Skip to content
OpenAdvisories
High ELSA-2024-12159 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Feb 13, 2024 · Updated Feb 13, 2024

Summary

[5.15.0-203.146.5.1]
- Revert 'selftests/bpf: Test tail call counting with bpf2bpf and data on stack' (Samasth Norway Ananda) [Orabug: 36277693]
- Revert 'tcp: fix excessive TLP and RACK timeouts from HZ rounding' (Sherry Yang) [Orabug: 36277684]

[5.15.0-203.146.5]
- i2c: core: Fix atomic xfer check for non-preempt config (Benjamin Bara)
- keys, dns: Fix missing size check of V1 server-list header (Edward Adam Davis)
- wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ (Johannes Berg)
- tracing/kprobes: Fix symbol counting logic by looking at modules as well (Andrii Nakryiko)

[5.15.0-203.146.4]
- rds: Handle pages in use when purging an RDS Message (Hakon Bugge) [Orabug: 36054361]
- rds: ib: Consolidate per-cpu free list for siblings (Hakon Bugge) [Orabug: 35904643]
- rds: ib: Make sure per-cpu recv cache structure is cache-line aligned (Hakon Bugge) [Orabug: 35904643]
- sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot) [Orabug: 36185206]

[5.15.0-203.146.3]
- thermal/of: Initialize trip points separately (Daniel Lezcano) [Orabug: 36178522]
- thermal/of: Use thermal trips stored in the thermal zone (Daniel Lezcano) [Orabug: 36178522]
- uek-container: strip symbols from vmlinux (Boris Ostrovsky) [Orabug: 36170888]
- KSPLICE: make sure the stack is zeroed. (Gregory Herrero) [Orabug: 36155235]
- nvme-tcp: don't access released socket during error recovery (Akinobu Mita) [Orabug: 36127728]
- vhost-vdpa: fix use after free in vhost_vdpa_probe() (Dan Carpenter) [Orabug: 36072714]
- vdpa_sim_blk: allocate the buffer zeroed (Stefano Garzarella) [Orabug: 36072714]
- vdpa_sim: implement .reset_map support (Si-Wei Liu) [Orabug: 36072714]
- vdpa/mlx5: implement .reset_map driver op (Si-Wei Liu) [Orabug: 36072714]
- vhost-vdpa: clean iotlb map during reset for older userspace (Si-Wei Liu) [Orabug: 36072714]
- vdpa: introduce .compat_reset operation callback (Si-Wei Liu) [Orabug: 36072714]
- vhost-vdpa: introduce IOTLB_PERSIST backend feature bit (Si-Wei Liu) [Orabug: 36072714]
- vhost-vdpa: reset vendor specific mapping to initial state in .release (Si-Wei Liu) [Orabug: 36072714]
- vdpa: introduce .reset_map operation callback (Si-Wei Liu) [Orabug: 36072714]
- vdpa: Update sysfs ABI documentation (Shawn.Shao) [Orabug: 36072714]
- mlx5_vdpa: offer VHOST_BACKEND_F_ENABLE_AFTER_DRIVER_OK (Eugenio Perez) [Orabug: 36072714]
- vdpa/mlx5: Update cvq iotlb mapping on ASID change (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Make iotlb helper functions more generic (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Enable hw support for vq descriptor mapping (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Expose descriptor group mkey hw capability (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Introduce mr for vq descriptor (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Improve mr update flow (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Move mr mutex out of mr struct (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Allow creation/deletion of any given mr struct (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Rename mr destroy functions (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Collapse 'dvq' mr add/delete functions (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Take cvq iotlb lock during refresh (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Decouple cvq iotlb handling from hw mapping code (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Create helper function for dma mappings (Dragos Tatulea) [Orabug: 36072714]
- vhost-vdpa: uAPI to get dedicated descriptor group id (Si-Wei Liu) [Orabug: 36072714]
- vhost-vdpa: introduce descriptor group backend feature (Si-Wei Liu) [Orabug: 36072714]
- vdpa: introduce dedicated descriptor group for virtqueue (Si-Wei Liu) [Orabug: 36072714]
- vdpa/mlx5: Fix firmware error on creation of 1k VQs (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Fix double release of debugfs entry (Dragos Tatulea) [Orabug: 36072714]
- vdpa_sim: offer VHOST_BACKEND_F_ENABLE_AFTER_DRIVER_OK (Eugenio Perez) [Orabug: 36072714]
- vdpa: add get_backend_features vdpa operation (Eugenio Perez) [Orabug: 36072714]
- vdpa: accept VHOST_BACKEND_F_ENABLE_AFTER_DRIVER_OK backend feature (Eugenio Perez) [Orabug: 36072714]
- vdpa: add VHOST_BACKEND_F_ENABLE_AFTER_DRIVER_OK flag (Eugenio Perez) [Orabug: 36072714]
- vdpa/mlx5: Remove unused function declarations (Yue Haibing) [Orabug: 36072714]
- vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary (Eugenio Perez) [Orabug: 36072714]
- vdpa/mlx5: Fix mr->initialized semantics (Dragos Tatulea) [Orabug: 36072714]
- vdpa/mlx5: Correct default number of queues when MQ is on (Dragos Tatulea) [Orabug: 36072714]
- virtio-vdpa: Fix cpumask memory leak in virtio_vdpa_find_vqs() (Gal Pressman) [Orabug: 36072714]
- vdpa: Enable strict validation for netlinks ops (Dragos Tatulea) [Orabug: 36072714]
- vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check (Lin Ma) [Orabug: 36072714]
- vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check (Lin Ma) [Orabug: 36072714]
- vdpa: Add features attr to vdpa_nl_policy for nlattr length check (Lin Ma) [Orabug: 36072714]
- virtio-vdpa: Fix unchecked call to NULL set_vq_affinity (Dragos Tatulea) [Orabug: 36072714]
- vhost_vdpa: tell vqs about the negotiated (Shannon Nelson) [Orabug: 36072714]
- vdpa/mlx5: Fix hang when cvq commands are triggered during device unregister (Dragos Tatulea) [Orabug: 36072714]
- vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [Orabug: 36072714]
- vhost_vdpa: fix unmap process in no-batch mode (Cindy Lu) [Orabug: 36072714]
- vdpa_sim: move buffer allocation in the devices (Stefano Garzarella) [Orabug: 36072714]
- vdpa_sim_blk: add support for discard and write-zeroes (Stefano Garzarella) [Orabug: 36072714]
- vdpa_sim_blk: use dev_dbg() to print errors (Stefano Garzarella) [Orabug: 36072714]
- vringh: address kdoc warnings (Simon Horman) [Or

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-203.146.5.1.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-203.146.5.1.el9uek

Vulnerabilities 6