Skip to content
OpenAdvisories
High ELSA-2020-5848 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 14, 2020 · Updated Sep 14, 2020

Summary

[5.4.17-2011.6.2]
- Revert 'aarch64/BM: config failed, hub doesnt have any ports' (Thomas Tai) [Orabug: 31838351] [Orabug: 31844671]
- kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini) [Orabug: 31839185] [Orabug: 31844556]

[5.4.17-2011.6.1]
- nfsd: apply umask on fs without ACL support (J. Bruce Fields) [Orabug: 31779884] {CVE-2020-24394}
- arm64/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces (Kees Cook) [Orabug: 31776626]
- arm32/64/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook) [Orabug: 31776626]
- arm32/64/elf: Add tables to document READ_IMPLIES_EXEC (Kees Cook) [Orabug: 31776626]
- x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit (Kees Cook) [Orabug: 31776626]
- x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook) [Orabug: 31776626]
- x86/elf: Add table to document READ_IMPLIES_EXEC (Kees Cook) [Orabug: 31776626]
- x86/mm: use max memory block size on bare metal (Daniel Jordan) [Orabug: 31771277]
- drivers/base/memory.c: cache memory blocks in xarray to accelerate lookup (Scott Cheloha) [Orabug: 31771277]
- net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon) [Orabug: 31755752]
- RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood) [Orabug: 31688620]
- arm64/dts: Serial console fix for RPi4 (Vijay Kumar) [Orabug: 31562971]
- md: get sysfs entry after redundancy attr group create (Junxiao Bi) [Orabug: 31682033]
- md: fix deadlock causing by sysfs_notify (Junxiao Bi) [Orabug: 31682033]

[5.4.17-2011.6.0]
- RDMA/mlx5: Set MR cache limit for both PF and VF (Nikhil Krishna) [Orabug: 31358080]
- rds: ib: Revert 'net/rds: Avoid stalled connection due to CM REQ retries' (Hakon Bugge) [Orabug: 31648138]
- rds: Clear reconnect pending bit (Hakon Bugge) [Orabug: 31648138]
- RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon) [Orabug: 31483278]
- RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe) [Orabug: 31483278]
- RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg) [Orabug: 31483278]
- bnxt_en: allow firmware to disable VLAN offloads (Michael Chan)
- bnxt_en: clean up VLAN feature bit handling (Michael Chan) [Orabug: 31663185]
- bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features(). (Michael Chan) [Orabug: 31663185]
- bnxt_en: Implement ethtool -X to set indirection table. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Return correct RSS indirection table entries to ethtool -x. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Fill HW RSS table from the RSS logical indirection table. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Add helper function to return the number of RSS contexts. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Add logical RSS indirection table structure. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Fix up bnxt_get_rxfh_indir_size(). (Michael Chan) [Orabug: 31663185]
- bnxt_en: Set up the chip specific RSS table size. (Michael Chan) [Orabug: 31663185]
- bnxt_en: fix firmware message length endianness (Michael Chan) [Orabug: 31663185]
- net: bnxt: Remove Comparison to bool in bnxt_ethtool.c (Jason Yan) [Orabug: 31663185]
- bnxt_en: show only relevant ethtool stats for a TX or RX ring (Rajesh Ravi) [Orabug: 31663185]
- bnxt_en: Split HW ring statistics strings into RX and TX parts. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Refactor the software ring counters. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Do not include ETH_FCS_LEN in the max packet length sent to fw. (Vasundhara Volam) [Orabug: 31663185]
- bnxt_en: Improve TQM ring context memory sizing formulas. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Allocate TQM ring context memory according to fw specification. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Update firmware spec. to 1.10.1.33. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Return error when allocating zero size context memory. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Reset rings if ring reservation fails during open() (Vasundhara Volam) [Orabug: 31663185]
- bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Process the NQ under NAPI continuous polling. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Simplify __bnxt_poll_cqs_done(). (Michael Chan) [Orabug: 31663185]
- bnxt_en: Handle all NQ notifications in bnxt_poll_p5(). (Michael Chan) [Orabug: 31663185]
- bnxt_en: Disable workaround for lost interrupts on 575XX B0 and newer chips. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Periodically check and remove aged-out ntuple filters (Michael Chan) [Orabug: 31663185]
- bnxt_en: Do not accept fragments for aRFS flow steering. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Remove the setting of dev_port. (Michael Chan) [Orabug: 31663185]
- bnxt_en: Improve link up detection. (Michael Chan) [Orabug: 31663185]
- RDMA/nldev: Provide MR statistics (Erez Alfasi) [Orabug: 31079901]
- RDMA/mlx5: Return ODP type per MR (Erez Alfasi) [Orabug: 31079901]
- RDMA/nldev: Allow different fill function per resource (Erez Alfasi) [Orab

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2011.6.2.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2011.6.2.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2011.6.2.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2011.6.2.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2011.6.2.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2011.6.2.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:5.4.17-2011.6.2.el7uek
Oracle Linux · 7 perf 0:5.4.17-2011.6.2.el7uek
Oracle Linux · 7 python-perf 0:5.4.17-2011.6.2.el7uek

Vulnerabilities 6