Summary
[5.15.0-203.146.5.1]
- Revert 'selftests/bpf: Test tail call counting with bpf2bpf and data on stack' (Samasth Norway Ananda) [Orabug: 36277693]
- Revert 'tcp: fix excessive TLP and RACK timeouts from HZ rounding' (Sherry Yang) [Orabug: 36277684]
[5.15.0-203.146.5]
- i2c: core: Fix atomic xfer check for non-preempt config (Benjamin Bara)
- keys, dns: Fix missing size check of V1 server-list header (Edward Adam Davis)
- wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ (Johannes Berg)
- tracing/kprobes: Fix symbol counting logic by looking at modules as well (Andrii Nakryiko)
[5.15.0-203.146.4]
- rds: Handle pages in use when purging an RDS Message (Hakon Bugge) [Orabug: 36054361]
- rds: ib: Consolidate per-cpu free list for siblings (Hakon Bugge) [Orabug: 35904643]
- rds: ib: Make sure per-cpu recv cache structure is cache-line aligned (Hakon Bugge) [Orabug: 35904643]
- sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot) [Orabug: 36185206]
[5.15.0-203.146.3]
- thermal/of: Initialize trip points separately (Daniel Lezcano) [Orabug: 36178522]
- thermal/of: Use thermal trips stored in the thermal zone (Daniel Lezcano) [Orabug: 36178522]
- uek-container: strip symbols from vmlinux (Boris Ostrovsky) [Orabug: 36170888]
- KSPLICE: make sure the stack is zeroed. (Gregory Herrero) [Orabug: 36155235]
- nvme-tcp: don't access released socket during error recovery (Akinobu Mita) [Orabug: 36127728]
- vhost-vdpa: fix use after free in vhost_vdpa_probe() (Dan Carpenter) [Orabug: 36072714]
- vdpa_sim_blk: allocate the buffer zeroed (Stefano Garzarella) [Orabug: 36072714]
- vdpa_sim: implement .reset_map support (Si-Wei Liu) [Orabug: 36072714]
- vdpa/mlx5: implement .reset_map driver op (Si-Wei Liu) [Orabug: 36072714]
- vhost-vdpa: clean iotlb map during reset for older userspace (Si-Wei Liu) [Orabug: 36072714]
- vdpa: introduce .compat_reset operation callback (Si-Wei Liu) [Orabug: 36072714]
- vhost-vdpa: introduce IOTLB_PERSIST backend feature bit (Si-Wei Liu) [Orabug: 36072714]
- vhost-vdpa: reset vendor specific mapping to initial state in .release (Si-Wei Liu) [Orabug: 36072714]
- vdpa: introduce .reset_map operation callback (Si-Wei Liu) [Orabug: 36072714]
- vdpa: Update sysfs ABI documentation (Shawn.Shao) [Orabug: 36072714]
- mlx5_vdpa: offer VHOST_BACKEND_F_ENABLE_AFTER_DRIVER_OK (Eugenio Perez) [Orabug: 36072714]
- vdpa/mlx5: Update cvq iotlb mapping on ASID change (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Make iotlb helper functions more generic (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Enable hw support for vq descriptor mapping (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Expose descriptor group mkey hw capability (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Introduce mr for vq descriptor (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Improve mr update flow (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Move mr mutex out of mr struct (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Allow creation/deletion of any given mr struct (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Rename mr destroy functions (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Collapse 'dvq' mr add/delete functions (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Take cvq iotlb lock during refresh (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Decouple cvq iotlb handling from hw mapping code (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Create helper function for dma mappings (Dragos Tatulea) [Orabug: 36072714]
- vhost-vdpa: uAPI to get dedicated descriptor group id (Si-Wei Liu) [Orabug: 36072714]
- vhost-vdpa: introduce descriptor group backend feature (Si-Wei Liu) [Orabug: 36072714]
- vdpa: introduce dedicated descriptor group for virtqueue (Si-Wei Liu) [Orabug: 36072714]
- vdpa/mlx5: Fix firmware error on creation of 1k VQs (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Fix double release of debugfs entry (Dragos Tatulea) [Orabug: 36072714]
- vdpa_sim: offer VHOST_BACKEND_F_ENABLE_AFTER_DRIVER_OK (Eugenio Perez) [Orabug: 36072714]
- vdpa: add get_backend_features vdpa operation (Eugenio Perez) [Orabug: 36072714]
- vdpa: accept VHOST_BACKEND_F_ENABLE_AFTER_DRIVER_OK backend feature (Eugenio Perez) [Orabug: 36072714]
- vdpa: add VHOST_BACKEND_F_ENABLE_AFTER_DRIVER_OK flag (Eugenio Perez) [Orabug: 36072714]
- vdpa/mlx5: Remove unused function declarations (Yue Haibing) [Orabug: 36072714]
- vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary (Eugenio Perez) [Orabug: 36072714]
- vdpa/mlx5: Fix mr->initialized semantics (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Correct default number of queues when MQ is on (Dragos Tatulea) [Orabug: 36072714]
- virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs() (Gal Pressman) [Orabug: 36072714]
- vdpa: Enable strict validation for netlinks ops (Dragos Tatulea) [Orabug: 36072714]
- vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check (Lin Ma) [Orabug: 36072714]
- vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check (Lin Ma) [Orabug: 36072714]
- vdpa: Add features attr to vdpa_nl_policy for nlattr length check (Lin Ma) [Orabug: 36072714]
- virtio-vdpa: Fix unchecked call to NULL set_vq_affinity (Dragos Tatulea) [Orabug: 36072714]
- vhost_vdpa: tell vqs about the negotiated (Shannon Nelson) [Orabug: 36072714]
- vdpa/mlx5: Fix hang when cvq commands are triggered during device unregister (Dragos Tatulea) [Orabug: 36072714]
- vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [Orabug: 36072714]
- vhost_vdpa: fix unmap process in no-batch mode (Cindy Lu) [Orabug: 36072714]
- vdpa_sim: move buffer allocation in the devices (Stefano Garzarella) [Orabug: 36072714]
- vdpa_sim_blk: add support for discard and write-zeroes (Stefano Garzarella) [Orabug: 36072714]
- vdpa_sim_blk: use dev_dbg() to print errors (Stefano Garzarella) [Orabug: 36072714]
- vringh: address kdoc warnings (Simon Horman) [Or
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-203.146.5.1.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-203.146.5.1.el9uek |
Vulnerabilities 6
-
High 7.8
Use-after-free in Linux kernel's netfilter: nf_tables component
A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The function nft_trans_gc_catchall did not remove the catchall set element from the catchall_list when the argument syn…
-
High 7.0CVE-2023-46813 Public exploit
An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO regi…
-
Medium 5.6
Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an un…
-
Medium 5.5
Kernel: null pointer dereference vulnerability in nft_dynset_init()
A null pointer dereference vulnerability was found in nft_dynset_init() in net/netfilter/nft_dynset.c in nf_tables in the Linux kernel. This issue may allow a local attacker with CAP_NET_ADMIN user privilege to trigger a denial of service.
-
Unscored —
Bluetooth legacy BR/EDR PIN code pairing in Bluetooth Core Specification 1.0B through 5.2 may permit an unauthenticated…
-
Unscored —
An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/eth…