{"cves":["CVE-2024-26984","CVE-2025-71238","CVE-2026-23193","CVE-2026-23231"],"cvss":0.0,"database_specific":{"severity":"MODERATE"},"description":"[4.18.0-553.117.1]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.3\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]\n\n[4.18.0-553.117.1]\n- nvme-pci: do not directly handle subsys reset fallout (Maurizio Lombardi) [RHEL-136436]\n- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150417] {CVE-2026-23193}\n\n[4.18.0-553.116.1]\n- nouveau: fix instmem race condition around ptr stores (Lyude Paul) [RHEL-111846] {CVE-2024-26984}\n- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mete Durlu) [RHEL-157930]\n- NFSv4/flexfiles: Fix layout merge mirror check. (Mike Snitzer) [RHEL-157242]\n- flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Mike Snitzer) [RHEL-157242]\n- pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer) [RHEL-157242]\n- pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Mike Snitzer) [RHEL-157242]\n- NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Mike Snitzer) [RHEL-157242]\n- flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes (Mike Snitzer) [RHEL-157242]\n- pNFS/flexfiles: Record the RPC errors in the I/O tracepoints (Mike Snitzer) [RHEL-157242]\n- NFSv4/pnfs: Layoutreturn on close must handle fatal networking errors (Mike Snitzer) [RHEL-157242]\n- NFSv4: Handle fatal ENETDOWN and ENETUNREACH errors (Mike Snitzer) [RHEL-157242]\n- pNFS/flexfiles: Report ENETDOWN as a connection error (Mike Snitzer) [RHEL-157242]\n- pNFS/flexfiles: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242]\n- NFS: Treat ENETUNREACH errors as fatal in containers (Mike Snitzer) [RHEL-157242]\n- NFS: Add a mount option to make ENETUNREACH errors fatal (Mike Snitzer) [RHEL-157242]\n- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Mike Snitzer) [RHEL-157242]\n- SUNRPC: ECONNRESET might require a rebind (Mike Snitzer) [RHEL-157242]\n- NFS/pNFS: Set the connect timeout for the pNFS flexfiles driver (Mike Snitzer) [RHEL-157242]\n- SUNRPC: Don't override connect timeouts in rpc_clnt_add_xprt() (Mike Snitzer) [RHEL-157242]\n- SUNRPC: Allow specification of TCP client connect timeout at setup (Mike Snitzer) [RHEL-157242]\n- SUNRPC: Refactor and simplify connect timeout (Mike Snitzer) [RHEL-157242]\n- SUNRPC: Set the TCP_SYNCNT to match the socket timeout (Mike Snitzer) [RHEL-157242]\n- NFS: discard NFS_RPC_SWAPFLAGS and RPC_TASK_ROOTCREDS (Mike Snitzer) [RHEL-157242]\n- NFS: O_DIRECT writes must check and adjust the file length (Mike Snitzer) [RHEL-156419]\n- nfs: properly protect nfs_direct_req fields (Mike Snitzer) [RHEL-156419]\n- pNFS: Fix the pnfs block driver's calculation of layoutget size (Mike Snitzer) [RHEL-156419]\n- NFS: More fixes for nfs_direct_write_reschedule_io() (Mike Snitzer) [RHEL-156419]\n- NFS: Use the correct commit info in nfs_join_page_group() (Mike Snitzer) [RHEL-156419]\n- NFS: More O_DIRECT accounting fixes for error paths (Mike Snitzer) [RHEL-156419]\n- NFS: Fix O_DIRECT locking issues (Mike Snitzer) [RHEL-156419]\n- NFS: Fix error handling for O_DIRECT write scheduling (Mike Snitzer) [RHEL-156419]\n- NFS: Fix a potential data corruption (Mike Snitzer) [RHEL-156419]\n- NFS: Fix a use after free in nfs_direct_join_group() (Mike Snitzer) [RHEL-156419]\n- NFS: Clean up O_DIRECT request allocation (Mike Snitzer) [RHEL-156419]\n- NFS: add nfs_page_create and nfs_page_assign_page as backport prereq (Mike Snitzer) [RHEL-156419]\n- nfs: only issue commit in DIO codepath if we have uncommitted data (Mike Snitzer) [RHEL-156419]\n- nfs: always check dreq-error after a commit (Mike Snitzer) [RHEL-156419]\n- nfs: add new nfs_direct_req tracepoint events (Mike Snitzer) [RHEL-156419]\n- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153405] {CVE-2025-71238}\n- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (Florian Westphal) [RHEL-153264] {CVE-2026-23231}\n- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-123942]","id":"ELSA-2026-6571","ovalId":"oval:com.oracle.elsa:def:20266571","source":"oracle_linux","title":"ELSA-2026-6571:  kernel security update (MODERATE)","url":"https://linux.oracle.com/errata/ELSA-2026-6571.html"}