elsa-2026-9131

{
  "cves": [
    "CVE-2025-68741",
    "CVE-2026-23191"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[4.18.0-553.120.1]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15.3-1.0.3\n- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652]\n- Add new Oracle Linux Driver Signing (key 1) certificate [Orabug: 37985772]\n\n[4.18.0-553.120.1]\n- gfs2: bufdata allocation race (Andreas Gruenbacher) [RHEL-160075]\n- gfs2: Get rid of gfs2_log_[un]lock helpers (Andreas Gruenbacher) [RHEL-160075]\n- gfs2: Avoid unnecessary transactions in evict_linked_inode (Andreas Gruenbacher) [RHEL-160075]\n- KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-152657]\n- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-152657]\n\n[4.18.0-553.119.1]\n- s390/dasd: Copy detected format information to secondary device (Mete Durlu) [RHEL-161532]\n- s390/dasd: Move quiesce state with pprc swap (Mete Durlu) [RHEL-161532]\n- s390/dasd: Fix gendisk parent after copy pair swap (Mete Durlu) [RHEL-161532]\n- redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela) [RHEL-152417]\n- s390/virtio_ccw: Fix dma_parm pointer not set up (CKI Backport Bot) [RHEL-148307]\n- dlm: fix recovery pending middle conversion (Alexander Aring) [RHEL-125538]\n- dlm: check for undefined release_option values (Alexander Aring) [RHEL-136236]\n- dlm: handle release_option as unsigned (Alexander Aring) [RHEL-136236]\n- dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-136236]\n- dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-136236]\n- dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-136236]\n- dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-136236]\n- dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-136236]\n- dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-136236]\n- dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-136236]\n- dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-136236] {CVE-2025-23131}\n- dlm: Switch to using wait_event() (Alexander Aring) [RHEL-136236]\n\n[4.18.0-553.118.1]\n- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159219] {CVE-2025-68741}\n- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150125] {CVE-2026-23191}\n- ALSA: aloop: Introduce a function to get if access is interleaved mode (CKI Backport Bot) [RHEL-150125] {CVE-2026-23191}",
  "id": "ELSA-2026-9131",
  "ovalId": "oval:com.oracle.elsa:def:20269131",
  "source": "oracle_linux",
  "title": "ELSA-2026-9131:  kernel security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-9131.html"
}