Summary
[4.18.0-240.OL8]
- Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.3.el7
[4.18.0-240]
- [include] block: allow for_each_bvec to support zero len bvec (Ming Lei) [1872032]
- [nvme] nvme-pci: disable the write zeros command for Intel 600P/P3100 (David Milburn) [1875391]
[4.18.0-239]
- [init] init/Kconfig: disable io_uring (Jeff Moyer) [1879754]
- [block] blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1740874]
- [nvme] nvme-rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878140]
- [kernel] printk: queue wake_up_klogd irq_work only if per-CPU areas are ready (Igor Mammedov) [1867022]
[4.18.0-238]
- [firmware] efi: dont reserve MOK config table memory region (Kairui Song) [1878584]
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875316] {CVE-2020-14385}
- [powerpc] powerpc/pseries: Do not initiate shutdown when system is running on UPS (Diego Domingos) [1870477]
[4.18.0-237]
- [fs] nfsd: avoid a NULL dereference in __cld_pipe_upcall() (Scott Mayhew) [1847225]
- [net] packet: fix overflow in tpacket_rcv (Hangbin Liu) [1876224] {CVE-2020-14386}
- [net] packet: make tp_drops atomic (Hangbin Liu) [1876224] {CVE-2020-14386}
- [net] espintcp: restore IP CB before handing the packet to xfrm (Sabrina Dubroca) [1868201]
- [fs] Revert NFSv4: Handle NFS4ERR_OLD_STATEID in CLOSE/OPEN_DOWNGRADE (Benjamin Coddington) [1865978]
- [fs] Revert NFSv4.x recover from pre-mature loss of openstateid (Benjamin Coddington) [1865978]
- [infiniband] RDMA/mlx4: Read pkey table length instead of hardcoded value (Alaa Hleihel) [1853564]
- [net] net/smc: set rx_off for SMCR explicitly (Philipp Rudo) [1875833]
- [drm] drm/i915: Auto detect DPCD backlight support by default (Lyude Paul) [1872381]
- [drm] drm/i915: Fix DPCD register order in intel_dp_aux_enable_backlight() (Lyude Paul) [1872381]
- [drm] drm/i915: Assume 100 brightness when not in DPCD control mode (Lyude Paul) [1872381]
- [drm] drm/i915: Fix eDP DPCD aux max backlight calculations (Lyude Paul) [1872381]
- [kernel] tracing: Define MCOUNT_INSN_SIZE when not defined without direct calls (Jiri Olsa) [1857599]
- [kernel] ftrace: Fix function_graph tracer interaction with BPF trampoline (Jiri Olsa) [1857599]
- [x86] x86/function_graph: Simplify with function_graph_enter() (Jiri Olsa) [1857599]
- [kernel] function_graph: Create function_graph_enter() to consolidate architecture code (Jiri Olsa) [1857599]
[4.18.0-236]
- [crypto] pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862072]
- [security] integrity: Load certs from the EFI MOK config table (Lenny Szubowicz) [1868306]
- [security] integrity: Move import of MokListRT certs to a separate routine (Lenny Szubowicz) [1868306]
- [firmware] efi: Support for MOK variable config table (Lenny Szubowicz) [1868306]
- [kernel] Move to dual-signing to split signing keys up better (Frantisek Hrbata) [1837434] {CVE-2020-10713}
- [powerpc] pseries/hotplug-cpu: wait indefinitely for vCPU death (Michael Roth) [1856588]
- [powerpc] kvm: ppc: book3s hv: Rework secure mem slot dropping (Michael Roth) [1851259]
- [powerpc] kvm: ppc: book3s hv: Move kvmppc_svm_page_out up (Michael Roth) [1851259]
- [powerpc] kvm: ppc: book3s hv: Migrate hot plugged memory (Michael Roth) [1851259]
- [powerpc] kvm: ppc: book3s hv: In H_SVM_INIT_DONE, migrate remaining normal-GFNs to secure-GFNs (Michael Roth) [1851259]
- [powerpc] kvm: ppc: book3s hv: Track the state GFNs associated with secure VMs (Michael Roth) [1851259]
- [powerpc] kvm: ppc: book3s hv: Disable page merging in H_SVM_INIT_START (Michael Roth) [1851259]
- [powerpc] kvm: ppc: book3s hv: Fix function definition in book3s_hv_uvmem.c (Michael Roth) [1851259]
- [kernel] mmap locking api: initial implementation as rwsem wrappers (Michael Roth) [1851259]
- [mm] handle multiple owners of device private pages in migrate_vma (Michael Roth) [1851259]
- [mm] migrate.c: clean up useless code in migrate_vma_collect_pmd() (Michael Roth) [1851259]
- [mm] remove the unused MIGRATE_PFN_DEVICE flag (Michael Roth) [1851259]
- [powerpc] rhel: powerpc: kvm: Increase HDEC threshold to enter guest (David Gibson) [1733467]
- [netdrv] r8152: Add macpassthru support for ThinkPad Thunderbolt 3 Dock Gen 2 (Michal Schmidt) [1851966]
- [fs] ceph: fix inode number handling on arches with 32-bit ino_t (Jeff Layton) [1869679]
- [fs] ceph: dont allow setlease on cephfs (Jeff Layton) [1872382]
- [block] blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART (Ming Lei) [1859628]
[4.18.0-235]
- [s390] scsi: zfcp: Move allocation of the shost object to after xconf- and xport-data (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: Fence early sysfs interfaces for accesses of shost objects (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: Fence adapter status propagation for common statuses (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: Move p-t-p port allocation to after xport data (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: Fence fc_host updates during link-down handling (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: Move fc_host updates during xport data handling into fenced function (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: Move shost updates during xconfig data handling into fenced function (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: Move shost modification after QDIO (re-)open into fenced function (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: fix fc_host attributes that should be unknown on local link down (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: wire previously driver-specific sysfs attributes also to fc_host (Claudio Imbrenda) [1872799]
