elsa-2026-13577

{
  "cves": [
    "CVE-2024-41073",
    "CVE-2025-40252",
    "CVE-2025-68724",
    "CVE-2026-23401",
    "CVE-2026-31402",
    "CVE-2026-31431"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[4.18.0-553.123.1]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.3\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]\n\n[4.18.0-553.123.1]\n- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172187]\n- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172187]\n- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172187]\n- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172187]\n- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172187] {CVE-2026-31431}\n- crypto: authencesn - reject too-short AAD (assoclen8) to match ESP/ESN spec (Herbert Xu) [RHEL-172187] {CVE-2026-23060}\n- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172187]\n- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172187] {CVE-2026-31677}\n- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172187] {CVE-2026-31431}\n- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172187]\n- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153727] {CVE-2026-23401}\n\n[4.18.0-553.122.1]\n- nvme: avoid double free special payload (Maurizio Lombardi) [RHEL-51303] {CVE-2024-41073}\n- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166921] {CVE-2025-68724}\n- net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Jay Shin) [RHEL-166155] {CVE-2025-40252}\n- kernel.h: Move ARRAY_SIZE() to a separate header (Jay Shin) [RHEL-166155] {CVE-2025-40252}\n\n[4.18.0-553.121.1]\n- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167011] {CVE-2026-31402}",
  "id": "ELSA-2026-13577",
  "ovalId": "oval:com.oracle.elsa:def:202613577",
  "source": "oracle_linux",
  "title": "ELSA-2026-13577:  kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-13577.html"
}