Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

kernel-uek
[4.1.12-103.3.8]
- fs/exec.c: account for argv/envp pointers (Kees Cook) [Orabug: 26638900] {CVE-2017-1000365} {CVE-2017-1000365}

[4.1.12-103.3.7]
- i40e/i40evf: check for stopped admin queue (Mitch Williams) [Orabug: 26654222]

[4.1.12-103.3.6]
- xen: fix bio vec merging (Roger Pau Monne) [Orabug: 26645497]

[4.1.12-103.3.5]
- dentry name snapshots (Al Viro) [Orabug: 26630805] {CVE-2017-7533}

[4.1.12-103.3.4]
- mnt: Add a per mount namespace limit on the number of mounts (Eric W. Biederman) [Orabug: 26585933] {CVE-2016-6213} {CVE-2016-6213}
- ipv6: fix out of bound writes in __ip6_append_data() (Eric Dumazet) [Orabug: 26578179] {CVE-2017-9242}
- KEYS: Disallow keyrings beginning with '.' to be joined as session keyrings (David Howells) [Orabug: 26585981] {CVE-2016-9604} {CVE-2016-9604}
- l2tp: fix racy SOCK_ZAPPED flag check in l2tp_ip{,6}_bind() (Guillaume Nault) [Orabug: 26586030] {CVE-2016-10200}
- ovl: move super block magic number to magic.h (Stephen Hemminger) [Orabug: 22876737] {CVE-2016-1575} {CVE-2016-1576}
- ovl: use a minimal buffer in ovl_copy_xattr (Vito Caputo) [Orabug: 22876737] {CVE-2016-1575} {CVE-2016-1576}
- ovl: allow zero size xattr (Miklos Szeredi) [Orabug: 22876737] {CVE-2016-1575} {CVE-2016-1576}
- ovl: default permissions (Miklos Szeredi) [Orabug: 22876737] {CVE-2016-1575} {CVE-2016-1576}
- scsi: megaraid_sas: handle dma_addr_t right on 32-bit (Arnd Bergmann) [Orabug: 26560952]
- scsi: megaraid_sas: NVME fast path io support (Shivasharan S) [Orabug: 26560952]
- scsi: megaraid_sas: NVME interface target prop added (Shivasharan S) [Orabug: 26560952]
- scsi: megaraid_sas: NVME Interface detection and prop settings (Shivasharan S) [Orabug: 26560952]
- scsi: megaraid_sas: Use synchronize_irq to wait for IRQs to complete (Shivasharan S) [Orabug: 26560952]
- fs/fuse: fuse mount can cause panic with no memory numa node (Somasundaram Krishnasamy) [Orabug: 26151828]
- Fix regression which breaks DFS mounting (Sachin Prabhu) [Orabug: 26335022]
- ol7/spec: sync up linux-firmware version for ol74 (Ethan Zhao) [Orabug: 26567308] [Orabug: 26567283]
- nfsd: encoders mustnt use unitialized values in error cases (J. Bruce Fields) [Orabug: 26572867] {CVE-2017-8797}
- nfsd: fix undefined behavior in nfsd4_layout_verify (Ari Kauppi) [Orabug: 26572867] {CVE-2017-8797}
- ol6/spec: sync up linux-firmware version for ol6 (Ethan Zhao) [Orabug: 26586911] [Orabug: 26586927]

