Back Linuxsecurity

Oracle 8 Kernel Important Bug Fix Advisory ELSA-2026-66325

Linuxsecurity •LinuxSecurity Advisories • September 14, 2026

Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×

[4.18.0-553.162.1] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 sk on the failed-insert path in tipc_sk_create() (Xin Long) [RHEL-238050] {CVE-2026-68117} - sctp: fix race between sctp_wait_for_connect and peeloff (Xin Long) [RHEL-229464] {CVE-2026-63971} - sctp: diag: reject stale associations in dump_one path (Xin Long) [RHEL-231561] {CVE-2026-52917} -...

bpftool-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-abi-stablelists-4.18.0-553.162.1.el8_10.noarch.rpm kernel-core-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-cross-headers-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-debug-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-debug-core-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-debug-devel-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-debug-modules-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-debug-modules-extra-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-devel-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-doc-4.18.0-553.162.1.el8_10.noarch.rpm kernel-headers-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-modules-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-modules-extra-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-tools-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-tools-libs-4.18.0-553.162.1.el8_10.x86_64.rpm kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.x86_64.rpm perf-4.18.0-553.162.1.el8_10.x86_64.rpm python3-perf-4.18.0-553.162....

bpftool-4.18.0-553.162.1.el8_10.aarch64.rpm kernel-cross-headers-4.18.0-553.162.1.el8_10.aarch64.rpm kernel-headers-4.18.0-553.162.1.el8_10.aarch64.rpm kernel-tools-4.18.0-553.162.1.el8_10.aarch64.rpm kernel-tools-libs-4.18.0-553.162.1.el8_10.aarch64.rpm kernel-tools-libs-devel-4.18.0-553.162.1.el8_10.aarch64.rpm perf-4.18.0-553.162.1.el8_10.aarch64.rpm python3-perf-4.18.0-553.162.1.el8_10.aarch64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Oracle Linux Kernel Vulnerabilities Expose Admin Control Risks Multiple vulnerabilities in Oracle Linux kernels (versions 4.18 and 5.14) have been identified, allowing attackers to gain administrative control through chained exploits. The vulnerabilities are linked to CVE-2026-46015 and CVE-2025-38004, with patches released for Oracle Linux 8 and 9. Affected systems include Oracle Linux 8 and 9, with specific kernel versions being 4.18.0-553.162.1 and 5.14.0-687.46.1. The vulnerabilities were disclosed recently, with the potential for exploitation confirmed. Administrators are urged to update their systems immediately to mitigate risks. The updates include disabling UKI signing and updating Oracle Linux certificates. The situation is critical due to the potential for mass exploitation if not addressed promptly. 4 sources 73

Extracted Entities

CVEs (15)

CVE-2025-68745 CVE-2026-46149 CVE-2026-52917 CVE-2026-52942 CVE-2026-52986 CVE-2026-53091 CVE-2026-53246 CVE-2026-63801 CVE-2026-63971 CVE-2026-64015 CVE-2026-64113 CVE-2026-68117 CVE-2026-68300 CVE-2026-68315 CVE-2026-68376

Platforms (2)

Linux Oracle Linux