Summary
[5.14.0-70.30.1.0.1_0.OL9]
- lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499}
[5.14.0-70.30.1_0.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 < 15.3-1.0.4
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
[5.14.0-70.30.1_0]
- random: trigger reseeding DRBG on more occasions (Daiki Ueno) [2128970 2125257]
- random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121129 2114854]
- nvme-tcp: handle number of queue changes (John Meneghini) [2131360 2112025]
- nvmet: expose max queues to configfs (John Meneghini) [2131360 2112025]
- nvme-fabrics: parse nvme connect Linux error codes (John Meneghini) [2131360 2112025]
- nvmet: revert 'nvmet: make discovery NQN configurable' (Gopal Tiwari) [2131360 2066146]
- vfio/type1: Unpin zero pages (Alex Williamson) [2128791 2121855]
- cifs: fix bad fids sent over wire (Ronnie Sahlberg) [2127858 2088775]
- SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op (Ronnie Sahlberg) [2127858 2088775]
- cifs: verify that tcon is valid before dereference in cifs_kill_sb (Ronnie Sahlberg) [2127858 2048823]
- cifs: release cached dentries only if mount is complete (Ronnie Sahlberg) [2127858 2048823]
- cifs: we do not need a spinlock around the tree access during umount (Ronnie Sahlberg) [2127858 2048823]
- cifs: fix handlecache and multiuser (Ronnie Sahlberg) [2127858 2048823]
- cifs: fix workstation_name for multiuser mounts (Ronnie Sahlberg) [2127858 2048823]
- cifs: free ntlmsspblob allocated in negotiate (Ronnie Sahlberg) [2127858 2048823]
- cifs: fix ntlmssp auth when there is no key exchange (Ronnie Sahlberg) [2127858 2048823]
- cifs: send workstation name during ntlmssp session setup (Ronnie Sahlberg) [2127858 2048823]
- cifs: Fix crash on unload of cifs_arc4.ko (Ronnie Sahlberg) [2127858 2048823]
- Documentation, arch: Remove leftovers from CIFS_WEAK_PW_HASH (Ronnie Sahlberg) [2127858 2048823]
- cifs: fix the cifs_reconnect path for DFS (Ronnie Sahlberg) [2127858 2048823]
- cifs: sanitize multiple delimiters in prepath (Ronnie Sahlberg) [2127858 2048823]
- cifs: ignore resource_id while getting fscache super cookie (Ronnie Sahlberg) [2127858 2048823]
- cifs: avoid use of dstaddr as key for fscache client cookie (Ronnie Sahlberg) [2127858 2048823]
- cifs: add server conn_id to fscache client cookie (Ronnie Sahlberg) [2127858 2048823]
- cifs: wait for tcon resource_id before getting fscache super (Ronnie Sahlberg) [2127858 2048823]
- cifs: fix missed refcounting of ipc tcon (Ronnie Sahlberg) [2127858 2048823]
- cifs: update internal version number (Ronnie Sahlberg) [2127858 2048823]
- smb2: clarify rc initialization in smb2_reconnect (Ronnie Sahlberg) [2127858 2048823]
- cifs: populate server_hostname for extra channels (Ronnie Sahlberg) [2127858 2048823]
- cifs: nosharesock should be set on new server (Ronnie Sahlberg) [2127858 2048823]
- cifs: introduce cifs_ses_mark_for_reconnect() helper (Ronnie Sahlberg) [2127858 2048823]
- cifs: protect srv_count with cifs_tcp_ses_lock (Ronnie Sahlberg) [2127858 2048823]
- cifs: move debug print out of spinlock (Ronnie Sahlberg) [2127858 2048823]
- cifs: do not duplicate fscache cookie for secondary channels (Ronnie Sahlberg) [2127858 2048823]
- cifs: connect individual channel servers to primary channel server (Ronnie Sahlberg) [2127858 2048823]
- cifs: protect session channel fields with chan_lock (Ronnie Sahlberg) [2127858 2048823]
- cifs: do not negotiate session if session already exists (Ronnie Sahlberg) [2127858 2048823]
- smb3: do not setup the fscache_super_cookie until fsinfo initialized (Ronnie Sahlberg) [2127858 2048823]
- cifs: fix potential use-after-free bugs (Ronnie Sahlberg) [2127858 2048823]
- cifs: fix memory leak of smb3_fs_context_dup::server_hostname (Ronnie Sahlberg) [2127858 2048823]
- smb3: add additional null check in SMB311_posix_mkdir (Ronnie Sahlberg) [2127858 2048823]
- cifs: release lock earlier in dequeue_mid error case (Ronnie Sahlberg) [2127858 2048823]
- smb3: add additional null check in SMB2_tcon (Ronnie Sahlberg) [2127858 2048823]
- smb3: add additional null check in SMB2_open (Ronnie Sahlberg) [2127858 2048823]
- smb3: add additional null check in SMB2_ioctl (Ronnie Sahlberg) [2127858 2048823]
- smb3: remove trivial dfs compile warning (Ronnie Sahlberg) [2127858 2048823]
- cifs: support nested dfs links over reconnect (Ronnie Sahlberg) [2127858 2048823]
- smb3: do not error on fsync when readonly (Ronnie Sahlberg) [2127858 2048823]
- cifs: for compound requests, use open handle if possible (Ronnie Sahlberg) [2127858 2048823]
- cifs: set a minimum of 120s for next dns resolution (Ronnie Sahlberg) [2127858 2048823]
- cifs: split out dfs code from cifs_reconnect() (Ronnie Sahlberg) [2127858 2048823]
- cifs: convert list_for_each to entry variant (Ronnie Sahlberg) [2127858 2048823]
- cifs: introduce new helper for cifs_reconnect() (Ronnie Sahlberg) [2127858 2048823]
- cifs: fix print of hdr_flags in dfscache_proc_show() (Ronnie Sahlberg) [2127858 2048823]
- cifs: nosharesock should not share socket with future sessions (Ronnie Sahlberg) [2127858 2048823]
- smb3: add dynamic trace points for socket connection (Ronnie Sahlberg) [2127858 2048823]
- cifs: Move SMB2_Create definitions to the shared area (Ronnie Sahlberg) [2127858 2048823]
- cifs: Move more definitions into the shared area (Ronnie Sahlberg) [2127858 2048823]
- cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Ronnie Sahlberg) [2127858 2048823]
- cifs: Create a new shared file holding smb2 pdu definitions (Ronnie Sahlberg) [2127858 2048823]
- cifs: add mount parameter tcpnodelay (Ronnie Sahlberg) [2127858 2048823]
- cifs: To match file servers, make sur
Fixed packages 22
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | bpftool | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-abi-stablelists | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-core | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-cross-headers | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-debug | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-debug-core | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-debug-devel | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-debug-devel-matched | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-debug-modules | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-debug-modules-extra | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-devel | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-devel-matched | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-doc | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-headers | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-modules | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-modules-extra | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-tools | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-tools-libs | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | kernel-tools-libs-devel | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | perf | 0:5.14.0-70.30.1.0.1.el9_0 |
| Oracle Linux · 9 | python3-perf | 0:5.14.0-70.30.1.0.1.el9_0 |
Vulnerabilities 2
-
Medium 5.3
It was discovered that when exec'ing from a non-leader thread, armed POSIX CPU timers would be left on a list but freed…
-
Unscored —CVE-2022-30594 Public exploit
The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass in…