809751a00a53e4b66ac0da57866c7767e7e</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">ad5bdf7e928fd061e2c9ad456f05811a56f30ee6508c81c06922231d67b89939</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c1c03091d2601498442d33018eed8f8878e6942b4d836e89638253de4a85f651</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">0330626c86dc4aaa0e8e75dba75fec036c48efeb6586e369641c7f159cd17a19</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.111.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">940809e2d12737ef36ed7bd568ac179d972938a7d4ad9c70900b3d146e4e95c4</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a9159506fdf64940e3955d7429684238f2ea41d76d38de568620721747b190b6</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">442749d863d786cf0452f4bf1f60f354e0021f803a8177c2abf53e11993e5824</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.111.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">8b903b959db8afc24a4de6cdbaa10a08bf949273ce4527076e6bfa44695e63b4</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d9ca695dfa014119268ba1fb4824782a8f11c95d0e7110e2862d8113c6cde29c</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.111.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.111.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b289fac033d1fcc21f79aa6e7b86cf81f21abb2d64e024f43a056a90fc259b71</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-11298-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-07-17 00:00:00"/>
    <updated date="2025-07-17 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>- [4.18.0-553.62.1.0.1.el8_10.OL8]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

- [4.18.0-553.62.1.el8_10.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.62.1.el8_10]
- s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557]
- mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410]
- driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410]
- driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410]
- Revert 'drivers: core: synchronize really_probe() and dev_uevent()' (Mark Langsdorf) [RHEL-84410]
- cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410]
- cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410]
- cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410]
- cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410]
- file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410]
- cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410]
- cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410]
- cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410]
- locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410]
- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788}
- media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Propagate buf-&gt;error to userspace (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002}
- media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760]
- media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980}
- cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058}
- Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723]
- fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578]
- fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578]
- mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578]

[4.18.0-553.61.1.el8_10]
- s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409]
- ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738}
- ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150}
- net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004}
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-11298-1.html" type="self" title="ELBA-2025-11298-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2c11d98667330f4cfa1aa496235ec685bf2440c0b1ca91d40d15af3ee0808194</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">6728caf89dee55cfb075215e75a62f1a9b1695b24ed6f5bd796ae9a07df19bcc</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a6cf0c0e5562f81f3861edc332db75b5e124ae25f2312535e587186e275364d7</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7ac113e9d8a251bad71b3497829b0bea50cd84dde4259b3a7a871f2d8846ee6a</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.62.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">697b75a8af87e14e24ec07aa30ec90d43471fb524916ca0237bf1440e368f332</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">86aca2f4a1764124916e0d0f0eeed8b6cc8ad56906b99f4815478c832400d5ed</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a8f14dbee48b045ec74d075c0061f5cd348f8b99bfa197a55f31c9a8cc4c3f70</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">110f7bb6da0c4efd1b21c7420d8b39ed3327e68d89256628a95e1854c03ec984</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9a03b433989b19b699d456102c44150f21cfb999a7cf57a9081b56b62a346bbc</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.62.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">97a6c149b62a338e9b24319420a262500fb0ebfc1795ff87778dfc41c0520aac</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">98a87ff308f4fa7ce4cb7064a73c98c7b9e8e8f2f0b3e5c7268aebe936a0aaeb</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">2e0589b1c63f1dc4ebd1ac2914fdf5ec55708c20872dfad4435211b74aa7d170</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d9a35f3a161dabd8bcf1b488aeec675d5550e8ddccc6bf0193f079e9df600748</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.62.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">5ac7d374556dff4aa920f3252bb5f2fb3dca214e51ef61a77ed05911d1f175d4</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">03606fd3ba74f079e81c69c5e8e53c17f125badf4977636e9c14d70bb3c162bf</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5f4aacb4ded4bc1de76e8214af1ebaa1c6e944d37cb89e02ee2e8aace64b23db</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4d06f89fb1c9f454ceed628fb50bb8863c10b1afc3125072e83e7b08402aacb6</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">be2e8eebc0843c7a6254ba59ef8d50ebf5a715355bd7ec677324cc61f92d80aa</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9f2e707f0cc0e92893425e4effcbb31f94e06a5891f6b19edfc06c4e3a7e086f</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fdd27cd0bc203b56e7302d9e6e53511639eaa245bc37262255dd02c5f1aadb28</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.62.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.62.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">eee5863b5ba6aa8e6e949031d4ed3a813249ff2110c8e752cbdb849b2d3e3fc4</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2025-19447-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2025-11-06 00:00:00"/>
    <updated date="2025-11-06 00:00:00"/>
    <rights>Copyright 2025 Oracle, Inc.</rights>
    <description>[4.18.0-553.82.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.82.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.82.1]
- smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431]
- cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546]
- cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546]
- cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546]
- smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999}
- smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244}
- cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546]
- smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725}
- smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179}
- smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870}
- cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546]
- cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546]
- cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546]
- cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546]
- cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546]
- cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546]
- cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546]
- cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546]
- cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546]
- cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546]
- smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752}
- cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546]
- cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546]
- cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546]
- cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546]
- cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546]
- cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546]
- cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546]
- cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546]
- cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
- cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546]
- cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546]
- cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546]
- cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
- cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546]
- cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
- cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546]
- cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546]
- cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546]
- cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546]
- cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546]
- cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546]
- cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546]
- cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546]
- cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546]
- cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546]
- cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546]
- cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546]
- cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
- cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546]
- cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546]
- cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546]
- cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546]
- cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546]
- cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546]
- cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546]
- cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546]
- cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546]
- smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546]
- cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546]
- smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546]
- smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546]
- cifs: return correct error in -&gt;calc_signature() (Paulo Alcantara) [RHEL-109546]
- cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546]
- cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938}
- cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546]
- cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546]
- smb3: limit noisy error (Paulo Alcantara) [RHEL-109546]
- cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546]
- cifs: remove 'cifs_' prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546]
- cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546]
- cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546]
- cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546]
- cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546]
- cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546]
- cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546]
- cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546]
- cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546]
- smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546]
- cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546]
- cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546]
- cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546]
- cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546]
- cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546]
- cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546]
- cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546]
- cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546]
- cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546]
- cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546]
- cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546]
- cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546]
- cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546]
- cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546]
- cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546]
- cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546]
- cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546]
- cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546]
- cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546]
- smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546]
- cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546]
- smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546]
- cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546]
- cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546]
- cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546]
- cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546]
- cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546]
- cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546]
- cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546]
- cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546]
- cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546]
- cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546]
- cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546]
- cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546]
- cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546]
- cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546]
- cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546]
- cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546]
- cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546]
- cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546]
- cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546]
- cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546]
- cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546]
- cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546]
- cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546]
- cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546]
- veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515]
