Summary
[5.4.17-2102.202.5]
- sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907967] {CVE-2021-23133} {CVE-2021-23133}
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860491] {CVE-2021-31916}
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi) [Orabug: 32883836]
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [Orabug: 32888143]
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart) [Orabug: 32827840]
[5.4.17-2102.202.4]
- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi) [Orabug: 32837542]
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley) [Orabug: 32867569]
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft)) [Orabug: 32867569]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley) [Orabug: 32867569]
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour) [Orabug: 32816428]
[5.4.17-2102.202.3]
- LTS tag: v5.4.94 (Jack Vogel)
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)
- dm integrity: conditionally disable 'recalculate' feature (Mikulas Patocka)
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)
- io_uring: Fix current->fs handling in io_sq_wq_submit_work() (Nicolai Stange)
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)
- Revert 'mm/slub: fix a memory leak in sysfs_slab_add()' (Wang Hai)
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)
- LTS tag: v5.4.93 (Jack Vogel)
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)
- net: dsa: b53: fix an off by one in checking 'vlan->vid' (Dan Carpenter)
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)
- ipv6: set multicast flag on the multicast route (Matteo Croce)
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)
- lightnvm: fix memory leak when submit fails (Pan Bian)
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohar)
- stm class: Fix module init return on allocation failure (Wang Hui)
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)
- can: peak_usb: fix use after free bugs (Vincent Mailhol)
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar S
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2102.202.5.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2102.202.5.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2102.202.5.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2102.202.5.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2102.202.5.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2102.202.5.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:5.4.17-2102.202.5.el7uek |
| Oracle Linux · 7 | perf | 0:5.4.17-2102.202.5.el7uek |
| Oracle Linux · 7 | python-perf | 0:5.4.17-2102.202.5.el7uek |
Vulnerabilities 5
-
Medium 6.7
Linux Kernel sctp_destroy_sock race condition
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock …
-
Unscored —
In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SC…
-
Unscored —
An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a set_memory_region_test infinite…
-
Unscored —
BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them…
-
Unscored —
An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver …