Skip to content
OpenAdvisories
High ELSA-2021-9621 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Dec 20, 2021 · Updated Dec 20, 2021

Summary

[5.4.17-2136.302.6.1]
- rds/ib: Use both iova and key in free_mr socket call (aru kolappan) [Orabug:33667276]

[5.4.17-2136.302.6]
- Revert fs: align IOCB_* flags with RWF_* flags (Prasad Singamsetty)
[Orabug: 33627551]

[5.4.17-2136.302.5]
- Revert drm: Initialize struct drm_crtc_state.no_vblank from device settings (Somasundaram Krishnasamy) [Orabug: 33611832]
- Revert drm/atomic-helper: reset vblank on crtc reset (Somasundaram Krishnasamy) [Orabug: 33611832]
- net/mlx5: E-Switch, Support flow source for local vport (Hamdan Igbaria) [Orabug: 29444833]
- net/mlx5e: E-Switch, Specify flow_source for rule with no in_port (Jianbo Liu) [Orabug: 29444833]
- net/mlx5e: E-Switch, Add misc bit when misc fields changed for mirroring (Jianbo Liu) [Orabug: 29444833]
- uek-rpm: configs: disable CONFIG_READ_ONLY_THP_FOR_FS (Todd Vierling) [Orabug: 33538583]
- uek-rpm: Remove CONFIG_CC_HAS_WARN_MAYBE_UNINITIALIZED=y and CONFIG_CC_DISABLE_WARN_MAYBE_UNINITIALIZED=y for uek6/u3 (Sherry Yang) [Orabug: 33580598]
- Stop the ad-hoc games with -Wno-maybe-initialized (Linus Torvalds) [Orabug: 33580598]
- x86/clear_page: add alternative for clear_page_clzero() (Ankur Arora) [Orabug: 33580824]
- x86/asm: add clzero based page clearing (Ankur Arora) [Orabug: 33580824]
- x86/cpu/amd: enable X86_FEATURE_NT_GOOD on all AMD Zen models (Ankur Arora) [Orabug: 33580824]
- uek-rpm: Add smartpqi driver module in ueknano kernel (Somasundaram Krishnasamy) [Orabug: 33596873]

[5.4.17-2136.302.4]
- KVM: nSVM: Copy vmcb12 nRIP field to vmcb02 (Maciej S. Szmigiero) [Orabug: 33590307]
- KVM: nSVM: Log nRIP of L1 and L2 guest VMCB in nested VMRUN tracepoint (Maciej S. Szmigiero) [Orabug: 33590307]
- KVM: nSVM: move nested vmrun tracepoint to enter_svm_guest_mode (Maxim Levitsky) [Orabug: 33590307]
- x86/platform/uv: Add uv_hub_info_s to UEK KABI (John Donnelly) [Orabug: 33397019]
- x86/platform/uv: Modify order of fields in uv_hub_info_s to avoid panic (Steve Wahl) [Orabug: 33397019]
- arm64/bpf: remove 128MB limit for BPF JIT programs (Russell King) [Orabug: 33518795]
- kernfs: dont create a negative dentry if inactive node exists (Ian Kent) [Orabug: 33548753]
- kernfs: also call kernfs_set_rev() for positive dentry (Hou Tao) [Orabug: 33548753]
- kernfs: dont call d_splice_alias() under kernfs node lock (Ian Kent) [Orabug: 33548753]
- kernfs: use i_lock to protect concurrent inode updates (Ian Kent) [Orabug: 33548753]
- kernfs: switch kernfs to use an rwsem (Ian Kent) [Orabug: 33548753]
- kernfs: use VFS negative dentry caching (Ian Kent) [Orabug: 33548753]
- kernfs: add a revision to identify directory node changes (Ian Kent) [Orabug: 33548753]
- selftests: breakpoints: Fix a typo of function name (Masami Hiramatsu) [Orabug: 33577735]
- Revert net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Use the same vector for send & receive (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Get rid of tasklets (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Put more CPU cores to work (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Make workers use the designated CPU (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch) [Orabug: 33590962]
- Revert net/mlx5: Add new verb ib_get_vector_irqn (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Add preferred_cpu option to rds_rdma.ko (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Follow the observed CQ CPU affinity (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Throttle check for CQ CPU affinity (Gerd Rausch) [Orabug: 33590962]
- Revert net/rds: Bring tasklets back for better latency (Gerd Rausch) [Orabug: 33590962]
- Revert IB/mlx4: Implement backend callback for ib_get_vector_irqn (Gerd Rausch) [Orabug: 33590962]

[5.4.17-2136.302.2]
- x86, sched: Treat Intel SNC topology as default, COD as exception (Alison Schofield) [Orabug: 32921559]
- x86/kernel: Convert to new CPU match macros (Thomas Gleixner) [Orabug: 32921559]
- net/mlx5: Disable mr_cache for SFs (Mikhael Goikhman) [Orabug: 33523558]
- xfs: punch out data fork delalloc blocks on COW writeback failure (Brian Foster) [Orabug: 33571340]
- scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma() (Dexuan Cui) [Orabug: 33548142]
- uek-rpm: Enable CONFIG_CPU_FREQ_GOV_SCHEDUTIL for x86_64 kernels (Dave Kleikamp) [Orabug: 33564971]

[5.4.17-2136.302.1]
- arm64: Kconfig: enable MADV_DOEXEC functionality (Anthony Yznaga) [Orabug: 33428617]
- bpf: Fix integer overflow in prealloc_elems_and_freelist() (Tatsuhiko Yasumatsu) [Orabug: 33431722] {CVE-2021-41864}
- xen/netfront: stop tx queues during live migration (Dongli Zhang) [Orabug: 33536399]
- Revert xfs: Lower CIL flush limit for large logs (Catherine Hoang) [Orabug: 33536463]
- Revert xfs: Throttle commits on delayed background CIL push (Catherine Hoang) [Orabug: 33536463]
- nfsd: back channel stuck in SEQ4_STATUS_CB_PATH_DOWN (Dai Ngo) [Orabug: 33536966]
- nfsd: handle repeated BIND_CONN_TO_SESSION (J. Bruce Fields) [Orabug: 33536966]
- rds: ib: Fix bug when comp_vector is IB_CQ_FORCE_ZERO_CV (Hakon Bugge) [Orabug: 33538397]

[5.4.17-2136.302.0]
- LTS tag: v5.4.152 (Jack Vogel)
- libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD. (Kate Hsuan)
- silence nfscache allocation warnings with kvzalloc (Rik van Riel)
- perf/x86: Reset destroy callback on event init failure (Anand K Mistry)
- kvm: x86: Add AMD PMU MSRs to msrs_to_save_all[] (Fares Mehanna)
- KVM: do not shrink halt_poll_ns below grow_start (Sergey Senozhatsky)
- tools/vm/page-types: remove dependency on opt_file for idle page tracking (Changbin Du)
- scsi: ses: Retry failed Send/Receive Diagnostic commands (Wen Xiong)
- selftests:kvm: fix get_warnings_count() ignoring fscanf() return warn (Shuah Khan)
- selftests: be sure to make khdr before other targets (Li Zhijia

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.302.6.1.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.302.6.1.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.302.6.1.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.302.6.1.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.302.6.1.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.302.6.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:5.4.17-2136.302.6.1.el7uek
Oracle Linux · 7 perf 0:5.4.17-2136.302.6.1.el7uek
Oracle Linux · 7 python-perf 0:5.4.17-2136.302.6.1.el7uek

Vulnerabilities 1