Skip to content
OpenAdvisories
High 1 exploited CVE ELSA-2023-12206 13 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Mar 21, 2023 · Updated Mar 21, 2023

Summary

[5.4.17-2136.317.5.3]
- udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara) [Orabug: 35192150]
- selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google)) [Orabug: 35192150]
- net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann) [Orabug: 35192150]
- net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin) [Orabug: 35192150]
- IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea) [Orabug: 35182639]

[5.4.17-2136.317.5.2]
- Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson) [Orabug: 35177466]

[5.4.17-2136.317.5.1]
- uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy) [Orabug: 35156131]
- uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy) [Orabug: 35152396]
- iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins) [Orabug: 35156821]

[5.4.17-2136.317.5]
- soc: Only try to build Marvell SOC code on aarch64 (Dave Kleikamp) [Orabug: 35079654]
- octeontx2-pf: Don't allocate BPIDs to LBK interface (Geetha sowjanya) [Orabug: 35079654]
- PCI: add misc character device for BAR4 mem access (Satananda Burla) [Orabug: 35079654]
- octeontx2-bphy-netdev: Fix rfoe ptp clock cleanup (Baha Mesleh) [Orabug: 35079654]
- octeontx2-dpi: configure writing DMA result to an offset of the event (Sibaranjan Pattnayak) [Orabug: 35079654]
- drivers: firmware: octeontx2: 9X platform support for memtest (Piyush Malgujar) [Orabug: 35079654]
- octeontx2-af: Fix devlink unregister (Ratheesh Kannoth) [Orabug: 35079654]
- driver: edac: octeontx: Check SoC version (Vasyl Gomonovych) [Orabug: 35079654]
- PCI: marvell-cnxk-ep: Change BAR4 memory allocation (Radha Mohan Chintakuntla) [Orabug: 35079654]
- octeontx2-af: SMQ flush needs scheduling config present (Nithin Dabilpuram) [Orabug: 35079654]
- octeontx2-af: add ctx ilen to cpt lf alloc mailbox (Srujana Challa) [Orabug: 35079654]
- octeontx2: crypto: fix microcode version string print (Srujana Challa) [Orabug: 35079654]
- crypto: octeontx2: add ctx_val workaround (Srujana Challa) [Orabug: 35079654]
- crypto: octeontx2: fix rsa verify (Srujana Challa) [Orabug: 35079654]
- crypto: octeontx2: fix dma unmap issue with ahash (Srujana Challa) [Orabug: 35079654]
- driver: edac: octeontx: Use MC handle instead raw handle (Vasyl Gomonovych) [Orabug: 35079654]
- octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan) [Orabug: 35079654]
- octeontx2-pf: Detach LF resources on probe cleanup (Bharat Bhushan) [Orabug: 35079654]
- octeontx2-af: Fix issue with IPv6 ext match for RSS (Kiran Kumar K) [Orabug: 35079654]
- drivers: octeontx2-pcicons: cleanup console de-initialization (Rick Farrington) [Orabug: 35079654]
- drivers: firmware: octeontx2: Add additional length variable (Piyush Malgujar) [Orabug: 35079654]
- octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Christophe JAILLET) [Orabug: 35079654]
- drivers: marvell: otx2-sdei-ghes: Unify bert records layout (Vasyl Gomonovych) [Orabug: 35079654]
- octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya) [Orabug: 35079654]
- octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya) [Orabug: 35079654]
- driver: edac: octeontx: Align records layout with firmware (Vasyl Gomonovych) [Orabug: 35079654]
- octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Dan Carpenter) [Orabug: 35079654]
- octeontx2-af: mcs: Config parser to skip 8B header (Geetha sowjanya) [Orabug: 35079654]
- octeontx2-bphy-netdev: Fix issue of using incorrect netdev priv (Naveen Mamindlapalli) [Orabug: 35079654]
- PCI: fix typo in Makefile for Marvell CNXK EP driver (Radha Mohan Chintakuntla) [Orabug: 35079654]
- PCI: rename octeontx2-pem-ep driver (Radha Mohan Chintakuntla) [Orabug: 35079654]
- octeontx2-sdp: remove firwmare ready status set (Satananda Burla) [Orabug: 35079654]
- octeontx2-bphy-netdev: fix link carrier state update for cnf10k (Baha Mesleh) [Orabug: 35079654]
- drivers: soc: sw_up: Erase data config during clone operation (Witold Sadowski) [Orabug: 35079654]
- drivers: soc: sw_up: Allow to skip clone check (Witold Sadowski) [Orabug: 35079654]
- drivers:spi:cadence-xspi: Verify clock before operation (Witold Sadowski) [Orabug: 35079654]
- fwlog: fix invalid pointers and copy size in wraparound case (Aaro Koskinen) [Orabug: 35079654]
- octeontx2-af: update CPT inbound inline IPsec mailbox (Srujana Challa) [Orabug: 35079654]
- octeontx2-af: Add devlink option to adjust mcam high prio zone entries (Naveen Mamindlapalli) [Orabug: 35079654]
- octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton) [Orabug: 35079654]
- crypto: octeontx2: sync with upstream kernel (Srujana Challa) [Orabug: 35079654]
- crypto: drivers - move from strlcpy with unused retval to strscpy (Wolfram Sang) [Orabug: 35079654]
- crypto: octeontx2 - prevent underflow in get_cores_bmap() (Dan Carpenter) [Orabug: 35079654]
- crypto: octeontx2 - use swap() to make code cleaner (chiminghao) [Orabug: 35079654]
- crypto: octeontx2 - Use swap() instead of swap_engines() (Jiapeng Chong) [Orabug: 35079654]
- crypto: octeontx2 - simplify the return expression of otx2_cpt_aead_cbc_aes_sha_setkey() (Minghao Chi) [Orabug: 35079654]
- crypto: octeontx2 - Remove the unneeded result variable (ye xingchen) [Orabug: 35079654]
- crypto: octeontx2 - out of bounds access in otx2_cpt_dl_custom_egrp_delete() (Dan Carpenter) [Orabug: 35079654]
- crypto: octeontx2 - Avoid stack variable overflow (Kees Cook) [Orabug: 35079654]
- crypto: octeontx2 - fix missing unlock (Yang Yingliang) [Orabug: 35079654]
- crypto: octeontx2: add support for ECDH (Srujana Challa) [Orabug: 35079654]
- crypto: ecc - expose ecc curves (Meng Yu) [Orabug: 35079654]
- octeontx2-af: Fixed variable set but not used warnings (Sunil Goutham) [Orabug: 35079654]
- octeon

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.317.5.3.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.317.5.3.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.317.5.3.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.317.5.3.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.317.5.3.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.317.5.3.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:5.4.17-2136.317.5.3.el7uek
Oracle Linux · 7 perf 0:5.4.17-2136.317.5.3.el7uek
Oracle Linux · 7 python-perf 0:5.4.17-2136.317.5.3.el7uek

Vulnerabilities 13