Summary
[5.4.17-2102.203.5]
- rds/ib: move rds_ib_clear_irq_miss() to .h file (Manjunath Patil) [Orabug: 33044344]
[5.4.17-2102.203.4]
- rds/ib: recover rds connection from interrupt loss scenario (Manjunath Patil) [Orabug: 32974199]
- Revert Allow mce to reset instead of panic on UE (William Roche) [Orabug: 32820275]
- bpf: Fix masking negation logic upon negative dst register (Daniel Borkmann) [Orabug: 32911990] {CVE-2021-31829}
- rds/ib: handle posted ACK during connection shutdown (Manjunath Patil) [Orabug: 32863585]
- rds/ib: reap tx completions during connection shutdown (Manjunath Patil) [Orabug: 32863585]
[5.4.17-2102.203.3]
- ksplice: use -fno-reorder-functions -fno-section-anchors (Vegard Nossum) [Orabug: 32908850]
- ksplice: fixup for -ffunction-sections -fdata-sections (Vegard Nossum) [Orabug: 32908850]
- xfs: fix xlog_finish_defer_ops (Wengang Wang) [Orabug: 32982353]
- scsi: qla2xxx: Do logout even if fabric scan retries got exhausted (Quinn Tran) [Orabug: 32989005]
- blk-mq: fix blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957629]
- blk-mq: split out a __blk_mq_get_driver_tag helper (Christoph Hellwig) [Orabug: 32957629]
- blk-mq: drain I/O when all CPUs in a hctx are offline (Ming Lei) [Orabug: 32957629]
- blk-mq: add blk_mq_all_tag_iter (Ming Lei) [Orabug: 32957629]
- Bluetooth: verify AMP hci_chan before amp_destroy (Archie Pusaka) [Orabug: 32912099] {CVE-2021-33034}
- perf/x86/intel/uncore: Fix a kernel WARNING triggered by maxcpus=1 (Kan Liang) [Orabug: 32925098]
- net: sched: fix tx action reschedule issue with stopped queue (Yunsheng Lin) [Orabug: 32911885]
- net: sched: fix tx action rescheduling issue during deactivation (Yunsheng Lin) [Orabug: 32911885]
- net: sched: fix packet stuck problem for lockless qdisc (Yunsheng Lin) [Orabug: 32911885]
- scsi: bnx2fc: Return failure if io_req is already in ABTS processing (Gulam Mohamed) [Orabug: 32999623]
[5.4.17-2102.203.2]
- LTS tag: v5.4.114 (Jack Vogel)
- net: phy: marvell: fix detection of PHY on Topaz switches (Pali Rohar)
- ARM: 9071/1: uprobes: Dont hook on thumb instructions (Fredrik Strupe)
- r8169: dont advertise pause in jumbo mode (Heiner Kallweit)
- r8169: tweak max read request size for newer chips also in jumbo mtu mode (Heiner Kallweit)
- r8169: improve rtl_jumbo_config (Heiner Kallweit)
- r8169: fix performance regression related to PCIe max read request size (Heiner Kallweit)
- r8169: simplify setting PCI_EXP_DEVCTL_NOSNOOP_EN (Heiner Kallweit)
- r8169: remove fiddling with the PCIe max read request size (Heiner Kallweit)
- arm64: dts: allwinner: Fix SD card CD GPIO for SOPine systems (Andre Przywara)
- ARM: footbridge: fix PCI interrupt mapping (Russell King)
- gro: ensure frag0 meets IP header alignment (Eric Dumazet)
- ibmvnic: remove duplicate napi_schedule call in open function (Lijun Pan)
- ibmvnic: remove duplicate napi_schedule call in do_reset function (Lijun Pan)
- ibmvnic: avoid calling napi_disable() twice (Lijun Pan)
- i40e: fix the panic when running bpf in xdpdrv mode (Jason Xing)
- net: ip6_tunnel: Unregister catch-all devices (Hristo Venev)
- net: sit: Unregister catch-all devices (Hristo Venev)
- net: davicom: Fix regulator not turned off on failed probe (Christophe JAILLET)
- netfilter: nft_limit: avoid possible divide error in nft_limit_init (Eric Dumazet)
- net: macb: fix the restore of cmp registers (Claudiu Beznea)
- netfilter: arp_tables: add pre_exit hook for table unregister (Florian Westphal)
- netfilter: bridge: add pre_exit hooks for ebtable unregistration (Florian Westphal)
- libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC (Vaibhav Jain)
- netfilter: conntrack: do not print icmpv6 as unknown via /proc (Pablo Neira Ayuso)
