Summary
[4.14.35-2047.501.1.el7uek]
- ovl: restore creds in all return paths of ovl_iterate (Somasundaram Krishnasamy) [Orabug: 32620381]
[4.14.35-2047.501.0]
- block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov) [Orabug: 32531559]
- uek-rpm: config-aarch-embedded2 update for Jan 2021 Elba patches (Dave Kleikamp) [Orabug: 32532588]
- dts/pensando: Fix compatile -> compatible typeo. (David Clear) [Orabug: 32532588]
- Interrupt domain controllers for Elba ASIC. (David Clear) [Orabug: 32532588]
- elba_defconfig: CONFIG_PTP_1588_CLOCK=y (David Clear) [Orabug: 32532588]
- soc/pensando: pcie driver (David Clear) [Orabug: 32532588]
- pcie: control access to pcie clock domain registers (David Clear) [Orabug: 32532588]
- mmc: sdhci-cadence-elba ADMA and HS200 tuning support (David Clear) [Orabug: 32532588]
- enable rcu callback offloading & adaptive tick mode to reduce jitter (David Clear) [Orabug: 32532588]
- uek-rpm: Enable perf trace support for OL7 kernel builds. (Mridula Shastry) [Orabug: 32528194]
- uek-rpm: update config-aarch-embedded2 for Elba (Dave Kleikamp) [Orabug: 32361844]
- elba: u-boot environment partitions in the device-tree (David Clear) [Orabug: 32361844]
- i2c: Add Elba Ortano Lattice RD1173 I2C controller driver. (David Clear) [Orabug: 32361844]
- elba: one more mnet for elba.dtsi (David Clear) [Orabug: 32361844]
- elba: Add IPv6 support to elba_defconfig (David Clear) [Orabug: 32361844]
- mmc: sdhci-cadence-elba sdhci driver cleanup (David Clear) [Orabug: 32361844]
- spi-dw: custom chip-select handler for elba (David Clear) [Orabug: 32361844]
- arch/arm64: Pensando elba dts and config files (David Clear) [Orabug: 32361844]
- drivers/soc/pensando: crash dump driver. (David Clear) [Orabug: 32361844]
- drivers/pensando/soc: Boot State Machine (BSM) integration. (David Clear) [Orabug: 32361844]
- drivers/soc/pensando: /dev/capmem driver. (David Clear) [Orabug: 32361844]
- drivers/mmc/host: Pensando Elba support in the Cadence EMMC host controller (David Clear) [Orabug: 32361844]
- drivers/gpio: support the Elba SPI chip-selects. (David Clear) [Orabug: 32361844]
- arch/arm64: Pensando Elba SoC declaration. (David Clear) [Orabug: 32361844]
- mmc: sdhci-cadence: fix PHY write (Vladimir Kondratiev) [Orabug: 32361844]
- mmc: sdhci-cadence: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN for UniPhier (Masahiro Yamada) [Orabug: 32361844]
- mmc: sdhci-cadence: remove unneeded 'inline' marker (Masahiro Yamada) [Orabug: 32361844]
- mmc: sdhci-cadence: use struct_size() helper (Gustavo A. R. Silva) [Orabug: 32361844]
- mmc: sdhci-cadence: fix logically and structurally dead code (Gustavo A. R. Silva) [Orabug: 32361844]
- mmc: sdhci-cadence: send tune request twice to work around errata (Masahiro Yamada) [Orabug: 32361844]
- mmc: sdhci-cadence: use bitfield access macros for cleanup (Masahiro Yamada) [Orabug: 32361844]
- Revert 'Support the reset pulse width from the device-tree.' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Initial Pensando Capri SoC declaration' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Add Capri EMMC phy and instantiate the driver in the dts' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Capri SPI driver' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Interrupt domain controllers for Capri ASIC.' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Add uio support for Capri PCIE and Link interrupts' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Pensando/Capri PCIE panic handler.' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Pensando crash dump driver' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Pensando Boot State Machine (BSM) integration.' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Add mnic nodes to the Pensando devicetree' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'mtd/spi-nor/cadence-quadspi.c: Speed up reads.' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Add /proc/xmaps' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Add Pensando Capri board .dts files and default configs' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Provide for precise control of pgprot for Pensando' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Kconfig option to disable outer-cache-allocate for Pensando' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Add /dev/capmem driver for Pensando' (Dave Kleikamp) [Orabug: 32361844]
- Revert 'Make low-speed APB bus accesses single threaded' (Dave Kleikamp) [Orabug: 32361844]
- sched/topology: Assert non-NUMA topology masks don't (partially) overlap (Valentin Schneider) [Orabug: 32485794]
- x86/msr: Add a pointer to an URL which contains further details (Borislav Petkov) [Orabug: 32409137]
- x86/msr: Downgrade unrecognized MSR message (Borislav Petkov) [Orabug: 32409137]
- x86/msr: Do not allow writes to MSR_IA32_ENERGY_PERF_BIAS (Borislav Petkov) [Orabug: 32409137]
- x86/msr: Prevent userspace MSR access from dominating the console (Chris Down) [Orabug: 32409137]
- x86/msr: Filter MSR writes (Borislav Petkov) [Orabug: 32409137]
- tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (Borislav Petkov) [Orabug: 32409137]
- tools/power/turbostat: Read energy_perf_bias from sysfs (Borislav Petkov) [Orabug: 32409137]
- tools/power/cpupower: Read energy_perf_bias from sysfs (Borislav Petkov) [Orabug: 32409137]
- uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg) [Orabug: 32422664]
- hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg) [Orabug: 32422664]
- ovl: verify permissions in ovl_path_open() (Miklos Szeredi) [Orabug: 32435220] {CVE-2020-16120}
- ovl: switch to mounter creds in readdir (Miklos Szeredi) [Orabug: 32435220] {CVE-2020-16120}
- ovl: pass correct flags for opening real directory (Miklos Szeredi) [Orabug: 32435220]
- l2tp: fix race in pppol2tp_release with session object destroy (James Chapman) [Orabug: 32435324]
- l2tp: fix races with tunnel socket close (James Chapman) [Orabug: 32435324]
- l2tp: don't use inet_shutdown on ppp session destroy (James Chapman)
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | kernel-uek-headers | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs-devel | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | perf | 0:4.14.35-2047.501.1.el7uek |
| Oracle Linux · 7 | python-perf | 0:4.14.35-2047.501.1.el7uek |
Vulnerabilities 3
-
High 7.8CVE-2021-3347 Public exploit
An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault…
-
Medium 5.1
Unprivileged overlay + shiftfs read access
Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unp…
-
Unscored —
nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could…