Summary
[4.18.0-348.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5
[4.18.0-348]
- drm/nouveau/fifo/ga102: initialise chid on return from channel creation (Ben Skeggs) [1997878]
- drm/nouveau/ga102-: support ttm buffer moves via copy engine (Ben Skeggs) [1997878]
- drm/nouveau/kms/tu102-: delay enabling cursor until after assign_windows (Ben Skeggs) [1997878]
- drm/nouveau/kms/nv50: workaround EFI GOP window channel format differences (Ben Skeggs) [1997878]
- drm/nouveau/disp: power down unused DP links during init (Ben Skeggs) [1997878]
- drm/nouveau: recognise GA107 (Ben Skeggs) [1997878]
[4.18.0-347]
- PCI: Mark TI C667X to avoid bus reset (Alex Williamson) [1975768]
[4.18.0-346]
- redhat: switch secureboot kernel image signing to release keys (Bruno Meneguele)
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Fix RT check branch name (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- Revert 'Merge: mt7921e: enable new Mediatek wireless hardware' (Bruno Meneguele) [2009501]
- megaraid_sas: fix concurrent access to ISR between IRQ polling and real interrupt (Tomas Henzl) [2009022]
- scsi: megaraid_sas: mq_poll support (Tomas Henzl) [2009022]
- [PATCH v2] scsi: qla2xxx: Suppress unnecessary log messages during login (Nilesh Javali) [1982186]
- scsi: qla2xxx: Fix excessive messages during device logout (Nilesh Javali) [1982186]
- PCI: pciehp: Ignore Link Down/Up caused by DPC (Myron Stowe) [1981741]
- arm64: kpti: Fix 'kpti=off' when KASLR is enabled (Mark Salter) [1979731]
- arm64: Fix CONFIG_ARCH_RANDOM=n build (Mark Salter) [1979731]
- redhat/configs: aarch64: add CONFIG_ARCH_RANDOM (Mark Salter) [1979731]
- arm64: Implement archrandom.h for ARMv8.5-RNG (Mark Salter) [1979731]
- arm64: kconfig: Fix alignment of E0PD help text (Mark Salter) [1979731]
- arm64: Use register field helper in kaslr_requires_kpti() (Mark Salter) [1979731]
- arm64: Simplify early check for broken TX1 when KASLR is enabled (Mark Salter) [1979731]
- arm64: Use a variable to store non-global mappings decision (Mark Salter) [1979731]
- arm64: Dont use KPTI where we have E0PD (Mark Salter) [1979731]
- arm64: Factor out checks for KASLR in KPTI code into separate function (Mark Salter) [1979731]
- redhat/configs: Add CONFIG_ARM64_E0PD (Mark Salter) [1979731]
- arm64: Add initial support for E0PD (Mark Salter) [1979731]
- arm64: cpufeature: Export matrix and other features to userspace (Mark Salter) [1980098]
- arm64: docs: cpu-feature-registers: Document ID_AA64PFR1_EL1 (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Rewrite bitfields that dont follow [e, s] (Mark Salter) [1980098]
- docs/arm64: cpu-feature-registers: Documents missing visible fields (Mark Salter) [1980098]
- arm64: Introduce system_capabilities_finalized() marker (Mark Salter) [1980098]
- arm64: entry.S: Do not preempt from IRQ before all cpufeatures are enabled (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: Document HWCAP_SB (Mark Salter) [1980098]
- docs/arm64: elf_hwcaps: sort the HWCAP{, 2} documentation by ascending value (Mark Salter) [1980098]
- arm64: cpufeature: Treat ID_AA64ZFR0_EL1 as RAZ when SVE is not enabled (Mark Salter) [1980098]
- arm64: cpufeature: Effectively expose FRINT capability to userspace (Mark Salter) [1980098]
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG} (Mark Salter) [1980098]
- arm64: Expose FRINT capabilities to userspace (Mark Salter) [1980098]
- arm64: Expose ARMv8.5 CondM capability to userspace (Mark Salter) [1980098]
- docs: arm64: convert perf.txt to ReST format (Mark Salter) [1980098]
- docs: arm64: convert docs to ReST and rename to .rst (Mark Salter) [1980098]
- Documentation/arm64: HugeTLB page implementation (Mark Salter) [1980098]
- Documentation/arm64/sve: Couple of improvements and typos (Mark Salter) [1980098]
- arm64: cpufeature: Fix missing ZFR0 in __read_sysreg_by_encoding() (Mark Salter) [1980098]
- arm64: Expose SVE2 features for userspace (Mark Salter) [1980098]
- arm64: Advertise ARM64_HAS_DCPODP cpu feature (Mark Salter) [1980098]
- arm64: add CVADP support to the cache maintenance helper (Mark Salter) [1980098]
- arm64: Fix minor issues with the dcache_by_line_op macro (Mark Salter) [1980098]
- arm64: Expose DC CVADP to userspace (Mark Salter) [1980098]
- arm64: Handle trapped DC CVADP (Mark Salter) [1980098]
- arm64: HWCAP: encapsulate elf_hwcap (Mark Salter) [1980098]
- arm64: HWCAP: add support for AT_HWCAP2 (Mark Salter) [1980098]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1965331]
- x86/MCE/AMD, EDAC/mce_amd: Remove struct smca_hwid.xec_bitmap (Aristeu Rozanski) [1965331]
- EDAC, mce_amd: Print ExtErrorCode and description on a single line (Aristeu Rozanski) [1965331]
[4.18.0-345]
- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [1984558]
- qrtr: disable CONFIG_QRTR for non x86_64 archs (inigo Huguet) [1999642]
- ceph: fix possible null-pointer dereference in ceph_mdsmap_decode() (Jeff Layton) [1989999]
- ceph: fix dereference of null pointer cf (Jeff Layton) [1989999]
- ceph: correctly handle releasing an embedded cap flush (Jeff Layton) [1989999]
