Summary
[5.4.17-2136.325.5.el8]
- perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508]
- char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508]
- perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number (Tuan Phan) [Orabug: 35905508]
- char: misc: increase DYNAMIC_MINORS value (Sangmoon Kim) [Orabug: 35905508]
[5.4.17-2136.325.4.el8]
- net: nfc: llcp: Add lock when modifying device list (Jeremy Cline)
- net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam)
- ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko)
- wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin)
- Revert 'PCI: qcom: Disable write access to read only registers for IP v2.3.3' (Greg Kroah-Hartman)
- rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov)
- rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov)
- rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov)
- rbd: move rbd_dev_refresh() definition (Ilya Dryomov)
- MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig)
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik)
- dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet)
- fix breakage in do_rmdir() (Al Viro) [Orabug: 35722671]
- scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi) [Orabug: 35761341]
- rds: Add proper refcnt when an RDS MR references an RDS Socket (Hakon Bugge) [Orabug: 35836949]
- rds: Check for UAF in rds_destroy_mr (Hakon Bugge) [Orabug: 35836949]
- i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff) [Orabug: 35857601]
- xfs: reserve less log space when recovering log intent items (Darrick J. Wong) [Orabug: 35871840]
- octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai) [Orabug: 35895526]
- bpf: bpf_check() must fail when btf_linux is null (Dave Kleikamp) [Orabug: 35899889]
[5.4.17-2136.325.3.el8]
- LTS tag: v5.4.257 (Sherry Yang)
- drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian Konig)
- mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang)
- ext4: fix rec_len verify error (Shida Zhang)
- i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang)
- tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google))
- nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton)
- tracing: Have option files inc the trace array ref count (Steven Rostedt (Google))
- tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google))
- btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana)
- attr: block mode changes of symlinks (Christian Brauner)
- md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon)
- selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google))
- btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain)
- btrfs: add a helper to read the superblock metadata_uuid (Anand Jain)
- btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik)
- perf tools: Add an option to build without libbfd (Ian Rogers)
- perf jevents: Make build dependency on test JSONs (John Garry)
- tools features: Add feature test to check if libbfd has buildid support (Arnaldo Carvalho de Melo)
- kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei)
- media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus)
- serial: cpm_uart: Avoid suspicious locking (Christophe Leroy)
- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin)
- usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke)
- media: pci: cx23885: replace BUG with error return (Hans Verkuil)
- media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil)
- media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong)
- media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong)
- media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong)
- media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong)
- media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong)
- powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie)
- jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion)
- fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner)
- ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger)
- md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong)
- bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren)
- drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li)
- wifi: mac80211_hwsim: drop short frames (Johannes Berg)
- alx: fix OOB-read compiler warning (GONG, Ruiqi)
- mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti)
- tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen)
- crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan)
- wifi: mwifiex: fix fortify warning (Dmitry Antipov)
- wifi: ath9k: fix printk specifier (Dongliang Mu)
- devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko)
- hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak)
- perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang)
- ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE))
- kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | kernel-uek-container | 0:5.4.17-2136.325.5.el8 |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.4.17-2136.325.5.el8 |
Vulnerabilities 1
-
High 7.0
Kernel: use after free bug in btsdio_remove due to race condition
A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. A call to btsdio_remove with an unfinished job may cause a race problem which leads to a UAF on hdev devices.