Summary
[5.15.0-0.30.19]
- net/mlx4: Increase num_srq in low_mem_profile (Dave Kleikamp) [Orabug: 34052160]
[5.15.0-0.30.18]
- Revert ocfs2: mount shared volume without ha stack (Junxiao Bi) [Orabug: 33701900]
- KVM: x86/speculation: Disable Fill buffer clear within guests (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Pawan Gupta) [Orabug: 34202258] {CVE-2022-21123} {CVE-2022-21127} {CVE-2022-21125} {CVE-2022-21166}
[5.15.0-0.30.17]
- uek-rpm: New shim versions and secureboot certs (Jack Vogel) [Orabug: 34219956]
[5.15.0-0.30.16]
- perf: Correct the label position in perf_event_open (Jack Vogel) [Orabug: 34172708]
[5.15.0-0.30.15]
- sched: Fix non-CONFIG_SCHED_CORE build (Boris Ostrovsky) [Orabug: 34228424]
[5.15.0-0.30.14]
- lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34152698] {CVE-2022-21499}
- io_uring: fix race between timeout flush and removal (Jens Axboe) [Orabug: 34115159] {CVE-2022-29582}
- kvm/x86: Inherit userspaces core scheduling cookie (Boris Ostrovsky) [Orabug: 34195867]
- vhost: Inherit userspaces core scheduling cookie (Boris Ostrovsky) [Orabug: 34195867]
- sched: Add interface for copying core scheduling cookie between two tasks (Boris Ostrovsky) [Orabug: 34195867]
- KVM: x86: avoid calling x86 emulator without a decoded instruction (Sean Christopherson) [Orabug: 34205798] {CVE-2022-1852} {CVE-2022-1852}
- uek-rpm: Added squashfs module to core rpm for kdump (Vijayendra Suman) [Orabug: 34206290]
- uek-rpm: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Harshit Mogalapalli) [Orabug: 34209438]
[5.15.0-0.30.13]
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34172708] {CVE-2022-1729}
- uek-rpm: Enable dependencies needed by CONFIG_SND_SOC_INTEL_HDA_DSP_COMMON (Brian Maly) [Orabug: 33711352]
[5.15.0-0.30.12]
- docs: kdump: Update the crashkernel description for arm64 (Zhen Lei) [Orabug: 34052160]
- of: fdt: Add memory for devices by DT property linux,usable-memory-range (Chen Zhou) [Orabug: 34052160]
- arm64: kdump: Reimplement crashkernel=X (Chen Zhou) [Orabug: 34052160]
- arm64: Use insert_resource() to simplify code (Zhen Lei) [Orabug: 34052160]
- kdump: return -ENOENT if required cmdline option does not exist (Zhen Lei) [Orabug: 34052160]
- Revert x86: kdump: replace the hard-coded alignment with macro CRASH_ALIGN (Dave Kleikamp) [Orabug: 34052160]
- Revert x86: kdump: make the lower bound of crash kernel reservation consistent (Dave Kleikamp) [Orabug: 34052160]
- Revert x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel() (Dave Kleikamp) [Orabug: 34052160]
- Revert x86: kdump: move xen_pv_domain() check and insert_resource() to setup_arch() (Dave Kleikamp) [Orabug: 34052160]
- Revert x86: kdump: move reserve_crashkernel[_low]() into crash_core.c (Dave Kleikamp) [Orabug: 34052160]
- Revert x86/elf: Move vmcore_elf_check_arch_cross to arch/x86/include/asm/elf.h (Dave Kleikamp) [Orabug: 34052160]
- Revert arm64: kdump: introduce some macroes for crash kernel reservation (Dave Kleikamp) [Orabug: 34052160]
- Revert arm64: kdump: reimplement crashkernel=X (Dave Kleikamp) [Orabug: 34052160]
- Revert x86, arm64: Add ARCH_WANT_RESERVE_CRASH_KERNEL config (Dave Kleikamp) [Orabug: 34052160]
- Revert kdump: update Documentation about crashkernel (Dave Kleikamp) [Orabug: 34052160]
- uek-rpm: Add modules required to pass selinux-testsuites to core rpm (Somasundaram Krishnasamy) [Orabug: 34129238]
- uek-rpm: configs: enable 9P_FS for x86_64 (Todd Vierling) [Orabug: 34146029]
- uek-rpm: Add modules to allow podman tests to run on core kernel. (Somasundaram Krishnasamy) [Orabug: 34123777]
[5.15.0-0.30.11]
- uek: kabi: Update kABI files and enable the kABI checker (Saeed Mirzamohammadi) [Orabug: 34044324]
- Revert rds/ib: recover rds connection from stuck tx path (Nagappan Ramasamy Palaniappan) [Orabug: 34115603]
- Revert rds/ib: reap tx completions during connection shutdown (Nagappan Ramasamy Palaniappan) [Orabug: 34115603]
- Revert rds/ib: handle posted ACK during connection shutdown (Nagappan Ramasamy Palaniappan) [Orabug: 34115603]
[5.15.0-0.30.10]
- xfs, iomap: limit individual ioend chain lengths in writeback (Dave Chinner) [Orabug: 34085022]
- xfs: only bother with sync_filesystem during readonly remount (Darrick J. Wong) [Orabug: 34085022]
- vfs: make sync_filesystem return errors from ->sync_fs (Darrick J. Wong) [Orabug: 34085022]
- xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (Darrick J. Wong) [Orabug: 34085022]
- xfs:
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-0.30.19.el8uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-0.30.19.el8uek |
Vulnerabilities 6
-
Medium 5.5
usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c in the Linux kernel through 5.17.1 has a double free.
-
Unscored —
A NULL pointer dereference was found in the Linux kernel's KVM when dirty ring logging is enabled without an active vCP…
-
Unscored —CVE-2022-1015 Public exploit
A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allow…
-
Unscored —
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allo…
-
Unscored —
ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.
-
Unscored —CVE-2022-29582 Public exploit
In the Linux kernel before 5.17.3, fs/io_uring.c has a use-after-free due to a race condition in io_uring timeouts. Thi…