elsa-2025-3893

{
  "cves": [
    "CVE-2024-53241",
    "CVE-2024-53150"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "MODERATE"
  },
  "description": "[4.18.0-553.50.1_10.OL8]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.3\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]\n\n[4.18.0-553.50.1_10]\n- perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119]\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150}\n- scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052]\n- ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852]\n- ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852]\n- ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852]\n\n[4.18.0-553.49.1_10]\n- net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244]\n- redhat: drop Y issues from changelog (Jan Stancek)\n- md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673]\n- md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673]\n- md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673]\n- md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673]\n- md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673]\n- raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499]\n- x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241}\n- x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241}\n\n[4.18.0-553.48.1_10]\n- rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves)\n- gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208]\n- gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208]\n- gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208]\n- gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208]\n- gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208]",
  "id": "ELSA-2025-3893",
  "ovalId": "oval:com.oracle.elsa:def:20253893",
  "source": "oracle_linux",
  "title": "ELSA-2025-3893:  kernel security update (MODERATE)",
  "url": "https://linux.oracle.com/errata/ELSA-2025-3893.html"
}