Skip to content
OpenAdvisories
High ELSA-2021-9451 6 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

Published Sep 16, 2021 · Updated Sep 16, 2021

Summary

[5.4.17-2102.205.7.2.el7]
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana) [Orabug: 33349276]

[5.4.17-2102.205.7.1]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306518]

[5.4.17-2102.205.7]
- rds: ib: Set SEND_SIGNALED on the last WR posted (Hakon Bugge) [Orabug: 33253169]
- vfio/pci: (fixup) Handle concurrent vma faults (Ankur Arora) [Orabug: 33200737] [Orabug: 33187733]

[5.4.17-2102.205.6]
- xfs: dont drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 33241131]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [Orabug: 33241131]
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry) [Orabug: 31372379]

[5.4.17-2102.205.5]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Maxim Levitsky) [Orabug: 33226010] {CVE-2021-3653}
- Revert KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Liam Merwick) [Orabug: 33226010] {CVE-2021-3653}
- LTS tag: v5.4.140 (Jack Vogel)
- arm64: fix compat syscall return truncation (Mark Rutland)
- net/qla3xxx: fix schedule while atomic in ql_wait_for_drvr_lock and ql_adapter_reset (Letu Ren)
- alpha: Send stop IPI to send to online CPUs (Prarit Bhargava)
- virt_wifi: fix error on connect (Matteo Croce)
- reiserfs: check directory items on read from disk (Shreyansh Chouhan)
- reiserfs: add check for root_inode in reiserfs_fill_super (Yu Kuai)
- libata: fix ata_pio_sector for CONFIG_HIGHMEM (Christoph Hellwig)
- bpf, selftests: Adjust few selftest result_unpriv outcomes (Daniel Borkmann)
- soc: ixp4xx/qmgr: fix invalid __iomem access (Arnd Bergmann)
- spi: meson-spicc: fix memory leak in meson_spicc_remove (Dongliang Mu)
- soc: ixp4xx: fix printing resources (Arnd Bergmann)
- arm64: vdso: Avoid ISB after reading from cntvct_el0 (Will Deacon)
- KVM: x86/mmu: Fix per-cpu counter corruption on 32-bit builds (Sean Christopherson)
- KVM: Do not leak memory for duplicate debugfs directories (Paolo Bonzini)
- KVM: x86: accept userspace interrupt only if no event is injected (Paolo Bonzini)
- md/raid10: properly indicate failure when ending a failed write request (Wei Shuyu)
- pcmcia: i82092: fix a null pointer dereference bug (Zheyu Ma)
- timers: Move clearing of base::timer_running under base:: Lock (Thomas Gleixner)
- serial: 8250_pci: Avoid irq sharing for MSI(-X) interrupts. (Mario Kleiner)
- serial: 8250_pci: Enumerate Elkhart Lake UARTs via dedicated driver (Andy Shevchenko)
- MIPS: Malta: Do not byte-swap accesses to the CBUS UART (Maciej W. Rozycki)
- serial: 8250: Mask out floating 16/32-bit bus bits (Maciej W. Rozycki)
- serial: 8250_mtk: fix uart corruption issue when rx power off (Zhiyong Tao)
- serial: tegra: Only print FIFO error message when an error occurs (Jon Hunter)
- ext4: fix potential htree corruption when growing large_dir directories (Theodore Tso)
- pipe: increase minimum default pipe size to 2 pages (Alex Xu (Hello71))
- media: rtl28xxu: fix zero-length control request (Johan Hovold)
- staging: rtl8712: get rid of flush_scheduled_work (Pavel Skripkin)
- staging: rtl8723bs: Fix a resource leak in sd_int_dpc (Xiangyang Zhang)
- tpm_ftpm_tee: Free and unregister TEE shared memory during kexec (Tyler Hicks)
- optee: Fix memory leak when failing to register shm pages (Tyler Hicks)
- tee: add tee_shm_alloc_kernel_buf() (Jens Wiklander)
- optee: Clear stale cache entries during initialization (Tyler Hicks)
- tracing / histogram: Give calculation hist_fields a size (Steven Rostedt (VMware))
- scripts/tracing: fix the bug that cant parse raw_trace_func (Hui Su)
- clk: fix leak on devm_clk_bulk_get_all() unwind (Brian Norris)
- usb: otg-fsm: Fix hrtimer list corruption (Dmitry Osipenko)
- usb: gadget: f_hid: idle uses the highest byte for duration (Maxim Devaev)
- usb: gadget: f_hid: fixed NULL pointer dereference (Phil Elwell)
- usb: gadget: f_hid: added GET_IDLE and SET_IDLE handlers (Maxim Devaev)
- usb: cdns3: Fixed incorrect gadget state (Pawel Laszczak)
- ALSA: usb-audio: Add registration quirk for JBL Quantum 600 (Alexander Tsoy)
- ALSA: hda/realtek: add mic quirk for Acer SF314-42 (Alexander Monakov)
- firmware_loader: fix use-after-free in firmware_fallback_sysfs (Anirudh Rayabharam)
- firmware_loader: use -ETIMEDOUT instead of -EAGAIN in fw_load_sysfs_fallback (Anirudh Rayabharam)
- USB: serial: ftdi_sio: add device ID for Auto-M3 OP-COM v2 (David Bauer)
- USB: serial: ch341: fix character loss at high transfer rates (Willy Tarreau)
- USB: serial: option: add Telit FD980 composition 0x1056 (Daniele Palmas)
- USB: usbtmc: Fix RCU stall warning (Qiang.zhang)
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) {CVE-2021-3573}
- blk-iolatency: error out if blk_get_queue() failed in iolatency_set_limit() (Yu Kuai)
- net: vxge: fix use-after-free in vxge_device_unregister (Pavel Skripkin)
- net: fec: fix use-after-free in fec_drv_remove (Pavel Skripkin)
- net: pegasus: fix uninit-value in get_interrupt_interval (Pavel Skripkin)
- bnx2x: fix an error code in bnx2x_nic_load() (Dan Carpenter)
- mips: Fix non-POSIX regexp (H. Nikolaus Schaller)
- net: ipv6: fix returned variable type in ip6_skb_dst_mtu (Antoine Tenart)
- nfp: update ethtool reporting of pauseframe control (Fei Qin)
- sctp: move the active_key update after sh_keys is added (Xin Long)
- gpio: tqmx86: really make IRQ optional (Matthias Schiffer)
- net: natsemi: Fix missing pci_disable_device() in probe and remove (Wang Hai)
- net: phy: micrel: Fix detection of ksz87xx switch (Steve Bennett)
- net: dsa: sja1105: invalidate dynamic FDB entries learned concurrently with statically added ones (Vladimir Oltean)
- net: dsa: sja1105: overwrite dynamic FDB entries with static ones in .port_fdb_add (Vladimir Oltean)
- net, gro: Set inner transport header offset in tcp/udp GRO hook (Jakub Sitnicki)
- dmaengine: imx-dma: configure the gen

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2102.205.7.2.el8
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2102.205.7.2.el8

Vulnerabilities 6