- ceph: take snap_empty_lock atomically with snaprealm refcount change (Jeff Layton) [1989999]
- ceph: dont WARN if were still opening a session to an MDS (Jeff Layton) [1989999]
- rbd: dont hold lock_rwsem while running_list is being drained (Jeff Layton) [1989999]
- rbd: always kick acquire on 'acquired' and 'released' notifications (Jeff Layton) [1989999]
- ceph: take reference to req->r_parent at point of assignment (Jeff Layton) [1989999]
- ceph: eliminate ceph_async_iput() (Jeff Layton) [1989999]
- ceph: dont take
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-abi-stablelists | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-core | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-cross-headers | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-debug | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-debug-core | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-debug-devel | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-debug-modules | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-debug-modules-extra | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-devel | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-doc | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-headers | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-modules | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-modules-extra | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-tools | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-tools-libs | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | kernel-tools-libs-devel | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | perf | 0:4.18.0-348.el8 |
| Oracle Linux · 8 | python3-perf | 0:4.18.0-348.el8 |
Vulnerabilities 42
-
High 8.8
mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might…
-
High 8.8CVE-2021-31440 Public exploit
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An …
-
High 7.8
Linux kernel eBPF RINGBUF map oversized allocation
The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This i…
-
High 7.8
It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit…
-
Medium 6.7
Linux Kernel sctp_destroy_sock race condition
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock …
-
Medium 5.3
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fr…
-
Unscored —
In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…
-
Unscored —
Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before vers…
-
Unscored —
Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an …
-
Unscored —
Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may all…
-
Unscored —
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…
-
Unscored —
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…
-
Unscored —
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) does…
-
Unscored —
An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even t…
-
Unscored —
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementa…
-
Unscored —
An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verif…
-
Unscored —
An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implemen…
-
Unscored —
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept p…
-
Unscored —
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept s…
-
Unscored —
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments ev…
-
Unscored —
A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usuall…
-
Unscored —
An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write imp…
-
Unscored —
A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_i…
-
Unscored —
An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hc…
-
Unscored —
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjac…
-
Unscored —
There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF…
-
Unscored —
A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a…
-
Unscored —
An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a ret…
-
Unscored —
In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, user…
-
Unscored —CVE-2021-29155 Public exploit
An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds sp…
-
Unscored —
An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly v…
-
Unscored —
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial …
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure …
-
Unscored —
An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver …
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, a…
-
Unscored —
nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could…
-
Unscored —
A flaw double-free memory corruption in the Linux kernel HCI device initialization subsystem was found in the way user …
-
Unscored —
A use-after-free in function hci_sock_bound_ioctl() of the Linux kernel HCI subsystem was found in the way user calls i…
-
Unscored —
A flaw was found in the Linux kernel netfilter implementation in versions prior to 5.5-rc7. A user with root (CAP_SYS_A…
-
Unscored —
A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way …
-
Unscored —CVE-2021-3679 Public exploit
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the …
-
Unscored —
A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with Overlay…