Summary
[5.15.0-100.96.32]
- crypto: Report fips module name and version for aarch64 (Saeed Mirzamohammadi) [Orabug: 35225251]
- uek-rpm: Enable RFC7919 config for aarch64 (Saeed Mirzamohammadi) [Orabug: 35225251]
[5.15.0-100.96.31]
- uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy) [Orabug: 35213423]
- block: bio-integrity: Copy flags when bio_integrity_payload is cloned (Martin K. Petersen) [Orabug: 35209013]
- scsi: qla2xxx: Synchronize the IOCB count to be in order (Quinn Tran) [Orabug: 35209013]
- scsi: qla2xxx: Perform lockless command completion in abort path (Nilesh Javali) [Orabug: 35209013]
[5.15.0-100.96.30]
- perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang) [Orabug: 35151818]
- perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang) [Orabug: 35151818]
- perf/x86/uncore: Ignore broken units in discovery table (Kan Liang) [Orabug: 35151818]
- perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang) [Orabug: 35151818]
- perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang) [Orabug: 35151818]
- Revert 'perf/x86/uncore: Factor out uncore_device_to_die()' (Thomas Tai) [Orabug: 35151818]
- Revert 'perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name' (Thomas Tai) [Orabug: 35151818]
- Revert 'perf/x86/uncore: Ignore broken units in discovery table' (Thomas Tai) [Orabug: 35151818]
- Revert 'perf/x86/uncore: Add a quirk for UPI on SPR' (Thomas Tai) [Orabug: 35151818]
- Revert 'perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table' (Thomas Tai) [Orabug: 35151818]
- ionic: remove unnecessary void casts (Shannon Nelson) [Orabug: 35166570]
- ionic: remove unnecessary indirection (Shannon Nelson) [Orabug: 35166570]
- ionic: missed doorbell workaround (Allen Hubbe) [Orabug: 35166570]
- ionic: refactor use of ionic_rx_fill() (Neel Patel) [Orabug: 35166570]
- ionic: enable tunnel offloads (Neel Patel) [Orabug: 35166570]
- ionic: new ionic device identity level and VF start control (Shannon Nelson) [Orabug: 35166570]
- ionic: only save the user set VF attributes (Shannon Nelson) [Orabug: 35166570]
- ionic: replay VF attributes after fw crash recovery (Shannon Nelson) [Orabug: 35166570]
- ionic: change order of devlink port register and netdev register (Jiri Pirko) [Orabug: 35166570]
- ionic: no transition while stopping (Shannon Nelson) [Orabug: 35166570]
- ionic: use vmalloc include (Shannon Nelson) [Orabug: 35166570]
- ionic: clean up comments and whitespace (Shannon Nelson) [Orabug: 35166570]
- ionic: prefer strscpy over strlcpy (Shannon Nelson) [Orabug: 35166570]
- ionic: Use vzalloc for large per-queue related buffers (Brett Creeley) [Orabug: 35166570]
- ionic: catch transition back to RUNNING with fw_generation 0 (Shannon Nelson) [Orabug: 35166570]
- ionic: replace set_vf data with union (Shannon Nelson) [Orabug: 35166570]
- ionic: stretch heartbeat detection (Shannon Nelson) [Orabug: 35166570]
- ionic: remove the dbid_inuse bitmap (Shannon Nelson) [Orabug: 35166570]
- ionic: disable napi when ionic_lif_init() fails (Brett Creeley) [Orabug: 35166570]
- ionic: Cleanups in the Tx hotpath code (Brett Creeley) [Orabug: 35166570]
- ionic: Prevent filter add/del err msgs when the device is not available (Brett Creeley) [Orabug: 35166570]
- ionic: Query FW when getting VF info via ndo_get_vf_config (Brett Creeley) [Orabug: 35166570]
- ionic: Allow flexibility for error reporting on dev commands (Brett Creeley) [Orabug: 35166570]
- ionic: Correctly print AQ errors if completions aren't received (Brett Creeley) [Orabug: 35166570]
- ionic: fix up printing of timeout error (Shannon Nelson) [Orabug: 35166570]
- ionic: better handling of RESET event (Shannon Nelson) [Orabug: 35166570]
- ionic: add FW_STOPPING state (Shannon Nelson) [Orabug: 35166570]
- ionic: separate function for watchdog init (Shannon Nelson) [Orabug: 35166570]
- ionic: no devlink_unregister if not registered (Shannon Nelson) [Orabug: 35166570]
- ionic: tame the filter no space message (Shannon Nelson) [Orabug: 35166570]
- ionic: allow adminq requests to override default error message (Shannon Nelson) [Orabug: 35166570]
- ionic: handle vlan id overflow (Shannon Nelson) [Orabug: 35166570]
- ionic: generic filter delete (Shannon Nelson) [Orabug: 35166570]
- ionic: generic filter add (Shannon Nelson) [Orabug: 35166570]
- ionic: add generic filter search (Shannon Nelson) [Orabug: 35166570]
- ionic: remove mac overflow flags (Shannon Nelson) [Orabug: 35166570]
- ionic: move lif mac address functions (Shannon Nelson) [Orabug: 35166570]
- ionic: add filterlist to debugfs (Shannon Nelson) [Orabug: 35166570]
- ionic: add lif param to ionic_qcq_disable (Shannon Nelson) [Orabug: 35166570]
- ionic: have ionic_qcq_disable decide on sending to hardware (Shannon Nelson) [Orabug: 35166570]
- ionic: add polling to adminq wait (Shannon Nelson) [Orabug: 35166570]
- ionic: move lif mutex setup and delete (Shannon Nelson) [Orabug: 35166570]
- ionic: check for binary values in FW ver string (Shannon Nelson) [Orabug: 35166570]
- ionic: remove debug stats (Shannon Nelson) [Orabug: 35166570]
- ionic: Move devlink registration to be last devlink command (Leon Romanovsky) [Orabug: 35166570]
- crypto: jitter - update max health test failure in FIPS mode (Saeed Mirzamohammadi) [Orabug: 35160891]
- mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga) [Orabug: 35054621]
- mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga) [Orabug: 35054621]
- mm: fix VMA_BUG_ON_MM due to mmap_lock not held (Anthony Yznaga) [Orabug: 35054621]
- mm: avoid early cow when copying ptes for MADV_DOEXEC (Anthony Yznaga) [Orabug: 35054621]
- net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch) [Orabug: 35094721]
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM1733a (Saeed Mirzamohammadi) [Orabug: 35145945]
- nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM173X
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-100.96.32.el8uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-100.96.32.el8uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-100.96.32.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-100.96.32.el9uek |
Vulnerabilities 1
-
Medium 5.8
Speculative execution attacks in KVM VMX
A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines or IBPB after running L2 due to KVM (L0) advertising eIBRS support…