Skip to content
OpenAdvisories
High ELSA-2022-9583 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jul 11, 2022 · Updated Jul 11, 2022

Summary

[4.14.35-2047.515.3]
- uek-rpm: Enable Pensando EMMC reset controller (Thomas Tai) [Orabug: 34325721]
- mfd: pensando_elbasr: Add Pensando Elba System Resource Chip (Brad Larson) [Orabug: 34325721]
- dsc-drivers: update drivers for 1.15.9-C-65 (Shannon Nelson) [Orabug: 34325721]

[4.14.35-2047.515.2]
- net/rds: Delayed DR_SOCK_CANCEL (Gerd Rausch) [Orabug: 34105319]

[4.14.35-2047.515.1]
- sched/rt: Disable RT_RUNTIME_SHARE by default (Daniel Bristot de Oliveira) [Orabug: 34193333]
- mstflint_access: Update driver code to v4.20.1-1 from Github (Qing Huang) [Orabug: 34286148]

[4.14.35-2047.515.0]
- net: ip: avoid OOM kills with large UDP sends over loopback (Venkat Venkatsubra) [Orabug: 34066209]
- rdmaip: Flush ARP cache after address has been cleared (Gerd Rausch) [Orabug: 34285241]
- rds: Include congested flag in rds_sock struct. (Rohit Nair) [Orabug: 34261492]
- cpu/hotplug: Allow the CPU in CPU_UP_PREPARE state to be brought up again. (Longpeng(Mike)) [Orabug: 34234771]
- x86/xen: Allow to retry if cpu_initialize_context() failed. (Boris Ostrovsky) [Orabug: 34234771]
- floppy: use a statically allocated error counter (Willy Tarreau) [Orabug: 34218640] {CVE-2022-1652}
- assoc_array: Fix BUG_ON during garbage collect (Stephen Brennan) [Orabug: 34162064]
- exec, elf: fix reserve_va_range() sanity check (Anthony Yznaga) [Orabug: 32387887]
- exec, elf: use already allocated notes data in reserve_va_range() (Anthony Yznaga) [Orabug: 32387887]
- mm: madv_doexec_flag sysctl (Anthony Yznaga) [Orabug: 32387887]
- mm: introduce MADV_DOEXEC (Anthony Yznaga) [Orabug: 32387887]
- exec, elf: require opt-in for accepting preserved mem (Anthony Yznaga) [Orabug: 32387887]
- mm: introduce VM_EXEC_KEEP (Anthony Yznaga) [Orabug: 32387887]
- mm: fail exec if stack expansion will overlap another vma (Anthony Yznaga) [Orabug: 32387887]
- mm: do not assume only the stack vma exists in setup_arg_pages() (Anthony Yznaga) [Orabug: 32387887]
- ELF: when loading PIE binaries check for overlap with existing mappings (Anthony Yznaga) [Orabug: 32387887]
- Linux 4.14.280 (Greg Kroah-Hartman)
- tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (Yang Yingliang)
- ping: fix address binding wrt vrf (Nicolas Dichtel)
- drm/vmwgfx: Initialize drm_mode_fb_cmd2 (Zack Rusin)
- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long)
- USB: serial: option: add Fibocom MA510 modem (Sven Schwermer)
- USB: serial: option: add Fibocom L610 modem (Sven Schwermer)
- USB: serial: qcserial: add support for Sierra Wireless EM7590 (Ethan Yang)
- USB: serial: pl2303: add device id for HP LM930 Display (Scott Chen)
- usb: cdc-wdm: fix reading stuck on device close (Sergey Ryazanov)
- tcp: resalt the secret every 10 seconds (Eric Dumazet)
- ASoC: ops: Validate input values in snd_soc_put_volsw_range() (Mark Brown)
- ASoC: max98090: Generate notifications on changes for custom control (Mark Brown)
- ASoC: max98090: Reject invalid values in custom control put() (Mark Brown)
- hwmon: (f71882fg) Fix negative temperature (Ji-Ze Hong (Peter Hong))
- net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe() (Taehee Yoo)
- net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending (Guangguan Wang)
- s390/lcs: fix variable dereferenced before check (Alexandra Winter)
- s390/ctcm: fix potential memory leak (Alexandra Winter)
- s390/ctcm: fix variable dereferenced before check (Alexandra Winter)
- hwmon: (ltq-cputemp) restrict it to SOC_XWAY (Randy Dunlap)
- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (Johannes Berg)
- netlink: do not reset transport header in netlink_recvmsg() (Eric Dumazet)
- ipv4: drop dst in multicast routing path (Lokesh Dhoundiyal)
- net: Fix features skip in for_each_netdev_feature() (Tariq Toukan)
- batman-adv: Don't skb_split skbuffs with frag_list (Sven Eckelmann)
- Linux 4.14.279 (Greg Kroah-Hartman)
- VFS: Fix memory leak caused by concurrently mounting fs with subtype (ChenXiaoSong)
- ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock (Takashi Iwai)
- mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic() (Muchun Song)
- mm: hugetlb: fix missing cache flush in copy_huge_page_from_user() (Muchun Song)
- mmc: rtsx: add 74 Clocks in power on flow (Ricky WU)
- Bluetooth: Fix the creation of hdev->name (Itay Iellin)
- can: grcan: only use the NAPI poll budget for RX (Andreas Larsson)
- can: grcan: grcan_probe(): fix broken system id check for errata workaround needs (Andreas Larsson)
- block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit (Lee Jones)
- MIPS: Use address-of operator on section symbols (Nathan Chancellor)
- Linux 4.14.278 (Greg Kroah-Hartman)
- PCI: aardvark: Fix reading MSI interrupt number (Pali Rohar)
- PCI: aardvark: Clear all MSIs at setup (Pali Rohar)
- dm: interlock pending dm_io and dm_wait_for_bios_completion (Mike Snitzer)
- dm: fix mempool NULL pointer race when completing IO (Jiazi Li)
- net: ipv6: ensure we call ipv6_mc_down() at most once (j.nixdorf@avm.de)
- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (Sandipan Das)
- net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter() (Eric Dumazet)
- btrfs: always log symlinks in full mode (Filipe Manana)
- smsc911x: allow using IRQ0 (Sergey Shtylyov)
- net: emaclite: Add error handling for of_address_to_resource() (Shravya Kumbham)
- hwmon: (adt7470) Fix warning on module removal (Armin Wolf)
- NFC: netlink: fix sleep in atomic bug when firmware download timeout (Duoming Zhou)
- nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (Duoming Zhou)
- nfc: replace improper check device_is_registered() in netlink related functions (Duoming Zhou)
- can: grcan: use ofdev->dev when allocating DMA memory (Daniel Hellstrom)
- can: grcan: grcan_close():

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 perf 0:4.14.35-2047.515.3.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-2047.515.3.el7uek

Vulnerabilities 1