- net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515]
- gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461]
- gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461]
- gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461]
- gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461]
- gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461]
- gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461]
- gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461]
- gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461]
- mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391]
- kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391]
- Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391]
- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864}
- ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745]
- ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745]
- ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745]
- ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745]
- ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745]
- ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745]
- wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257}
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}
- wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}
- wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2025-19447-1.html" type="self" title="ELBA-2025-19447-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-modules-extra" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">f757a2ab2e7aea7d8b6ccca0c886b2ae720f10a63936184574c0bedd2db9cbf8</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">7cc6f9e003c7a649f437826d1a10c8ee501f6ae53f473f3fb5746c82aab4f73f</sum>
        </package>
        <package name="perf" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">5b9c2ebbc0f84cf20e345720d05e8cbf819cd10a869f9b058ad6b31fc957474f</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">4b97a21ab96d9d1a50f11f7aa837e1fd0580ae53334ac39ae8188158cd61886e</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-553.82.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">541280a6a94fee5ca78bb480e4d0d4a926dc365526a2a69c2920fd5394507c31</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">e99751d5304985679f75124a9d231060ff1a46ffc5caa66dee8ff82cb0101bd4</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">fd2e5de206e95327f4a0ce6fd3a518a92f306a99ccc8f2a1fe54af5c5c1bb010</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">43f29d0e78d09dfff59d8c36e40405bf33e416739eff87e977bb2deb6542c0b9</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c4ffd546bdc6ce6893ad04196b915f6a580156ca94ab9f43d53f261c4b68dde7</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c9be75fd310b1c4c118ea6f2cfb4d4137b3945ac6ac91c65490fca62aede57d1</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">89ee9f14a923e7ff0feb67e009f2080587e12c2bddc79cf300b4ebf56c8a6bfd</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">b7cadcbe873074e4e44fd3ed88cfc2c0ebfa00e2d98af938d2a21bddee58d566</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">c93b8fba6578c6674dacb5ca441850ea997a9e29413a8e5ffb705ce7a7a9751e</sum>
        </package>
        <package name="kernel" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="src">
          <filename>kernel-4.18.0-553.82.1.0.1.el8_10.src.rpm</filename>
          <sum type="sha256">086e9eebb3104897fbaaec24f40fdee50aba950700fc38ceb449d1cab9c9078c</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">3c57454ba4d4e844719cf7dcb364021266f9e421d05d26238087ca6b1b9f58ea</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">d7dc36ef5c685b8927e11642f64a3262717f8256fc80dadedc524aa6641c0a2f</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">642016b50113e316613228eee425b0f2b163ad214f971bbdf7f3cc56a0a996a1</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">a1e2456bca586e093e8cb55913b28aa7a6a7a6366b192ebe9396dd551e9ae6fd</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-553.82.1.0.1.el8_10.noarch.rpm</filename>
          <sum type="sha256">3f8e0472847bdd57cf02182421a1be1d5f09643a00c8fb6c1bc08ab71c8bad9d</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">9ca6d9f898d3fe0d58b2def8c2df04a6d12f94df46f15c4f1aad25e2b61b5b31</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="553.82.1.0.1.el8_10" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-553.82.1.0.1.el8_10.x86_64.rpm</filename>
          <sum type="sha256">edcd53506ffc99f2afb51704e1905ef8ffcb4f174267e13691cb992225e13792</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2022-5564-1</id>
    <title> kernel bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2022-07-18 00:00:00"/>
    <updated date="2022-07-18 00:00:00"/>
    <rights>Copyright 2022 Oracle, Inc.</rights>
    <description>[4.18.0-372.16.1.0.2.el8_6.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2022-5564-1.html" type="self" title="ELBA-2022-5564-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-devel" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">c879a86c5808c423b4665d9838006e0e0e42e9349e85f7a0ec0c6bdb375f2275</sum>
        </package>
        <package name="perf" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">59719077f4756741ea9992c38bc4036dd11674c4ba4b0f77a18673252b59218d</sum>
        </package>
        <package name="kernel-modules-extra" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">1a8a9c0cad9f1e2ab4b20eb59e23a55518275aba6ffd1f931ff308022e2765d6</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="src">
          <filename>kernel-4.18.0-372.16.1.0.2.el8_6.src.rpm</filename>
          <sum type="sha256">02ff1b22b324768fdad407e50572763f557162945d680a80d2c3851b6158297f</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-372.16.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">086cc61fba7fec11456863059bf4283ee09c99a7ffeaf3a7ac1ef99de0ae38c2</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">2d3a0e797df16f2ebc65d7218b1e8c369780ee3e699e669322ddb137c24f85e0</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">ddc01c9903df9d76774920ba481e0262e19ff499404329d374c1d3e0642eed0e</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">3a52ef099c73d7133a2415927cac5f6d10c5c4a3dc9d41048330f65c376bd8a7</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">bb8a2a5e550c51e45672ff9dadba60184a81768c60a15b425d706b4d90cb8975</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">8604668603926b52d23cf932f66d387465ff677c4402c42a3cca179c1760f219</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">72bb3e1447a1000f00e1a45bfc8b603484979be89815eb808504e7fbdd0755f0</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">7466cc69647b7cce95c10918185f9316172f4d8a981973eb3a9e8c0a69b344ea</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">82ed387c39e6a988487d341406bfcdd011c5ed3bdd0a323435250aed4aae3592</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">0c9bcef462434aeab0183b1ac2d3bea758ed0404182045d8aaa7a31a65a86883</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">b4eb2bed6a294f491336b203d1c35c87222a916165b8dacedb908c668c99c8f4</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">a574227bca064374e5865088d6b9ad1c225c8aea16511107142c6e0c1c7176c0</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">c1e6fcb650004a948e75f61fb222e3d54adc6f474b180b8038e3bf4eb954bd00</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-372.16.1.0.2.el8_6.noarch.rpm</filename>
