Summary
[5.4.17-2136.326.6]
- Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi) [Orabug: 35914789]
- md: bypass block throttle for superblock update (Junxiao Bi) [Orabug: 35914789]
[5.4.17-2136.326.5]
- Revert 'tracing: Increase trace array ref count on enable and filter files' (Sherry Yang) [Orabug: 36059945]
- xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky) [Orabug: 36050498]
- Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Dongli Zhang) [Orabug: 36049644]
- Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Dongli Zhang) [Orabug: 36049644]
[5.4.17-2136.326.4]
- Revert 'mmc: core: Capture correct oemid-bits for eMMC cards' (Dominique Martinet)
- media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil)
- perf/core: Fix potential NULL deref (Peter Zijlstra)
- i2c: aspeed: Fix i2c bus hang in slave read (Jian Zhang)
- virtio-mmio: fix memory leak of vm_dev (Maximilian Heyne)
- net/rds: Use proper peer port number even when not connected (Greg Jumper) [Orabug: 35065319]
- Use inflight IO in io acct of high latency devices (Gulam Mohamed) [Orabug: 35475691]
- nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) [Orabug: 36028026] {CVE-2023-5178}
[5.4.17-2136.326.3]
- LTS tag: v5.4.259 (Sherry Yang)
- xfrm6: fix inet6_dev refcount underflow problem (Zhang Changzhong)
- Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook)
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD)
- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (Tony Lindgren)
- phy: mapphone-mdm6600: Fix runtime PM for remove (Tony Lindgren)
- phy: mapphone-mdm6600: Fix runtime disable on probe (Tony Lindgren)
- ASoC: pxa: fix a memory leak in probe() (Dan Carpenter)
- gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen)
- s390/pci: fix iommu bitmap allocation (Niklas Schnelle)
- perf: Disallow mis-matched inherited group reads (Peter Zijlstra)
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu)
- USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoit Monin)
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda)
- ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L)
- Revert 'pinctrl: avoid unsafe code pattern in find_pinctrl()' (Andy Shevchenko)
- mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman)
- mmc: core: sdio: hold retuning if sdio in 1-bit mode (Haibo Chen)
- mtd: physmap-core: Restore map_rom fallback (Geert Uytterhoeven)
- mtd: spinand: micron: correct bitmask for ecc status (Martin Kurbanov)
- mtd: rawnand: qcom: Unmap the right resource upon probe failure (Bibek Kumar Patro)
- Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz)
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device (Rahul Rameshbabu)
- btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c (Josef Bacik)
- drm: panel-orientation-quirks: Add quirk for One Mix 2S (Kai Uwe Broulik)
- sky2: Make sure there is at least one frag_addr available (Kees Cook)
- regulator/core: Revert 'fix kobject release warning and memory leak in regulator_register()' (Michal Miroslaw)
- wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg)
- wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong)
- Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz)
- Bluetooth: Avoid redundant authentication (Ying Hsu)
- HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke)
- tracing: relax trace_event_eval_update() execution with cond_resched() (Clement Leger)
- ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal)
- gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye)
- overlayfs: set ctime when setting mtime and atime (Jeff Layton)
- i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit)
- btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik)
- btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (Filipe Manana)
- ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren)
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (Hans de Goede)
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Paul Menzel)
- ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (Tamim Khan)
- ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks (Hans de Goede)
- ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA (Tamim Khan)
- ACPI: resource: Add ASUS model S5402ZA to quirks (Kellen Renshaw)
- ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan)
- ACPI: resources: Add DMI-based legacy IRQ override quirk (Hui Wang)
- ACPI: Drop acpi_dev_irqresource_disabled() (John Garry)
- resource: Add irqresource_disabled() (John Garry)
- net: pktgen: Fix interface flags printing (Gavrilov Ilia)
- netfilter: nft_set_rbtree: .deactivate fails if element has expired (Pablo Neira Ayuso)
- neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (Geert Uytterhoeven)
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Pedro Tammela)
- i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt)
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter)
- ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr (Eric Dumazet)
- tun: prevent negative ifindex (Eric Dumazet)
- tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb (Eric Dumazet)
- tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell)
- net: rfkill: gpio: prevent value glitch during probe (Josua Mayer)
- net: ipv6: fix retu
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2136.326.6.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2136.326.6.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2136.326.6.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2136.326.6.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2136.326.6.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2136.326.6.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:5.4.17-2136.326.6.el7uek |
| Oracle Linux · 7 | perf | 0:5.4.17-2136.326.6.el7uek |
| Oracle Linux · 7 | python-perf | 0:5.4.17-2136.326.6.el7uek |
Vulnerabilities 1
-
High 8.8CVE-2023-5178 Public exploit
Kernel: use after free in nvmet_tcp_free_crypto in nvme
A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, whic…