Summary
[5.4.17-2136.328.3]
- IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang) [Orabug: 36143228]
- KSPLICE: make sure the stack is zeroed. (Gregory Herrero) [Orabug: 36154654]
- sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot) [Orabug: 36185207]
- i2c: core: Fix atomic xfer check for non-preempt config (Benjamin Bara)
- net: Save and restore msg_namelen in sock_sendmsg (Marc Dionne)
[5.4.17-2136.328.2]
- LTS tag: v5.4.266 (Sherry Yang)
- block: Don't invalidate pagecache for invalid falloc modes (Sarthak Kukreti)
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)
- usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter)
- x86/alternatives: Sync core before enabling interrupts (Thomas Gleixner)
- net: rfkill: gpio: set GPIO direction (Rouven Czerwinski)
- net: 9p: avoid freeing uninit memory in p9pdu_vreadf (Fedor Pchelkin)
- Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (Luiz Augusto von Dentz)
- USB: serial: option: add Quectel RM500Q R13 firmware support (Reinhard Speyerer)
- USB: serial: option: add Foxconn T99W265 with new baseline (Slark Xiao)
- USB: serial: option: add Quectel EG912Y module support (Alper Ak)
- USB: serial: ftdi_sio: update Actisense PIDs constant names (Mark Glover)
- wifi: cfg80211: fix certs build to not depend on file order (Johannes Berg)
- wifi: cfg80211: Add my certificate (Chen-Yu Tsai)
- iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() (Wadim Egorov)
- iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (Javier Carrasco)
- scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun)
- Input: ipaq-micro-keys - add error handling for devm_kmemdup (Haoran Liu)
- iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (Su Hui)
- interconnect: Treat xlate() returning NULL node as an error (Mike Tipton)
- btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik)
- smb: client: fix NULL deref in asn1_ber_decoder() (Paulo Alcantara)
- ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB (Kai Vehmanen)
- ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10 (Kai Vehmanen)
- pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothore)
- i2c: aspeed: Handle the coalesced stop conditions with the start conditions. (Quan Nguyen)
- afs: Fix overwriting of result of DNS query (David Howells)
- net: check dev->gso_max_size in gso_features_check() (Eric Dumazet)
- net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit)
- afs: Fix dynamic root lookup DNS check (David Howells)
- afs: Fix the dynamic root's d_delete to always delete unused dentries (David Howells)
- net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)
- net/rose: fix races in rose_kill_by_device() (Eric Dumazet)
- ethernet: atheros: fix a memleak in atl1e_setup_ring_resources (Zhipeng Lu)
- net: sched: ife: fix potential use-after-free (Eric Dumazet)
- net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors (Rahul Rameshbabu)
- net/mlx5: Fix fw tracer first block check (Moshe Shemesh)
- net/mlx5: improve some comments (Hu Haowen)
- Revert 'net/mlx5e: fix double free of encap_header' (Vlad Buslov)
- wifi: mac80211: mesh_plink: fix matches_local logic (Johannes Berg)
- s390/vx: fix save/restore of fpu kernel context (Heiko Carstens)
- reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven)
- ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (Kunwu Chan)
- ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon)
- ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li)
- LTS tag: v5.4.265 (Sherry Yang)
- powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)
- powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)
- mmc: block: Be sure to wait while busy in CQE error recovery (Adrian Hunter)
- ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))
- team: Fix use-after-free when an option instance allocation fails (Florent Revest)
- arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (James Houghton)
- ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)
- soundwire: stream: fix NULL pointer dereference for multi_link (Krzysztof Kozlowski)
- HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)
- net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)
- asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)
- HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)
- HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)
- HID: add ALWAYS_POLL quirk for Apple kb (Oliver Neukum)
- platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)
- bcache: avoid NULL checking to c->root in run_cache_set() (Coly Li)
- bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)
- bcache: avoid oversize memory allocation by small stripe_size (Coly Li)
- blk-throttle: fix lockdep warning of 'cgroup_mutex or RCU read lock required!' (Ming Lei)
- usb: aqc111: check packet for fixup for true limit (Oliver Neukum)
- ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants (Kai Vehmanen)
- appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)
- net: stmmac: Handle disabled MDIO busses from devicetree (Andrew Halaney)
- net: stmmac: use dev_err_probe() for reporting mdio bus registration failure (Rasmus Villemoes)
- vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)
- sign-file: Fix incorrect return values check (Yusong Gao)
- net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)
- qed: Fix a potential use-after-fre
Fixed packages 9
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:5.4.17-2136.328.3.el8uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:5.4.17-2136.328.3.el8uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:5.4.17-2136.328.3.el8uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:5.4.17-2136.328.3.el8uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:5.4.17-2136.328.3.el8uek |
| Oracle Linux · 7 | kernel-uek-tools | 0:5.4.17-2136.328.3.el7uek |
| Oracle Linux · 7 | kernel-uek-tools-libs | 0:5.4.17-2136.328.3.el7uek |
| Oracle Linux · 7 | perf | 0:5.4.17-2136.328.3.el7uek |
| Oracle Linux · 7 | python-perf | 0:5.4.17-2136.328.3.el7uek |
Vulnerabilities 5
-
High 7.8
Use-after-free in Linux kernel's netfilter: nf_tables component
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Due to a race condition between nf_tables netlink control plane transaction and nft_set element garbage collection, it …
-
Medium 5.6
Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)
Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary…
-
Medium 5.6
Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an un…
-
Unscored —CVE-2022-29900 Public exploit
Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain mic…
-
Unscored —
An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a …