Skip to content
OpenAdvisories
High ELSA-2021-9452 11 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 21, 2021 · Updated Sep 21, 2021

Summary

[4.14.35-2047.507.7.4]
- KVM: x86: Check kvm_rebooting in kvm_spurious_fault() (Sean Christopherson) [Orabug: 33362693]

[4.14.35-2047.507.7.3]
- arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Dave Kleikamp) [Orabug: 33354710]

[4.14.35-2047.507.7.2]
- net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Phillip Potter) [Orabug: 33337449]
- ip: Manual backport of pskb_inet_may_pull() (Hakon Bugge) [Orabug: 33337449]
- Revert Revert net: geneve: check skb is large enough for IPv4/IPv6 header (Hakon Bugge) [Orabug: 33337449]

[4.14.35-2047.507.7.1]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306519]
- Revert net: geneve: check skb is large enough for IPv4/IPv6 header (Somasundaram Krishnasamy) [Orabug: 33323390]

[4.14.35-2047.507.7]
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva) [Orabug: 33296813]
- Revert mm: memcontrol: eliminate raw access to stat and event counters (Ritika Srivastava) [Orabug: 33254727]
- Revert mm: memcontrol: implement lruvec stat functions on top of each other (Ritika Srivastava) [Orabug: 33254727]
- KVM: do not allow mapping valid but non-reference-counted pages (Nicholas Piggin) [Orabug: 33054089] {CVE-2021-22543} {CVE-2021-22543}
- ocfs2: issue zeroout to EOF blocks (Junxiao Bi) [Orabug: 32974988]
- ocfs2: fix zero out valid data (Junxiao Bi) [Orabug: 32974988]

[4.14.35-2047.507.6]
- xen-netback: do not kfree_skb() when irq is disabled (Dongli Zhang) [Orabug: 33277336]
- rds: ib: Set SEND_SIGNALED on the last WR posted (Hakon Bugge) [Orabug: 33253068]
- uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi) [Orabug: 33246581]
- scsi: lpfc: Fix crash due to port reset racing vs adapter error handling (James Smart) [Orabug: 33213341]
- xfs: dont drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 33141334]
- xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [Orabug: 33141334]
- Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl (Alexander Larkin) [Orabug: 33114988] {CVE-2021-3612}
- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry) [Orabug: 31372381]
- dsc-drivers: update for 1.15.9-C-32 (Shannon Nelson) [Orabug: 33281086]
- dts/pensando: creating reserved dma memory pool for mnet devices (Neel Patel) [Orabug: 33281086]
- pcie: rm pcie register access message (#256) (Brad Smith) [Orabug: 33281086]
- drivers: updates for 1.15.9-C-28 (Shannon Nelson) [Orabug: 33281086]

[4.14.35-2047.507.5]
- rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire) [Orabug: 33243560]
- KVM: SVM: use vmsave/vmload for saving/restoring additional host state (Michael Roth) [Orabug: 33225761]
- KVM: SVM: Use asm goto to handle unexpected #UD on SVM instructions (Sean Christopherson) [Orabug: 33225761]
- kvm: svm/avic: Do not send AVIC doorbell to self (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm/avic: Fix invalidate logical APIC id entry (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm: Fix improper check when deactivate AVIC (Suthikulpanit, Suravee) [Orabug: 33225761]
- svm: Fix AVIC DFR and LDR handling (Suthikulpanit, Suravee) [Orabug: 33225761]
- scsi: qla2xxx: Add heartbeat check (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Use list_move_tail() instead of list_del()/list_add_tail() (Baokun Li) [Orabug: 33116624]
- scsi: qla2xxx: Remove duplicate declarations (Shaokun Zhang) [Orabug: 33116624]
- scsi: qla2xxx: Log PCI address in qla_nvme_unregister_remote_port() (Daniel Wagner) [Orabug: 33116624]
- scsi: qla2xxx: Remove redundant assignment to rval (Jiapeng Chong) [Orabug: 33116624]
- scsi: qla2xxx: Prevent PRLI in target mode (Anastasia Kovaleva) [Orabug: 33116624]
- scsi: qla2xxx: Add marginal path handling support (Bikash Hazarika) [Orabug: 33116624]
- scsi: qla2xxx: Reserve extra IRQ vectors (Roman Bolshakov) [Orabug: 33116624]
- scsi: qla2xxx: Reuse existing error handling path (Christophe JAILLET) [Orabug: 33116624]
- scsi: qla2xxx: Remove unneeded if-null-free check (Qiheng Lin) [Orabug: 33116624]
- scsi: qla2xxx: Update version to 10.02.00.106-k (Nilesh Javali) [Orabug: 33116624]
- scsi: qla2xxx: Update default AER debug mask (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix mailbox recovery during PCIe error (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix crash in PCIe error handling (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix RISC RESET completion polling (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand() (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Consolidate zio threshold setting for both FCP & NVMe (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Fix stuck session (Quinn Tran) [Orabug: 33116624]
- scsi: qla2xxx: Add H:C:T info in the log message for fc ports (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Fix IOPS drop seen in some adapters (Arun Easi) [Orabug: 33116624]
- scsi: qla2xxx: Check kzalloc() return value (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Simplify qla8044_minidump_process_control() (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Suppress Coverity complaints about dseg_r* (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Fix endianness annotations (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Constify struct qla_tgt_func_tmpl (Bart Van Assche) [Orabug: 33116624]
- scsi: qla2xxx: Use dma_pool_zalloc() (Wang Qing) [Orabug: 33116624]
- scsi: qla2xxx: Fix a couple of misdocumented functions (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix incorrectly named function qla8044_check_temp() (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix a couple of misnamed functions (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Fix some incorrect formatting/spelling issues (Lee Jones) [Orabug: 33116624]
- scsi: qla2xxx: Replace __qla2x00_marker()s missing underscores (Lee Jones) [Orabug: 33116624]
- scsi: qla2x

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 perf 0:4.14.35-2047.507.7.4.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-2047.507.7.4.el7uek

Vulnerabilities 11