- [s390] scsi: zfcp: expose fabric name as common fc_host sysfs attribut
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-abi-whitelists | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-core | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-cross-headers | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-debug | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-debug-core | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-debug-devel | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-debug-modules | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-debug-modules-extra | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-devel | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-doc | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-headers | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-modules | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-modules-extra | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-tools | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-tools-libs | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | kernel-tools-libs-devel | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | perf | 0:4.18.0-240.el8 |
| Oracle Linux · 8 | python3-perf | 0:4.18.0-240.el8 |
Vulnerabilities 46
-
High 7.8CVE-2020-14381 Public exploit
A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory…
-
Medium 6.1
An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kerne…
-
Medium 6.1
A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed …
-
Medium 4.4
A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it inco…
-
Low 3.3
A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a loca…
-
Unscored —
An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel throug…
-
Unscored —
An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() …
-
Unscored —
An issue was discovered in the Linux kernel before 5.2.3. An out of bounds access exists in the function hclge_tm_schd_…
-
Unscored —
drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a N…
-
Unscored —
drivers/scsi/qla2xxx/qla_os.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a …
-
Unscored —
A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allow…
-
Unscored —
A memory leak in the af9005_identify_state() function in drivers/media/usb/dvb-usb/af9005.c in the Linux kernel through…
-
Unscored —
A memory leak in the __ipmi_bmc_register() function in drivers/char/ipmi/ipmi_msghandler.c in the Linux kernel through …
-
Unscored —
A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() function in drivers/net/wireless/marvell/mwifiex/pcie.c in the Lin…
-
Unscored —
A memory leak in the crypto_report() function in crypto/crypto_user_base.c in the Linux kernel through 5.3.11 allows at…
-
Unscored —
Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel thro…
-
Unscored —
A memory leak in the rtl8xxxu_submit_int_urb() function in drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c in the…
-
Unscored —
A memory leak in the predicate_parse() function in kernel/trace/trace_events_filter.c in the Linux kernel through 5.3.1…
-
Unscored —
In the Linux kernel before 5.2, a setxattr operation, after a mount of a crafted ext4 image, can cause a slab-out-of-bo…
-
Unscored —CVE-2019-19447 Public exploit
In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can le…
-
Unscored —
In the Linux kernel before 5.3.12, there is a use-after-free bug that can be caused by a malicious USB device in the dr…
-
Unscored —
In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers…
-
Unscored —
In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the US…
-
Unscored —
In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.
-
Unscored —
fpregs_state_valid in arch/x86/include/asm/fpu/internal.h in the Linux kernel before 5.4.2, when GCC 9 is used, allows …
-
Unscored —
The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_ex…
-
Unscored —
In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (whi…
-
Unscored —
In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, …
-
Unscored —
In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demon…
-
Unscored —
In the Android kernel in the video driver there is a kernel pointer leak due to a WARN_ON statement. This could lead to…
-
Unscored —
In the Android kernel in the video driver there is a use after free due to a race condition. This could lead to local e…
-
Unscored —
In cdev_get of char_dev.c, there is a possible use-after-free due to a race condition. This could lead to local escalat…
-
Unscored —
In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. Th…
-
Unscored —
A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when re…
-
Unscored —
In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which m…
-
Unscored —
An issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a stack-based out-of-bo…
-
Unscored —
In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles …
-
Unscored —
An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel b…
-
Unscored —
An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers ma…
-
Unscored —
An issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has an out-of-bounds write…
-
Unscored —
An issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request call in a certain failu…
-
Unscored —
A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in…
-
Unscored —
A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec reque…
-
Unscored —
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/v…
-
Unscored —
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in d…
-
Unscored —
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drive…