[El-errata] ELBA-2025-22388-1 Oracle Linux 8 kernel bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2025-22388-1

http://linux.oracle.com/errata/ELBA-2025-22388-1.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.87.1.0.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.87.1.0.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
perf-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.87.1.0.1.el8_10.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.87.1.0.1.el8_10.src.rpm



Description of changes:

[4.18.0-553.87.1.0.1]
- scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) [Orabug: 37778230]

[4.18.0-553.87.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.87.1]
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664]
- tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955}
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883}

[4.18.0-553.86.1]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825}
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237]
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898}
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724}
- nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513}
- arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921]
- perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921]
- perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921]
- tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921]
- powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921]
- powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921]
- powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921]