Skip to content
OpenAdvisories
High ELSA-2021-9362 10 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jul 16, 2021 · Updated Jul 16, 2021

Summary

[5.4.17-2102.203.5]
- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil) [Orabug: 33044344]

[5.4.17-2102.203.4]
- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil) [Orabug: 32974199]
- Revert Allow mce to reset instead of panic on UE (William Roche) [Orabug: 32820275]
- bpf: Fix masking negation logic upon negative dst register (Daniel Borkmann) [Orabug: 32911990] {CVE-2021-31829}
- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil) [Orabug: 32863585]
- rds/ib: reap tx completions during connection shutdown (Manjunath Patil) [Orabug: 32863585]

[5.4.17-2102.203.3]
- ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum) [Orabug: 32908850]
- ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum) [Orabug: 32908850]
- xfs: fix xlog_finish_defer_ops (Wengang Wang) [Orabug: 32982353]
- scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran) [Orabug: 32989005]
- blk-mq: fix blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957629]
- blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig) [Orabug: 32957629]
- blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei) [Orabug: 32957629]
- blk-mq: add blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957629]
- Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka) [Orabug: 32912099] {CVE-2021-33034}
- perf/x86/intel/uncore: Fix a kernel WARNING triggered by maxcpus=1 (Kan Liang) [Orabug: 32925098]
- net: sched: fix tx action reschedule issue with stopped queue (Yunsheng Lin) [Orabug: 32911885]
- net: sched: fix tx action rescheduling issue during deactivation (Yunsheng Lin) [Orabug: 32911885]
- net: sched: fix packet stuck problem for lockless qdisc (Yunsheng Lin) [Orabug: 32911885]
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed) [Orabug: 32999623]

[5.4.17-2102.203.2]
- LTS tag: v5.4.114 (Jack Vogel)
- net: phy: marvell: fix detection of PHY on Topaz switches (Pali Rohar)
- ARM: 9071/1: uprobes: Dont hook on thumb instructions (Fredrik Strupe)
- r8169: dont advertise pause in jumbo mode (Heiner Kallweit)
- r8169: tweak max read request size for newer chips also in jumbo mtu mode (Heiner Kallweit)
- r8169: improve rtl_jumbo_config (Heiner Kallweit)
- r8169: fix performance regression related to PCIe max read request size (Heiner Kallweit)
- r8169: simplify setting PCI_EXP_DEVCTL_NOSNOOP_EN (Heiner Kallweit)
- r8169: remove fiddling with the PCIe max read request size (Heiner Kallweit)
- arm64: dts: allwinner: Fix SD card CD GPIO for SOPine systems (Andre Przywara)
- ARM: footbridge: fix PCI interrupt mapping (Russell King)
- gro: ensure frag0 meets IP header alignment (Eric Dumazet)
- ibmvnic: remove duplicate napi_schedule call in open function (Lijun Pan)
- ibmvnic: remove duplicate napi_schedule call in do_reset function (Lijun Pan)
- ibmvnic: avoid calling napi_disable() twice (Lijun Pan)
- i40e: fix the panic when running bpf in xdpdrv mode (Jason Xing)
- net: ip6_tunnel: Unregister catch-all devices (Hristo Venev)
- net: sit: Unregister catch-all devices (Hristo Venev)
- net: davicom: Fix regulator not turned off on failed probe (Christophe JAILLET)
- netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)
- net: macb: fix the restore of cmp registers (Claudiu Beznea)
- netfilter: arp_tables: add pre_exit hook for table unregister (Florian Westphal)
- netfilter: bridge: add pre_exit hooks for ebtable unregistration (Florian Westphal)
- libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC (Vaibhav Jain)
- netfilter: conntrack: do not print icmpv6 as unknown via /proc (Pablo Neira Ayuso)
- scsi: libsas: Reset num_scatter if libata marks qc as NODATA (Jolly Shah)
- riscv: Fix spelling mistake SPARSEMEM to SPARSMEM (Kefeng Wang)
- vfio/pci: Add missing range check in vfio_pci_mmap (Christian A. Ehrhardt)
- arm64: alternatives: Move length validation in alternative_{insn, endif} (Nathan Chancellor)
- arm64: fix inline asm in load_unaligned_zeropad() (Peter Collingbourne)
- readdir: make sure to verify directory entry for legacy interfaces too (Linus Torvalds)
- dm verity fec: fix misaligned RS roots IO (Jaegeuk Kim)
- HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (Ping Cheng)
- Input: i8042 - fix Pegatron C15B ID entry (Arnd Bergmann)
- Input: s6sy761 - fix coordinate read bit shift (Caleb Connolly)
- virt_wifi: Return micros for BSS TSF values (A. Cody Schuffelen)
- mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN (Seevalamuthu Mariappan)
- pcnet32: Use pci_resource_len to validate PCI resource (Guenter Roeck)
- net: ieee802154: forbid monitor for add llsec seclevel (Alexander Aring)
- net: ieee802154: stop dump llsec seclevels for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for del llsec devkey (Alexander Aring)
- net: ieee802154: forbid monitor for add llsec devkey (Alexander Aring)
- net: ieee802154: stop dump llsec devkeys for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for del llsec dev (Alexander Aring)
- net: ieee802154: forbid monitor for add llsec dev (Alexander Aring)
- net: ieee802154: stop dump llsec devs for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for del llsec key (Alexander Aring)
- net: ieee802154: forbid monitor for add llsec key (Alexander Aring)
- net: ieee802154: stop dump llsec keys for monitors (Alexander Aring)
- scsi: scsi_transport_srp: Dont block target in SRP_PORT_LOST state (Martin Wilck)
- ASoC: fsl_esai: Fix TDM slot setup for I2S mode (Alexander Shiyan)
- drm/msm: Fix a5xx/a6xx timestamps (Rob Clark)
- ARM: omap1: fix building with clang IAS (Arnd Bergmann)
- ARM: keystone: fix integer overflow warning (Arnd Bergmann)
- neighbour: Disregard DEAD dst in neigh_update (Tong Zhu)
- ASoC: max98373: Added 30ms turn on/off time delay (Ryan Le

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2102.203.5.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2102.203.5.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2102.203.5.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2102.203.5.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2102.203.5.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2102.203.5.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:5.4.17-2102.203.5.el7uek
Oracle Linux · 7 perf 0:5.4.17-2102.203.5.el7uek
Oracle Linux · 7 python-perf 0:5.4.17-2102.203.5.el7uek

Vulnerabilities 10