{"cves":["CVE-2022-49985","CVE-2025-38352"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[4.18.0-553.74.1_10.OL8]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.3\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]\n\n[4.18.0-553.74.1_10]\n- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352}\n\n[4.18.0-553.73.1_10]\n- ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360]\n- ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360]\n- s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234]\n- bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985}\n- s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208]","id":"ELSA-2025-15471","ovalId":"oval:com.oracle.elsa:def:202515471","source":"oracle_linux","title":"ELSA-2025-15471:  kernel security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2025-15471.html"}