Skip to content
OpenAdvisories
High ELSA-2022-9996 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Nov 15, 2022 · Updated Nov 15, 2022

Summary

[4.14.35-2047.519.2.1]
- xfs: trim IO to found COW extent limit (Eric Sandeen) [Orabug: 34765284]
- xfs: don't use delalloc extents for COW on files with extsize hints (Christoph Hellwig) [Orabug: 34765284]

[4.14.35-2047.519.2]
- Revert 'xfs: don't use delalloc extents for COW on files with extsize hints' (Saeed Mirzamohammadi) [Orabug: 34715947]
- uapi: Fix linux/rds.h userspace compilation issues (Ka-Cheong Poon) [Orabug: 32392165] [Orabug: 34710962]
- uapi: Fix linux/rds.h userspace compilation errors. (Vinson Lee) [Orabug: 34710962]
- uapi: fix linux/rds.h userspace compilation error (Dmitry V. Levin) [Orabug: 34710962]
- uapi: fix linux/rds.h userspace compilation errors (Dmitry V. Levin) [Orabug: 34710962]
- EDAC: Drop duplicated array of strings for memory type names (Jane Chu) [Orabug: 34645040]
- xfs: don't ever put nlink > 0 inodes on the unlinked list (Darrick J. Wong) [Orabug: 34431355]

[4.14.35-2047.519.1]
- uek: kabi: update kABI files for new symbol (Saeed Mirzamohammadi) [Orabug: 34595585]
- EDAC/mce_amd: Do not load edac_mce_amd module on guests (Smita Koralahalli) [Orabug: 34484269]

[4.14.35-2047.519.0]
- media: em28xx: initialize refcount before kref_get (Dongliang Mu) [Orabug: 34619521] {CVE-2022-3239}
- net: vlan: Avoid using BUG() in vlan_proto_idx() (Florian Fainelli) [Orabug: 34625406]
- net/rds: Send congestion map updates only via path zero (Anand Khoje) [Orabug: 34578052]
- rds: cong: Make rds_cong_wait an array to reduce lock contention (Hakon Bugge) [Orabug: 34574094]
- rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Hakon Bugge) [Orabug: 34574094]
- scsi: tcmu: track nl commands (Mike Christie) [Orabug: 32011411]
- scsi: tcmu: remove useless code and clean up the code style. (Xiubo Li) [Orabug: 32011411]
- Linux 4.14.295 (Greg Kroah-Hartman)
- ext4: make directory inode spreading reflect flexbg size (Jan Kara)
- Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (Vitaly Kuznetsov)
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (Stefan Haberland)
- serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Jarvinen)
- serial: Create uart_xmit_advance() (Ilpo Jarvinen)
- net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD (Sean Anderson)
- perf kcore_copy: Do not check /proc/modules is unchanged (Adrian Hunter)
- can: gs_usb: gs_can_open(): fix race dev->can.state condition (Marc Kleine-Budde)
- netfilter: ebtables: fix memory leak when blob is malformed (Florian Westphal)
- of: mdio: Add of_node_put() when breaking out of for_each_xx (Liang He)
- MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko (Randy Dunlap)
- net: team: Unsync device addresses on ndo_stop (Benjamin Poirier)
- ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header (Lu Wei)
- iavf: Fix cached head and tail value for iavf_get_tx_pending (Brett Creeley)
- netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater)
- netfilter: nf_conntrack_sip: fix ct_sip_walk_headers (Igor Ryzhov)
- arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (Fabio Estevam)
- mm/slub: fix to return errno if kmalloc() fails (Chao Yu)
- ALSA: hda: add Intel 5 Series / 3400 PCI DID (Kai Vehmanen)
- ALSA: hda/tegra: set depop delay for tegra (Mohan Kumar)
- USB: serial: option: add Quectel RM520N (jerry meng)
- USB: serial: option: add Quectel BG95 0x0203 composition (Carl Yin())
- USB: core: Fix RST error in hub.c (Alan Stern)
- wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant)
- ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai)
- video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim)
- mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang)
- MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin)
- net: usb: qmi_wwan: add Quectel RM520N (jerry.meng)
- ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai)
- regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang)
- ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai)
- cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher)
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)
- drm/meson: Correct OSD1 global alpha value (Stuart Menefy)
- gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohar)
- of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov)
- Linux 4.14.294 (Greg Kroah-Hartman)
- tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris)
- platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede)
- ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong)
- tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng)
- HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang)
- drm/msm/rd: Fix FIFO-full deadlock (Rob Clark)
- mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn)
- Linux 4.14.293 (Greg Kroah-Hartman)
- SUNRPC: use _bh spinlocking on ->transport_lock (NeilBrown)
- MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)
- USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)
- USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)
- usb: dwc3: fix PHY disable sequence (Johan Hovold)
- sch_sfb: Also store skb len before calling child enqueue (Toke Hoiland-Jorgensen)
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)
- ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)
- tipc: fix shift wrapping bug in map_get() (Dan Carpenter)
- sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Hoiland-Jorgensen)
- netfilter: nf_conntrack_ir

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 perf 0:4.14.35-2047.519.2.1.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-2047.519.2.1.el7uek

Vulnerabilities 1