Описание
ELSA-2026-27811: kernel security update (IMPORTANT)
[4.18.0-553.137.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]
[4.18.0-553.137.1]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179435]
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179435] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179435]
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179435]
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179435]
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179435]
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179435]
- fs: use backing_file container for internal files with 'fake' f_path (Ondrej Mosnacek) [RHEL-179435]
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179435]
- ovl: pass layer mnt to ovl_open_realfile() (Ondrej Mosnacek) [RHEL-179435]
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
kernel-tools-libs-devel
4.18.0-553.137.1.el8_10
bpftool
4.18.0-553.137.1.el8_10
kernel-cross-headers
4.18.0-553.137.1.el8_10
kernel-headers
4.18.0-553.137.1.el8_10
kernel-tools
4.18.0-553.137.1.el8_10
kernel-tools-libs
4.18.0-553.137.1.el8_10
perf
4.18.0-553.137.1.el8_10
python3-perf
4.18.0-553.137.1.el8_10
Oracle Linux x86_64
kernel-tools-libs-devel
4.18.0-553.137.1.el8_10
bpftool
4.18.0-553.137.1.el8_10
kernel-debug
4.18.0-553.137.1.el8_10
python3-perf
4.18.0-553.137.1.el8_10
kernel
4.18.0-553.137.1.el8_10
kernel-abi-stablelists
4.18.0-553.137.1.el8_10
kernel-core
4.18.0-553.137.1.el8_10
kernel-cross-headers
4.18.0-553.137.1.el8_10
kernel-debug-core
4.18.0-553.137.1.el8_10
kernel-debug-devel
4.18.0-553.137.1.el8_10
kernel-debug-modules
4.18.0-553.137.1.el8_10
kernel-debug-modules-extra
4.18.0-553.137.1.el8_10
kernel-devel
4.18.0-553.137.1.el8_10
kernel-doc
4.18.0-553.137.1.el8_10
kernel-headers
4.18.0-553.137.1.el8_10
kernel-modules
4.18.0-553.137.1.el8_10
kernel-modules-extra
4.18.0-553.137.1.el8_10
kernel-tools
4.18.0-553.137.1.el8_10
kernel-tools-libs
4.18.0-553.137.1.el8_10
perf
4.18.0-553.137.1.el8_10
Связанные CVE
Связанные уязвимости
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "user" file) and the mounter's credentials are sufficient to access the lower level file (the "backing" file). Unfortunately, the current code does not properly enforce these access controls for both mmap() and mprotect() operations on overlayfs filesystems. This patch makes use of the newly created security_mmap_backing_file() LSM hook to provide the missing backing file enforcement for mmap() operations, and leverages the backing file API and new LSM blob to provide the necessary information to properly enforce the mprotect() access controls.
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "user" file) and the mounter's credentials are sufficient to access the lower level file (the "backing" file). Unfortunately, the current code does not properly enforce these access controls for both mmap() and mprotect() operations on overlayfs filesystems. This patch makes use of the newly created security_mmap_backing_file() LSM hook to provide the missing backing file enforcement for mmap() operations, and leverages the backing file API and new LSM blob to provide the necessary information to properly enforce the mprotect() access controls.
In the Linux kernel, the following vulnerability has been resolved: selinux: fix overlayfs mmap() and mprotect() access checks The existing SELinux security model for overlayfs is to allow access if the current task is able to access the top level file (the "user" file) and the mounter's credentials are sufficient to access the lower level file (the "backing" file). Unfortunately, the current code does not properly enforce these access controls for both mmap() and mprotect() operations on overlayfs filesystems. This patch makes use of the newly created security_mmap_backing_file() LSM hook to provide the missing backing file enforcement for mmap() operations, and leverages the backing file API and new LSM blob to provide the necessary information to properly enforce the mprotect() access controls.
In the Linux kernel, the following vulnerability has been resolved: s ...