Skip to content
OpenAdvisories
High ELSA-2021-9307 5 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

Published Jun 15, 2021 · Updated Jun 15, 2021

Summary

[5.4.17-2102.202.5]
- sctp: delay auto_asconf init until binding the first addr (Xin Long) [Orabug: 32907967] {CVE-2021-23133}
- dm ioctl: fix out of bounds array access when no devices (Mikulas Patocka) [Orabug: 32860491] {CVE-2021-31916}
- uek-rpm: update kABI lists for the new symbols (Saeed Mirzamohammadi) [Orabug: 32883836]
- md/raid1: properly indicate failure when ending a failed write request (Paul Clements) [Orabug: 32888143]
- scsi: lpfc: Fix DMA virtual address ptr assignment in bsg (James Smart) [Orabug: 32827840]

[5.4.17-2102.202.4]
- uek-rpm: Update missing configs as compared to OL8.4 RHCK (Saeed Mirzamohammadi) [Orabug: 32837542]
- video: hyperv_fb: Add ratelimit on error message (Michael Kelley) [Orabug: 32867569]
- Drivers: hv: vmbus: Initialize unload_event statically (Andrea Parri (Microsoft)) [Orabug: 32867569]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Michael Kelley) [Orabug: 32867569]
- uek-rpm: Remove hwcap directive and /etc/ld.so.conf.d/*.conf file (Victor Erminpour) [Orabug: 32816428]

[5.4.17-2102.202.3]
- LTS tag: v5.4.94 (Jack Vogel)
- fs: fix lazytime expiration handling in __writeback_single_inode() (Eric Biggers)
- writeback: Drop I_DIRTY_TIME_EXPIRE (Jan Kara)
- dm integrity: conditionally disable 'recalculate' feature (Mikulas Patocka)
- tools: Factor HOSTCC, HOSTLD, HOSTAR definitions (Jean-Philippe Brucker)
- SMB3.1.1: do not log warning message if server doesn't populate salt (Steve French)
- arm64: mm: use single quantity to represent the PA to VA translation (Ard Biesheuvel)
- tracing: Fix race in trace_open and buffer resize call (Gaurav Kohli)
- io_uring: Fix current->fs handling in io_sq_wq_submit_work() (Nicolai Stange)
- HID: wacom: Correct NULL dereference on AES pen proximity (Jason Gerecke)
- Revert 'mm/slub: fix a memory leak in sysfs_slab_add()' (Wang Hai)
- gpio: mvebu: fix pwm .get_state period calculation (Baruch Siach)
- LTS tag: v5.4.93 (Jack Vogel)
- tcp: fix TCP_USER_TIMEOUT with zero window (Enke Chen)
- net: dsa: b53: fix an off by one in checking 'vlan->vid' (Dan Carpenter)
- net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled (Tariq Toukan)
- net: mscc: ocelot: allow offloading of bridge on top of LAG (Vladimir Oltean)
- ipv6: set multicast flag on the multicast route (Matteo Croce)
- net_sched: reject silly cell_log in qdisc_get_rtab() (Eric Dumazet)
- net_sched: avoid shift-out-of-bounds in tcindex_set_parms() (Eric Dumazet)
- ipv6: create multicast route with RTPROT_KERNEL (Matteo Croce)
- udp: mask TOS bits in udp_v4_early_demux() (Guillaume Nault)
- kasan: fix incorrect arguments passing in kasan_add_zero_shadow (Lecopzer Chen)
- kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow (Lecopzer Chen)
- skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too (Alexander Lobakin)
- lightnvm: fix memory leak when submit fails (Pan Bian)
- sh_eth: Fix power down vs. is_opened flag ordering (Geert Uytterhoeven)
- net: dsa: mv88e6xxx: also read STU state in mv88e6250_g1_vtu_getnext (Rasmus Villemoes)
- sh: dma: fix kconfig dependency for G2_DMA (Necip Fazil Yildiran)
- netfilter: rpfilter: mask ecn bits before fib lookup (Guillaume Nault)
- x86/cpu/amd: Set __max_die_per_package on AMD (Yazen Ghannam)
- pinctrl: ingenic: Fix JZ4760 support (Paul Cercueil)
- driver core: Extend device_is_dependent() (Rafael J. Wysocki)
- xhci: tegra: Delay for disabling LFPS detector (JC Kuo)
- xhci: make sure TRB is fully written before giving it to the controller (Mathias Nyman)
- usb: bdc: Make bdc pci driver depend on BROKEN (Patrik Jakobsson)
- usb: udc: core: Use lock when write to soft_connect (Thinh Nguyen)
- usb: gadget: aspeed: fix stop dma register setting. (Ryan Chen)
- USB: ehci: fix an interrupt calltrace error (Longfang Liu)
- ehci: fix EHCI host controller initialization sequence (Eugene Korenevsky)
- serial: mvebu-uart: fix tx lost characters at power off (Pali Rohar)
- stm class: Fix module init return on allocation failure (Wang Hui)
- intel_th: pci: Add Alder Lake-P support (Alexander Shishkin)
- x86/mmx: Use KFPU_387 for MMX string operations (Andy Lutomirski)
- x86/topology: Make __max_die_per_package available unconditionally (Borislav Petkov)
- x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state (Andy Lutomirski)
- irqchip/mips-cpu: Set IPI domain parent chip (Mathias Kresin)
- cifs: do not fail __smb_send_rqst if non-fatal signals are pending (Ronnie Sahlberg)
- iio: ad5504: Fix setting power-down state (Lars-Peter Clausen)
- can: peak_usb: fix use after free bugs (Vincent Mailhol)
- can: vxcan: vxcan_xmit: fix use after free bug (Vincent Mailhol)
- can: dev: can_restart: fix use after free bug (Vincent Mailhol)
- selftests: net: fib_tests: remove duplicate log test (Hangbin Liu)
- platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list (Hans de Goede)
- i2c: octeon: check correct size of maximum RECV_LEN packet (Wolfram Sang)
- powerpc: Fix alignment bug within the init sections (Ariel Marcovitch)
- scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression (Arnd Bergmann)
- pinctrl: aspeed: g6: Fix PWMG0 pinctrl setting (Billy Tsai)
- powerpc: Use the common INIT_DATA_SECTION macro in vmlinux.lds.S (Youling Tang)
- drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0 (Ben Skeggs)
- drm/nouveau/mmu: fix vram heap sizing (Ben Skeggs)
- drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields (Ben Skeggs)
- drm/nouveau/privring: ack interrupts the same way as RM (Ben Skeggs)
- drm/nouveau/bios: fix issue shadowing expansion ROMs (Ben Skeggs)
- drm/amd/display: Fix to be able to stop crc calculation (Wayne Lin)
- drm/amdgpu/psp: fix psp gfx ctrl cmds (Victor Zhao)
- riscv: defconfig: enable gpio support for HiFive Unleashed (Sagar Shrikant Kadam)
- dts: phy: fix missing mdio device and probe failure of vsc8541-01 device (Sagar Shrikant Kadam)
- x86/x

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2102.202.5.el8
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2102.202.5.el8

Vulnerabilities 5