ELSA-2026-50978

Опубликовано: 06 авг. 2026

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2026-50978: kernel security, bug fix, and enhancement update (IMPORTANT)

[4.18.0-553.153.1]

Update Oracle Linux certificates (Kevin Lyons)
Disable signing for aarch64 (Ilya Okomin)
Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
Update x509.genkey [Orabug: 24817676]
Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.153.1]

scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-188270]
scsi: storvsc: Process unsupported MODE_SENSE_10 (Vitaly Kuznetsov) [RHEL-188270]
x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188786] {CVE-2025-54518}

[4.18.0-553.152.1]

gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214099]
bpf: Fix combination of jit blinding and pointers to bpf subprogs. (Viktor Malik) [RHEL-191844]

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

kernel-tools-libs-devel

4.18.0-553.153.1.el8_10

bpftool

4.18.0-553.153.1.el8_10

kernel-cross-headers

4.18.0-553.153.1.el8_10

kernel-headers

4.18.0-553.153.1.el8_10

kernel-tools

4.18.0-553.153.1.el8_10

kernel-tools-libs

4.18.0-553.153.1.el8_10

perf

4.18.0-553.153.1.el8_10

python3-perf

4.18.0-553.153.1.el8_10

Oracle Linux x86_64

kernel-tools-libs-devel

4.18.0-553.153.1.el8_10

bpftool

4.18.0-553.153.1.el8_10

kernel

4.18.0-553.153.1.el8_10

kernel-abi-stablelists

4.18.0-553.153.1.el8_10

kernel-core

4.18.0-553.153.1.el8_10

kernel-cross-headers

4.18.0-553.153.1.el8_10

kernel-debug

4.18.0-553.153.1.el8_10

kernel-debug-core

4.18.0-553.153.1.el8_10

kernel-debug-devel

4.18.0-553.153.1.el8_10

kernel-debug-modules

4.18.0-553.153.1.el8_10

kernel-debug-modules-extra

4.18.0-553.153.1.el8_10

kernel-devel

4.18.0-553.153.1.el8_10

kernel-doc

4.18.0-553.153.1.el8_10

kernel-headers

4.18.0-553.153.1.el8_10

kernel-modules

4.18.0-553.153.1.el8_10

kernel-modules-extra

4.18.0-553.153.1.el8_10

kernel-tools

4.18.0-553.153.1.el8_10

kernel-tools-libs

4.18.0-553.153.1.el8_10

perf

4.18.0-553.153.1.el8_10

python3-perf

4.18.0-553.153.1.el8_10

Связанные CVE

CVE-2025-54518

Ссылки на источники

Связанные уязвимости

CVE-2025-54518

CVSS3: 7

ubuntu

5 месяцев назад

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.