- scsi: libsas: Reset num_scatter if libata marks qc as NODATA (Jolly Shah)
- riscv: Fix spelling mistake SPARSEMEM to SPARSMEM (Kefeng Wang)
- vfio/pci: Add missing range check in vfio_pci_mmap (Christian A. Ehrhardt)
- arm64: alternatives: Move length validation in alternative_{insn, endif} (Nathan Chancellor)
- arm64: fix inline asm in load_unaligned_zeropad() (Peter Collingbourne)
- readdir: make sure to verify directory entry for legacy interfaces too (Linus Torvalds)
- dm verity fec: fix misaligned RS roots IO (Jaegeuk Kim)
- HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices (Ping Cheng)
- Input: i8042 - fix Pegatron C15B ID entry (Arnd Bergmann)
- Input: s6sy761 - fix coordinate read bit shift (Caleb Connolly)
- virt_wifi: Return micros for BSS TSF values (A. Cody Schuffelen)
- mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN (Seevalamuthu Mariappan)
- pcnet32: Use pci_resource_len to validate PCI resource (Guenter Roeck)
- net: ieee802154: forbid monitor for add llsec seclevel (Alexander Aring)
- net: ieee802154: stop dump llsec seclevels for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for del llsec devkey (Alexander Aring)
- net: ieee802154: forbid monitor for add llsec devkey (Alexander Aring)
- net: ieee802154: stop dump llsec devkeys for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for del llsec dev (Alexander Aring)
- net: ieee802154: forbid monitor for add llsec dev (Alexander Aring)
- net: ieee802154: stop dump llsec devs for monitors (Alexander Aring)
- net: ieee802154: forbid monitor for del llsec key (Alexander Aring)
- net: ieee802154: forbid monitor for add llsec key (Alexander Aring)
- net: ieee802154: stop dump llsec keys for monitors (Alexander Aring)
- scsi: scsi_transport_srp: Dont block target in SRP_PORT_LOST state (Martin Wilck)
- ASoC: fsl_esai: Fix TDM slot setup for I2S mode (Alexander Shiyan)
- drm/msm: Fix a5xx/a6xx timestamps (Rob Clark)
- ARM: omap1: fix building with clang IAS (Arnd Bergmann)
- ARM: keystone: fix integer overflow warning (Arnd Bergmann)
- neighbour: Disregard DEAD dst in neigh_update (Tong Zhu)
- ASoC: max98373: Added 30ms turn on/off time delay (Ryan Le
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2102.203.5.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2102.203.5.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2102.203.5.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2102.203.5.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2102.203.5.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2102.203.5.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:5.4.17-2102.203.5.el7uek |
| Oracle Linux · 7 | perf | 0:5.4.17-2102.203.5.el7uek |
| Oracle Linux · 7 | python-perf | 0:5.4.17-2102.203.5.el7uek |
Vulnerabilities 10
-
Medium 6.7
Linux Kernel sctp_destroy_sock race condition
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock …
-
Unscored —
User application could potentially make RPC call to the fastrpc driver and the driver will allow the message to go thro…
-
Unscored —
A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might le…
-
Unscored —
A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which mi…
-
Unscored —
A memory leak vulnerability was found in Linux kernel in llcp_sock_connect
-
Unscored —CVE-2021-29155 Public exploit
An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds sp…
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure …
-
Unscored —CVE-2021-32399 Public exploit
net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.
-
Unscored —
The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and …
-
Unscored —CVE-2021-33034 Public exploit
In the Linux kernel before 5.12.4, net/bluetooth/hci_event.c has a use-after-free when destroying an hci_chan, aka CID-…