Skip to content
OpenAdvisories
High ELSA-2023-12116 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Feb 13, 2023 · Updated Feb 13, 2023

Summary

[5.15.0-7.86.6.1]
- net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35051226]

[5.15.0-7.86.6]
- runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001044]
- rds: ib: Make sure messages that errors out also get unmapped (Hakon Bugge) [Orabug: 35015598]
- Ignore hot plug events when force powering off a device (James Puthukattukaran) [Orabug: 35015761]
- mptcp: UEK: disable mptcp protocol (Jack Vogel) [Orabug: 34821286]

[5.15.0-7.86.5]
- uek-rpm: Enable HP watchdog for aarch64 (Saeed Mirzamohammadi) [Orabug: 34902069]
- watchdog/hpwdt: Include nmi.h only if CONFIG_HPWDT_NMI_DECODING (Jerry Hoemann) [Orabug: 34902069]
- watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (Jerry Hoemann) [Orabug: 34902069]
- Revert 'selftests/bpf: Add test for unstable CT lookup API' (Alan Maguire) [Orabug: 34951842]
- uek-rpm: config-x86-64*: enable CONFIG_MT7921E (Todd Vierling) [Orabug: 34970472]
- netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Pablo Neira Ayuso) [Orabug: 34978152] {CVE-2023-0179}
- perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui) [Orabug: 34978296]
- powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui) [Orabug: 34978296]
- uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi) [Orabug: 34339132]

[5.15.0-7.86.4]
- net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979170]
- Revert 'uek: kabi: enable aarch64 kABI checking' (Jack Vogel)
- Revert 'uek-rpm: Disable kABI checking for aarch64 64k builds' (Jack Vogel)

[5.15.0-7.86.3]
- uek-rpm: Disable kABI checking for aarch64 64k builds (Saeed Mirzamohammadi) [Orabug: 34339132]

[5.15.0-7.86.2]
- net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607844]
- Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch) [Orabug: 34700109]
- net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 34314502]
- net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600819]
- net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560700]
- net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556036]
- uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi) [Orabug: 34339132]
- uek-rpm: Disable Promise SuperTrak EX series storage controllers (Somasundaram Krishnasamy) [Orabug: 34670747]
- uek-rpm: ol9: Disable CONFIG_IR_MCEUSB from UEK7 OL9. (Harshit Mogalapalli) [Orabug: 34820237]
- IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34821073]
- rds: ib: Avoid tear-down of caches unless already initialized (Hakon Bugge) [Orabug: 34826403]
- KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit) [Orabug: 34961703]
- Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359]
- uek-rpm: Add nft_reject* modules to core rpm. (Somasundaram Krishnasamy) [Orabug: 34970060]
- cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (Srinivas Pandruvada) [Orabug: 34961609]

[5.15.0-7.86.1]
- LTS version: v5.15.86 (Jack Vogel)
- pwm: tegra: Fix 32 bit build (Steven Price)
- mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (Christophe JAILLET)
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (Yassine Oudjana)
- media: dvbdev: fix refcnt bug (Lin Ma)
- media: dvbdev: fix build warning due to comments (Lin Ma)
- net: stmmac: fix errno when create_singlethread_workqueue() fails (Gaosheng Cui)
- scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi)
- btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (Filipe Manana)
- ovl: fix use inode directly in rcu-walk mode (Chen Zhongjin)
- fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Tetsuo Handa)
- gcov: add support for checksum field (Rickard x Andersson)
- floppy: Fix memory leak in do_floppy_init() (Yuan Can)
- regulator: core: fix deadlock on regulator enable (Johan Hovold)
- iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes)
- iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa)
- iio: fix memory leak in iio_device_register_eventset() (Zeng Heng)
- reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)
- security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Nathan Chancellor)
- 9p: set req refcount to zero to avoid uninitialized usage (Schspa Shi)
- loop: Fix the max_loop commandline argument treatment when it is set to 0 (Isaac J. Manjarres)
- HID: mcp2221: don't connect hidraw (Enrik Berkhan)
- HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)
- xhci: Prevent infinite loop in transaction errors recovery for streams (Mathias Nyman)
- usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)
- usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (Sven Peter)
- arm64: dts: qcom: sm8250: fix USB-DP PHY registers (Johan Hovold)
- usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Chunfeng Yun)
- usb: cdnsp: fix lack of ZLP for ep0 (Pawel Laszczak)
- ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou)
- ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)
- ALSA: usb-audio: add the quirk for KT0206 device (wangdicheng)
- ima: Simplify ima_lsm_copy_rule (GUO Zihua)
- pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)
- afs: Fix lost servers_outstanding count (David Howells)
- perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Yang Jihong)
- pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)
- LoadPin: Ignore the 'contents' argument of the LSM hooks (Kees Cook)
- drm/i915/display: Don't disa

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-7.86.6.1.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-7.86.6.1.el9uek

Vulnerabilities 4