Skip to content
OpenAdvisories
High ELSA-2022-6610 2 CVEs

Important: kernel security, bug fix, and enhancement update (Oracle Linux 9)

Published Sep 22, 2022 · Updated Sep 22, 2022

Summary

[5.14.0-70.26.1.0.1_0.OL9]
- lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499}

[5.14.0-70.26.1_0.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 < 15.3-1.0.4
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]

[5.14.0-70.26.1_0]
- redhat/configs enable CONFIG_ICE_HWTS (Petr Oros) [2108204 2037974]
- redhat/configs enable CONFIG_ICE_SWITCHDEV (Petr Oros) [2108204 2037974]
- ice: Fix VF not able to send tagged traffic with no VLAN filters (Petr Oros) [2119290 2116964]
- ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2119290 2116964]
- ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2119290 2116964]
- ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2119290 2116964]
- ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2119290 2116964]
- ice: Fix promiscuous mode not turning off (Petr Oros) [2119290 2116964]
- ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2119290 2116964]
- ice: do not setup vlan for loopback VSI (Petr Oros) [2119290 2116964]
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2119290 2116964]
- ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2119290 2116964]
- ice: Fix max VLANs available for VF (Petr Oros) [2119290 2116964]
- ice: change devlink code to read NVM in blocks (Petr Oros) [2119290 2116964]
- ice: Fix memory corruption in VF driver (Petr Oros) [2108204 2037974]
- ice: Fix queue config fail handling (Petr Oros) [2108204 2037974]
- ice: Sync VLAN filtering features for DVM (Petr Oros) [2108204 2037974]
- ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2108204 2037974]
- ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2108204 2037974]
- ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2108204 2037974]
- ice: fix crash when writing timestamp on RX rings (Petr Oros) [2108204 2037974]
- ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2108204 2037974]
- ice: clear stale Tx queue settings before configuring (Petr Oros) [2108204 2037974]
- ice: Fix race during aux device (un)plugging (Petr Oros) [2108204 2037974]
- ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2108204 2037974]
- ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2108204 2037974]
- ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2108204 2037974]
- ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2108204 2037974]
- ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2108204 2037974]
- ice: fix crash in switchdev mode (Petr Oros) [2108204 2037974]
- ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2108204 2037974]
- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2108204 2037974]
- ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2108204 2037974]
- ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2108204 2037974]
- ice: synchronize_rcu() when terminating rings (Petr Oros) [2108204 2037974]
- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2108204 2037974]
- ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2108204 2037974]
- ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2108204 2037974]
- ice: Fix MAC address setting (Petr Oros) [2108204 2037974]
- ice: Clear default forwarding VSI during VSI release (Petr Oros) [2108204 2037974]
- ice: xsk: Fix indexing in ice_tx_xsk_pool() (Petr Oros) [2108204 2037974]
- ice: xsk: Stop Rx processing when ntc catches ntu (Petr Oros) [2108204 2037974]
- ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Petr Oros) [2108204 2037974]
- ice: fix 'scheduling while atomic' on aux critical err interrupt (Petr Oros) [2108204 2037974]
- ice: add trace events for tx timestamps (Petr Oros) [2108204 2037974]
- ice: fix return value check in ice_gnss.c (Petr Oros) [2108204 2037974]
- ice: destroy flow director filter mutex after releasing VSIs (Petr Oros) [2108204 2037974]
- ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Petr Oros) [2108204 2037974]
- ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2108204 2037974]
- ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2108204 2037974]
- ice: cleanup long lines in ice_sriov.c (Petr Oros) [2108204 2037974]
- ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2108204 2037974]
- ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2108204 2037974]
- ice: convert ice_reset_vf to take flags (Petr Oros) [2108204 2037974]
- ice: convert ice_reset_vf to standard error codes (Petr Oros) [2108204 2037974]
- ice: make ice_reset_all_vfs void (Petr Oros) [2108204 2037974]
- ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2108204 2037974]
- ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2108204 2037974]
- ice: fix a long line warning in ice_reset_vf (Petr Oros) [2108204 2037974]
- ice: introduce VF operations structure for reset flows (Petr Oros) [2108204 2037974]
- ice: fix incorrect dev_dbg print mistaking 'i' for vf->vf_id (Petr Oros) [2108204 2037974]
- ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2108204 2037974]
- ice: use ice_is_vf_trusted helper function (Petr Oros) [2108204 2037974]
- ice: log an error message when eswitch fails to configure (Petr Oros) [2108204 2037974]
- ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2108204 2037974]
- ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2108204 2037974]
- ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2108204 2037974]
- ic

Fixed packages 22

ReleasePackageFixed in
Oracle Linux · 9 bpftool 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-abi-stablelists 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-core 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-cross-headers 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-debug 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-debug-core 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-debug-devel 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-debug-devel-matched 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-debug-modules 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-debug-modules-extra 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-devel 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-devel-matched 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-doc 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-headers 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-modules 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-modules-extra 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-tools 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-tools-libs 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 kernel-tools-libs-devel 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 perf 0:5.14.0-70.26.1.0.1.el9_0
Oracle Linux · 9 python3-perf 0:5.14.0-70.26.1.0.1.el9_0

Vulnerabilities 2