[El-errata] ELSA-2026-39083 Important: Oracle Linux 8 kernel update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-39083

http://linux.oracle.com/errata/ELSA-2026-39083.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-abi-stablelists-4.18.0-553.143.1.el8_10.noarch.rpm
kernel-core-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-cross-headers-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-debug-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-debug-core-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-debug-devel-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-debug-modules-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-debug-modules-extra-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-devel-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-doc-4.18.0-553.143.1.el8_10.noarch.rpm
kernel-headers-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-modules-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-modules-extra-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-tools-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-tools-libs-4.18.0-553.143.1.el8_10.x86_64.rpm
kernel-tools-libs-devel-4.18.0-553.143.1.el8_10.x86_64.rpm
perf-4.18.0-553.143.1.el8_10.x86_64.rpm
python3-perf-4.18.0-553.143.1.el8_10.x86_64.rpm

aarch64:
bpftool-4.18.0-553.143.1.el8_10.aarch64.rpm
kernel-cross-headers-4.18.0-553.143.1.el8_10.aarch64.rpm
kernel-headers-4.18.0-553.143.1.el8_10.aarch64.rpm
kernel-tools-4.18.0-553.143.1.el8_10.aarch64.rpm
kernel-tools-libs-4.18.0-553.143.1.el8_10.aarch64.rpm
kernel-tools-libs-devel-4.18.0-553.143.1.el8_10.aarch64.rpm
perf-4.18.0-553.143.1.el8_10.aarch64.rpm
python3-perf-4.18.0-553.143.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-553.143.1.el8_10.src.rpm

Related CVEs:

CVE-2025-71066
CVE-2025-71089
CVE-2026-31411
CVE-2026-43499
CVE-2026-46113
CVE-2026-53166
CVE-2026-53266
CVE-2026-53359




Description of changes:

[4.18.0-553.143.1]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]
- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]

[4.18.0-553.143.1]
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193334] {CVE-2026-53166}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193143] {CVE-2026-43499}

[4.18.0-553.142.1]
- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192411] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (Aidan Wallace) [RHEL-186618] {CVE-2026-46113}
- KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() (Paolo Bonzini) [RHEL-186618]
- KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Derive shadow MMU page role from parent (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() (Aidan Wallace) [RHEL-186618]
- KVM: x86/mmu: Use a bool for direct (Aidan Wallace) [RHEL-186618]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182341]
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-182996] {CVE-2025-71066}
- iommu/vt-d: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/amd: track SVA mm for kernel page table flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- iommu/vt-d: Fix incorrect cache invalidation for mm notification (Jerry Snitselaar) [RHEL-150534] {CVE-2025-71089}
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167045] {CVE-2026-31411}