Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2022-9829 5 CVEs

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

Published Sep 21, 2022 · Updated Sep 21, 2022

Summary

[5.4.17-2136.311.6]
- Revert 'KVM: x86: Print error code in exception injection tracepoint iff
valid' (Sherry Yang) [Orabug: 34535896]

[5.4.17-2136.311.5]
- netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) [Orabug: 34495567] {CVE-2022-2586}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Thadeu Lima de Souza Cascardo) [Orabug: 34495567] {CVE-2022-2586}

[5.4.17-2136.311.4]
- rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry) [Orabug: 34514570] {CVE-2022-21385}
- rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair) [Orabug: 34414239]
- scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie) [Orabug: 34419971] {CVE-2022-21546}
- Revert 'net/rds: Connect TCP backends deterministically' (Gerd Rausch) [Orabug: 34476562]
- kernfs: Replace global kernfs_open_file_mutex with hashed mutexes. (Imran Khan) [Orabug: 34476941]
- kernfs: Introduce interface to access global kernfs_open_file_mutex. (Imran Khan) [Orabug: 34476941]
- kernfs: make ->attr.open RCU protected. (Imran Khan) [Orabug: 34476941]
- kernfs: Rename kernfs_put_open_node to kernfs_unlink_open_file. (Imran Khan) [Orabug: 34476941]
- kernfs: Remove reference counting for kernfs_open_node. (Imran Khan) [Orabug: 34476941]
- arm64: mm: Fix case where !CONFIG_NUMA=y (Henry Willard) [Orabug: 34504995]
- drm: protect drm_master pointers in drm_lease.c (Desmond Cheong Zhi Xi) [Orabug: 34115076] {CVE-2022-1280}
- drm: serialize drm_file.master with a new spinlock (Desmond Cheong Zhi Xi) [Orabug: 34115076] {CVE-2022-1280}
- drm: add a locked version of drm_is_current_master (Desmond Cheong Zhi Xi) [Orabug: 34115076] {CVE-2022-1280}
- i2c: thunderx: missing struct pci_dev definition in mips build (Dave Kleikamp) [Orabug: 34483890]
- mips: mm: define MADV_DOEXEC and MADV_DONTEXEC (Dave Kleikamp) [Orabug: 34483890]
- mips64: Fix X.509 certificates parsing (Eric Saint-Etienne) [Orabug: 34483890]
- thermal: support for Marvell Octeon TX SoC temperature sensors (Eric Saint-Etienne) [Orabug: 34483890]
- netdev, octeon3-ethernet: move timecounter init to network driver probe() (Dave Aldridge) [Orabug: 34483890]
- mips64/octeon: Initialize netdevice in octeon_pow struct (Vijay Kumar) [Orabug: 34483890]
- MIPS: Add syscall auditing support (Ralf Baechle) [Orabug: 34483890]
- net/ethernet/octeon: Add ptp_dbg_group module param in octeon-pow-ethernet (Vijay Kumar) [Orabug: 34483890]
- net/ethernet/octeon: Set max/min mtu of pow equivalent to Octeon eth device (Vijay Kumar) [Orabug: 34483890]
- arch/mips: Discard the contents of the PCI console if the buffer is full for more than 10 milliseconds (Victor Michel) [Orabug: 34483890]
- vdso: prevent ld from aligning PT_LOAD segments to 64k (Rob Gardner) [Orabug: 34483890]
- MIPS: Octeon: cache info: Delete cavium-octeon/cacheinfo.c (Henry Willard) [Orabug: 34483890]
- uek-rpm: build embedded kernels for t73 (Dave Kleikamp) [Orabug: 34483890]
- mips: define pmd_special & pmd_mkspecial (Dave Kleikamp) [Orabug: 34483890]
- kbuild: linker should be called with KBUILD_LDFLAGS (Dave Kleikamp) [Orabug: 34483890]
- MIPS: octeon: Suppress early_init_dt_scan_memory damage. (Henry Willard) [Orabug: 34483890]
- mips: Fails to create /sys/firmware/fdt during bootup (Vijay Kumar) [Orabug: 34483890]
- MIPS: probe_kernel_read() should not panic (Rob Gardner) [Orabug: 34483890]
- mips/cavium-octeon: Change access permission for /proc/pcie_reset to write (Vijay Kumar) [Orabug: 34483890]
- mips64: Build for Octeon and generic boards only (Vijay Kumar) [Orabug: 34483890]
- mips: define pmd_pfn and pud_pfn (Dave Kleikamp) [Orabug: 34483890]
- MIPS: OCTEON: silence 'virt' assembler warnings (Dave Kleikamp) [Orabug: 34483890]
- MIPS: OCTEON: OCTEON III build and configuration option (Dave Kleikamp) [Orabug: 34483890]
- KSPLICE for MIPS also would like function-sections (Rob Gardner) [Orabug: 34483890]
- Provide thread_info flags for KSPLICE freezer support (Rob Gardner) [Orabug: 34483890]
- mips: add user_addr_max() and PROT_RESERVED (Dave Kleikamp) [Orabug: 34483890]
- mips: add clear_page_uncached() (Dave Kleikamp) [Orabug: 34483890]
- net: octeon-ethernet: Fix to reset the device stats in init (Anushka Singh) [Orabug: 34483890]
- net: phy: Kconfig: fix double definition of ICPLUS_PHY PHYs (Ivan Khoronzhuk) [Orabug: 34483890]
- drivers: of_mdio.c : fix of_mdiobus_register_phy return code (Serhii Tyshchenko) [Orabug: 34483890]
- mips/pci/pci-legacy.c: fix for mixed declarations and code (Serhii Tyshchenko) [Orabug: 34483890]
- mips: octeon: remove unused pcie_17400_set_affinity (Serhii Tyshchenko) [Orabug: 34483890]
- asm/octeon/cvmx-lmcx-defs.h: fix for platform selection build warnings (Serhii Tyshchenko) [Orabug: 34483890]
- fix for cvmx-ila build issue (santhosh D) [Orabug: 34483890]
- fix for cvmx-helper-rgmii build issue (santhosh D) [Orabug: 34483890]
- fix for cvmx-l2c build issue (santhosh D) [Orabug: 34483890]
- MIPS: reserve the memblock right after the kernel (Alex Sverdlin) [Orabug: 34483890]
- MIPS: Octeon: Update mach_bootmem_init for NUMA support to enable CONFIG_NUMA (Anushka Singh) [Orabug: 34483890]
- Octeon: net: ethernet: Port from 4.14 to 5.4 octeon-2 ethernet driver changes (Anushka Singh) [Orabug: 34483890]
- MIPS: OCTEON: Add support for pci hot plugged endpoints (Carlos Munoz) [Orabug: 34483890]
- arch: mips: cavium-octeon: cvmx-pcie: fix config read 32 (Ivan Khoronzhuk) [Orabug: 34483890]
- MIPS: ftrace: fix init functions tracing (Ivan Khoronzhuk) [Orabug: 34483890]
- net: octeon: mgmt: Repair filling of RX ring (Alex Sverdlin) [Orabug: 34483890]
- Octeon: net: octeon_mgmt: Add MTU size (Anushka Singh) [Orabug: 34483890]
- Octeon: net: octeon_mgmt: Add phy_start and phy_stop (Anushka Singh) [Orabug: 34483890]
- Octeon: Add working CISCO kernel config for Octeon (Anushka Singh) [Orabug: 34483890]
- MIPS: Octeon: MIPS: Update default config for kernel v5.4.30 (Anushka S

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2136.311.6.el8
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2136.311.6.el8

Vulnerabilities 5