          <sum type="sha256">a53032f0148aa5755749292e4f1c0e49bc6959d918cdacd6122b2c2d45d8f9c2</sum>
        </package>
        <package name="kernel" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">cb702eb05f6509965f51e282f8dc02c37d4f5cb6588a3363d3c5094c202276dd</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">bc6bba0aa4f8971a29d38d333fdf6bd37bb30eeeba7a00f2f2501f3ec97f6797</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="372.16.1.0.2.el8_6" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-372.16.1.0.2.el8_6.x86_64.rpm</filename>
          <sum type="sha256">f0170ff3930e98c2651188227571be5dc849e2e756c0aeb812fc1af08b254b65</sum>
        </package>
      </collection>
    </pkglist>
  </update>
  <update status="final" type="bugfix" version="1" from="el-errata@oss.oracle.com">
    <id>ELBA-2023-0101-1</id>
    <title>kernel and bug fix update</title>
    <release>Oracle Linux 8</release>
    <issued date="2023-01-25 00:00:00"/>
    <updated date="2023-01-25 00:00:00"/>
    <rights>Copyright 2023 Oracle, Inc.</rights>
    <description>[4.18.0-425.10.1.0.1.el8.OL8]
- mei: me: disable driver on the ign firmware (Alexander Usyskin) [Orabug: 34176425]

[4.18.0-425.10.1.el8.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 &lt;= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
</description>
    <solution>This update is available via the Unbreakable Linux Network (ULN) and the Oracle Public Yum Server. Details on how to use ULN or http://public-yum.oracle.com to apply this update are available at http://linux.oracle.com/applying_updates.html.</solution>
    <references>
      <reference href="https://linux.oracle.com/errata/ELBA-2023-0101-1.html" type="self" title="ELBA-2023-0101-1" />
    </references>
    <pkglist>
      
      <collection short="ol8_x86_64_MODRHCK">
        <name>ol8_x86_64_MODRHCK</name>
        <package name="kernel-modules-extra" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-modules-extra-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">6df81a41ce73e74b42fffc97ae830f6e1dd2947c2c514b497465be0496872d63</sum>
        </package>
        <package name="kernel" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">0e490917df73f7fdef2affc510aa53ada4991c050b2876504f1453765e124b1f</sum>
        </package>
        <package name="kernel-debug" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">420ac478e8136fd92b1de023def09db3d99c9965e2865f36b64dfa8a83f69cf5</sum>
        </package>
        <package name="kernel" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="src">
          <filename>kernel-4.18.0-425.10.1.0.1.el8_7.src.rpm</filename>
          <sum type="sha256">955181d68ce9e18982a9aa5cc8fa108b3116ba1fcd93562dcbfcf84fd8431c54</sum>
        </package>
        <package name="kernel-tools" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">b0d915c7c1c594985e9e96147c596cb0929ebff99a3c9b97ecce6123d69ec615</sum>
        </package>
        <package name="kernel-debug-devel" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-devel-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">05d1723a08901c79ea2cf3495c077ea459aadb9bab56bafcc7ccddfe43a4a029</sum>
        </package>
        <package name="bpftool" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>bpftool-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">036261dc704083a98e121807287927647a7f68b6539758a1a22cb748a10358d6</sum>
        </package>
        <package name="kernel-abi-stablelists" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="noarch">
          <filename>kernel-abi-stablelists-4.18.0-425.10.1.0.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">dd6e28f33be326e4ecb1791b9cb99ef791ddfba4fc5f895961d1ff334904a2aa</sum>
        </package>
        <package name="kernel-core" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-core-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">1163b1e12384b157e47a0b8166bba9e6dac32d9c97cafc335d77bbb6009f6811</sum>
        </package>
        <package name="kernel-tools-libs-devel" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-devel-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">608d8bb3eed4fba829500dfcac1b95c5eeff9474f27d14493a9e1146107412b3</sum>
        </package>
        <package name="kernel-modules" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-modules-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">a9ff1ef54507b32a4b1ab3739707e920694a5e45c123d904a23a8d6da8c04b1a</sum>
        </package>
        <package name="kernel-debug-modules-extra" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-extra-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">8bddbd4800079ca2b61da74c60a722161106eb5f3413c0b1b3a76d4d2726f878</sum>
        </package>
        <package name="kernel-devel" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-devel-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">d85708447be14bf73bcc8a735e58d6861ef60fdb292d146529e54258c7d5d895</sum>
        </package>
        <package name="kernel-debug-core" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-core-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">d05ae32044a5320ffed22eca00ab2fb3ac8fecaaa3517f6869118c11e76ea107</sum>
        </package>
        <package name="perf" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>perf-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">9e7e8099787bb52dce0315ea911d011ed3b5028ba821718f309fa9a2ef5cdd32</sum>
        </package>
        <package name="kernel-headers" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-headers-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">29e91c2efe9e827cd29edf8278e96b31b4cf627c745e16b26c3d7862af31e072</sum>
        </package>
        <package name="python3-perf" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>python3-perf-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">b987324b328596f36b3b48d73b5d12db55e4eeb3c8dd0bd78a478183ae3ca2cb</sum>
        </package>
        <package name="kernel-cross-headers" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-cross-headers-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">a9525ac26028edc7bac933c2e8b37a81eefc9ff8f67f83c4a0e09fefbaf22763</sum>
        </package>
        <package name="kernel-tools-libs" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-tools-libs-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">cbd9646572b559c46b93e0a2215a4df7fe18fd94945281f29ca059f3c0261328</sum>
        </package>
        <package name="kernel-doc" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="noarch">
          <filename>kernel-doc-4.18.0-425.10.1.0.1.el8_7.noarch.rpm</filename>
          <sum type="sha256">b2479a8eaa6c5a58985f32f49d7c83909fe4869f2e581f4362ecc8549ff17399</sum>
        </package>
        <package name="kernel-debug-modules" version="4.18.0" release="425.10.1.0.1.el8_7" epoch="0" arch="x86_64">
          <filename>kernel-debug-modules-4.18.0-425.10.1.0.1.el8_7.x86_64.rpm</filename>
          <sum type="sha256">036fc9e41c1aec41ef35f51e1477a503b2fd93b84f9d1ae53a351304d033f034</sum>
        </package>
      </collection>
    </pkglist>
  </update>
</updates>