Skip to content
OpenAdvisories
High ELSA-2023-12792 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Sep 14, 2023 · Updated Sep 14, 2023

Summary

[4.14.35-2047.529.3]
- uek-rpm: Update kernel linux-firmware dependency to 20230516-999.26.git6c9e0ed5. (Somasundaram Krishnasamy) [Orabug: 35724203]
- LTS version: v4.14.322 (Saeed Mirzamohammadi)
- drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds)
- mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros)
- test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac)
- ext2: Drop fragment support (Jan Kara)
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern)
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)
- fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya)
- USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard)
- libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov)
- loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche)
- tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet)
- tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet)
- tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet)
- tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet)
- tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet)
- tcp_metrics: fix addr_same() helper (Eric Dumazet)
- ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing)
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis)
- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)
- net: add missing data-race annotation for sk_ll_usec (Eric Dumazet)
- net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet)
- perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Muller)
- net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong)
- word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com)
- perf: Fix function pointer case (Peter Zijlstra)
- net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones)
- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan)
- drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe)
- dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber)
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown)
- s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland)
- irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski)
- tpm_tis: Explicitly check for error code (Alexander Steffen)
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz)
- staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong)
- Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman)
- usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda)
- usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen)
- can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde)
- USB: serial: simple: sort driver entries (Johan Hovold)
- USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum)
- USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi)
- USB: serial: option: support Quectel EM060K_128 (Jerry Meng)
- tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian)
- ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian)
- ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann)
- dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai)
- block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche)
- ASoC: fsl_spdif: Silence output on stop (Matus Gajdos)
- benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong)
- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy)
- team: reset team's flags when down link is P2P device (Hangbin Liu)
- bonding: reset bond's flags when down link is P2P device (Hangbin Liu)
- tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)
- ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Zenczykowski)
- ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong)
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming)
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede)
- tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet)
- tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet)
- tcp: annotate data-races around rskq_defer_accept (Eric Dumazet)
- netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal)
- llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima)
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong)
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil)
- pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello)
- fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser)
- spi: bcm63xx: fix max prepend length (Jonas Gorski)
- igb: Fix igb_down hung on surprise removal (Ying Hsu)
- wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva)
- bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau)
- sched/fair: Don't balance task to its current running CPU (Yicong Yang)
- posix-timers: Ensure timer ID search-loop limit is valid (Saeed Mirzamohammadi)
- md/raid10: prevent soft lockup while flush writes (Yu Kuai)
- md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai)
- nbd

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 perf 0:4.14.35-2047.529.3.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-2047.529.3.el7uek

Vulnerabilities 1