[4.1.12-103.3.2]
- rds: tcp: cancel all worker threads before shutting down socket (Yuval Shaia) [Orabug: 26332905]
- Revert 'ixgbevf: get rid of custom busy polling code' (Jack Vogel) [Orabug: 26560824]
- Revert 'ixgbe: get rid of custom busy polling code' (Jack Vogel) [Orabug: 26560824]
- xen: do not re-use pirq number cached in pci device msi msg data (Boris Ostrovsky) [Orabug: 26324865]
- xsigo: PCA 2.3.1 Compute Node panics in xve_create_arp+430 (Pradeep Gopanapalli) [Orabug: 26520653]
- ocfs2: fix deadlock caused by recursive locking in xattr (Eric Ren) [Orabug: 26554428]
- ocfs2: fix deadlock issue when taking inode lock at vfs entry points (Eric Ren) [Orabug: 26554428]
- ocfs2/dlmglue: prepare tracking logic to avoid recursive cluster lock (Eric Ren) [Orabug: 26554428]
- Revert 'add OCFS2_LOCK_RECURSIVE arg_flags to ocfs2_cluster_lock() to prevent hang' (Ashish Samant) [Orabug: 26554428]
- MacSec: fix backporting error in patches for CVE-2017-7477 (Alexey Kodanev) [Orabug: 26481629] [Orabug: 26368162] {CVE-2017-7477} {CVE-2017-7477}
- sg: Fix double-free when drives detach during SG_IO (Calvin Owens) [Orabug: 26492439]
- ping: implement proper locking (Eric Dumazet) [Orabug: 26540266] {CVE-2017-2671}
- PCI: Workaround wrong flags completions for IDT switch (James Puthukattukaran) [Orabug: 26362330]
- xen-blkback: stop blkback thread of every queue in xen_blkif_disconnect (Annie Li)

[4.1.12-103.3.1]
- MSI: Dont assign MSI IRQ vector twice (Ashok Vairavan) [Orabug: 25982356]
- IB/core: Remove stray semicolon in cma_init (Yuval Shaia) [Orabug: 26188883]
- ipv6: Fix leak in ipv6_gso_segment(). (David S. Miller) [Orabug: 26403963] {CVE-2017-9074}
- ipv6: xfrm: Handle errors reported by xfrm6_find_1stfragopt() (Ben Hutchings) [Orabug: 26403963] {CVE-2017-9074}
- ipv6: Check ip6_find_1stfragopt() return value properly. (David S. Miller) [Orabug: 26403963] {CVE-2017-9074}
- ipv6: Prevent overrun when parsing v6 header options (Craig Gallek) [Orabug: 26403963] {CVE-2017-9074}
- scsi: libiscsi: use kvzalloc for iscsi_pool_init (Kyle Fortin) [Orabug: 26473220]
- mm: introduce kv[mz]alloc helpers (Kyle Fortin) [Orabug: 26473220]
- blk-mq: Export blk_mq_freeze_queue_wait (Keith Busch) [Orabug: 26486215]
- blk-mq: Provide freeze queue timeout (Keith Busch) [Orabug: 26486215]
- nvme: Complete all stuck requests (Keith Busch) [Orabug: 26486215]
- nvme: Dont suspend admin queue that wasnt created (Gabriel Krisman Bertazi) [Orabug: 26486215]
- nvme: Delete created IO queues on reset (Keith Busch) [Orabug: 26486215]
- nvme: Suspend all queues before deletion (Gabriel Krisman Bertazi) [Orabug: 26486215]
- nvme/pci: No special case for queue busy on IO (Keith Busch) [Orabug: 26486215]
- Revert 'net/rds: Revert 'RDS: add reconnect retry scheme for stalled connections'' (Ajaykumar Hotchandani) [Orabug: 26497331]
- Revert 'net/rds: use different workqueue for base_conn' (Ajaykumar Hotchandani) [Orabug: 26497331]
- Revert 'net/rds: determine active/passive connection with IP addresses' (Ajaykumar Hotchandani) [Orabug: 26497331]
- Revert 'net/rds: prioritize the base connection establishment' (Ajaykumar Hotchandani) [Orabug: 26497331]
- net/sock: add WARN_ON(parent->sk) in sock_graft() (Sowmini Varadhan) [Orabug: 26243229]
- rds: tcp: use sock_create_lite() to create the accept socket (Sowmini Varadhan) [Orabug: 26243229]
- rds: tcp: set linger to 1 when unloading a rds-tcp (Sowmini Varadhan) [Orabug: 26236194]
- rds: tcp: send handshake ping-probe from passive endpoint (Sowmini Varadha