Skip to content
OpenAdvisories
High ELSA-2023-12393 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Jun 13, 2023 · Updated Jun 13, 2023

Summary

[5.15.0-102.110.5]
- RISC-V: Fix up a cherry-pick warning in setup_vm_final() (Alexandre Ghiti)
- Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian)
- riscv: mm: remove redundant parameter of create_fdt_early_page_table (Song Shuai)
- kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan) [Orabug: 35257584]
- kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan) [Orabug: 35257584]
- kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan) [Orabug: 35257584]
- debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi) [Orabug: 35275017]
- rds: Add time_spent and payload info for send_cqe handler (Rohit Nair) [Orabug: 35302534]
- KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES (Dr. David Alan Gilbert) [Orabug: 35309074]
- KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0 (Sean Christopherson) [Orabug: 35309074]
- x86/kvm: Fix compilation warning in non-x86_64 builds (Leonardo Bras) [Orabug: 35309074]
- x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 (Leonardo Bras) [Orabug: 35309074]
- x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 (Leonardo Bras) [Orabug: 35309074]
- KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() (Vitaly Kuznetsov) [Orabug: 35309074]
- KVM: x86: Remove defunct setting of XCR0 for guest during vCPU create (Sean Christopherson) [Orabug: 35309074]
- netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [Orabug: 35382083] {CVE-2023-32233}
- uek-rpm: Enable CONFIG_VIRTIO_FS in UEK7 (Harshit Mogalapalli) [Orabug: 35383136]
- drm/hyperv: Add ratelimit on error message (Saurabh Sengar) [Orabug: 35388012]
- drm/hyperv: Don't overwrite dirt_needed value set by host (Saurabh Sengar) [Orabug: 35388012]
- SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo) [Orabug: 35397524]
- scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Dmitry Bogdanov) [Orabug: 35404019]
- scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie) [Orabug: 35404019]
- scsi: target: Fix multiple LUN_RESET handling (Mike Christie) [Orabug: 35404019]
- scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov) [Orabug: 35404019]
- scsi: target: iscsit: Stop/wait on cmds during conn close (Mike Christie) [Orabug: 35404019]
- scsi: target: iscsit: isert: Alloc per conn cmd counter (Mike Christie) [Orabug: 35404019]
- scsi: target: Pass in cmd counter to use during cmd setup (Mike Christie) [Orabug: 35404019]
- scsi: target: Move cmd counter allocation (Mike Christie) [Orabug: 35404019]
- scsi: target: Move sess cmd counter to new struct (Mike Christie) [Orabug: 35404019]
- net/rds: Fix copy&paste error (Gerd Rausch) [Orabug: 35416946]

[5.15.0-102.110.4]
- vdpa/mlx5: Extend driver support for new features (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Make VIRTIO_NET_F_MRG_RXBUF off by default (Eli Cohen) [Orabug: 35210565]
- vhost-vdpa: free iommu domain after last use during cleanup (Gautam Dawar) [Orabug: 35210565]
- vdpa/mlx5: should not activate virtq object when suspended (Si-Wei Liu) [Orabug: 35210565]
- vp_vdpa: fix the crash in hot unplug with vp_vdpa (Cindy Lu) [Orabug: 35210565]
- vdpa/mlx5: support device features provisioning (Si-Wei Liu) [Orabug: 35210565]
- vdpa/mlx5: make MTU/STATUS presence conditional on feature bits (Si-Wei Liu) [Orabug: 35210565]
- vdpa: validate device feature provisioning against supported class (Si-Wei Liu) [Orabug: 35210565]
- vdpa: validate provisioned device features against specified attribute (Si-Wei Liu) [Orabug: 35210565]
- vdpa: conditionally read STATUS in config space (Si-Wei Liu) [Orabug: 35210565]
- vdpa: fix improper error message when adding vdpa dev (Si-Wei Liu) [Orabug: 35210565]
- vdpa/mlx5: Initialize CVQ iotlb spinlock (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Don't clear mr struct on destroy MR (Eli Cohen) [Orabug: 35210565]
- vdpa/mlx5: Directly assign memory key (Eli Cohen) [Orabug: 35210565]
- vhost-vdpa: print warning when vhost_vdpa_alloc_domain fails (Alvaro Karsz) [Orabug: 35210565]
- vdpa: Fix a couple of spelling mistakes in some messages (Colin Ian King) [Orabug: 35210565]
- vdpa: mlx5: support per virtqueue dma device (Jason Wang) [Orabug: 35210565]
- vdpa: set dma mask for vDPA device (Jason Wang) [Orabug: 35210565]
- virtio-vdpa: support per vq dma device (Jason Wang) [Orabug: 35210565]
- vdpa: introduce get_vq_dma_device() (Jason Wang) [Orabug: 35210565]
- virtio_ring: per virtqueue dma device (Jason Wang) [Orabug: 35210565]
- vhost: remove unused paramete (Liming Wu) [Orabug: 35210565]
- vhost-test: remove meaningless debug info (Liming Wu) [Orabug: 35210565]
- vdpa_sim: get rid of DMA ops (Jason Wang) [Orabug: 35210565]
- vdpa_sim_net: vendor satistics (Jason Wang) [Orabug: 35210565]
- vdpa_sim: support vendor statistics (Jason Wang) [Orabug: 35210565]
- vdpasim: customize allocation size (Jason Wang) [Orabug: 35210565]
- vdpa_sim: switch to use __vdpa_alloc_device() (Jason Wang) [Orabug: 35210565]
- vdpa_sim: use weak barriers (Jason Wang) [Orabug: 35210565]
- vdpa_sim: Implement resume vdpa op (Sebastien Boeuf) [Orabug: 35210565]
- vhost-vdpa: uAPI to resume the device (Sebastien Boeuf) [Orabug: 35210565]
- vhost-vdpa: Introduce RESUME backend feature bit (Sebastien Boeuf) [Orabug: 35210565]
- vdpa: Add resume operation (Sebastien Boeuf) [Orabug: 35210565]
- vdpa_sim_net: Offer VIRTIO_NET_F_STATUS (Eugenio Perez) [Orabug: 35210565]
- vdpa/mlx5: Move some definitions to a new header file (Eli Cohen) [Orabug: 35210565]
- vdpa_sim_net: should not drop the multicast/broadcast packet (Cindy Lu) [Orabug: 35210565]
- vdpasim: fix memory leak when freeing IOTLBs (Jason Wang) [Orabug: 35210565]
- vdpa: conditionally fill max max queue pair for stats (Jason Wang) [Orabug: 35210565]
- vdpa

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-102.110.5.el8uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-102.110.5.el8uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-102.110.5.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-102.110.5.el9uek

Vulnerabilities 1