Summary
[5.15.0-206.153.7]
- mmc: core: Initialize mmc_blk_ioc_data (Mikko Rapeli)
- ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki)
- mmc: core: Fix switch on gp3 partition (Dominique Martinet)
- Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory (Michael Kelley)
- bpf: Protect against int overflow for stack access size (Andrei Matei)
- fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche)
- module: fix init_module_from_file() error handling (Linus Torvalds) [Orabug: 36381490]
- modules: catch concurrent module loads, treat them as idempotent (Linus Torvalds) [Orabug: 36381490]
- module: split up 'finit_module()' into init_module_from_file() helper (Linus Torvalds) [Orabug: 36381490]
- module: avoid allocation if module is already present and ready (Luis Chamberlain) [Orabug: 36381490]
- module: extract patient module check into helper (Luis Chamberlain) [Orabug: 36381490]
- module: move early sanity checks into a helper (Luis Chamberlain) [Orabug: 36381490]
- module: Move all into module/ (Aaron Tomlin) [Orabug: 36381490]
- fbdev: fix incorrect address computation in deferred IO (Nam Cao) [Orabug: 36427407]
- io_uring: ensure '0' is returned on file registration success (Jens Axboe) [Orabug: 36544518]
- io_uring: don't save/restore iowait state (Jens Axboe) [Orabug: 36544518]
- io_uring: drop any code related to SCM_RIGHTS (Jens Axboe) [Orabug: 36544518]
- io_uring/unix: drop usage of io_uring socket (Jens Axboe) [Orabug: 36544518]
- Revert 'selftests: mm: fix map_hugetlb failure on 64K page size systems' (Harshit Mogalapalli) [Orabug: 36585256]
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (Dongli Zhang) [Orabug: 36591489]
- rds: Add garbage collection for receive ready cache (Hans Westgaard Ry) [Orabug: 36382723]
- exec, elf: ignore malformed note segments (Anthony Yznaga) [Orabug: 36524976]
- vfio/pds: Refactor/simplify reset logic (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Make sure migration file isn't accessed after reset (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Always clear the save/restore FDs on reset (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Move seq/ack bitmaps into region struct (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Pass region info to relevant functions (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Move and rename region specific info (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Only use a single SGL for both seq and ack (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Fix calculations in pds_vfio_dirty_sync (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Fix possible sleep while in atomic context (Brett Creeley) [Orabug: 36525705]
- vfio/pds: Fix mutex lock->magic != lock warning (Brett Creeley) [Orabug: 36525705]
- RDMA/cm: Print the old state when cm_destroy_id gets timeout (Mark Zhang) [Orabug: 36546711]
- igb: free up irq resources in device shutdown path. (Imran Khan) [Orabug: 36547249]
- net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa) [Orabug: 34695506]
- net: rds: acquire refcount on TCP sockets (Tetsuo Handa) [Orabug: 34695506]
- net: make sock_inuse_add() available (Eric Dumazet) [Orabug: 34695506]
- rds: Optimize rds_cfu_cache_do_gc (Hans Westgaard Ry) [Orabug: 36195145]
- rds: Optimize rds_percpu_caches garbage-collection (Hans Westgaard Ry) [Orabug: 36195145]
- rds: Add lfstack_pop_all (Hans Westgaard Ry) [Orabug: 36195145]
- KVM: arm64: Avoid soft lockups due to I-cache maintenance (Oliver Upton) [Orabug: 36227024]
- KVM: arm64: Drop is_kernel_in_hyp_mode() from __invalidate_icache_guest_page() (Marc Zyngier) [Orabug: 36227024]
- arm64: tlbflush: Rename MAX_TLBI_OPS (Oliver Upton) [Orabug: 36227024]
- uek-rpm: aarch64: Build the ampere-cspmu driver (Dave Kleikamp) [Orabug: 36227024]
- perf: arm_cspmu: Reject events meant for other PMUs (Ilkka Koskinen) [Orabug: 36227024]
- docs/perf: Add ampere_cspmu to toctree to fix a build warning (Ilkka Koskinen) [Orabug: 36227024]
- perf: arm_cspmu: ampere_cspmu: Add support for Ampere SoC PMU (Ilkka Koskinen) [Orabug: 36227024]
- perf: arm_cspmu: Support implementation specific validation (Ilkka Koskinen) [Orabug: 36227024]
- perf: arm_cspmu: Support implementation specific filters (Ilkka Koskinen) [Orabug: 36227024]
- perf: arm_cspmu: Split 64-bit write to 32-bit writes (Ilkka Koskinen) [Orabug: 36227024]
- perf: arm_cspmu: Separate Arm and vendor module (Besar Wicaksono) [Orabug: 36227024]
- perf/arm_cspmu: Decouple APMT dependency (Robin Murphy) [Orabug: 36227024]
- ACPI/APMT: Don't register invalid resource (Robin Murphy) [Orabug: 36227024]
- perf: arm_cspmu: Add missing MODULE_DEVICE_TABLE (Ilkka Koskinen) [Orabug: 36227024]
- perf/arm_cspmu: Fix event attribute type (Robin Murphy) [Orabug: 36227024]
- perf: arm_cspmu: Set irq affinitiy only if overflow interrupt is used (Ilkka Koskinen) [Orabug: 36227024]
- perf: arm_cspmu: Fix variable dereference warning (Besar Wicaksono) [Orabug: 36227024]
- perf: arm_cspmu: Fix module cyclic dependency (Besar Wicaksono) [Orabug: 36227024]
- perf: arm_cspmu: Fix build failure on x86_64 (Besar Wicaksono) [Orabug: 36227024]
- perf: arm_cspmu: Fix modular builds due to missing MODULE_LICENSE()s (Will Deacon) [Orabug: 36227024]
- ACPI: APMT: Fix kerneldoc and indentation (Besar Wicaksono) [Orabug: 36227024]
- perf: arm_cspmu: Add support for NVIDIA SCF and MCF attribute (Besar Wicaksono) [Orabug: 36227024]
- perf: arm_cspmu: Add support for ARM CoreSight PMU driver (Besar Wicaksono) [Orabug: 36227024]
- ACPI: ARM Performance Monitoring Unit Table (APMT) initial support (Besar Wicaksono) [Orabug: 36227024]
- ACPICA: Add support for ARM Performance Monitoring Unit Table. (Besar Wicaksono) [Orabug: 36227024]
- cpufreq: CPPC: Add per_cpu efficiency_class (Pierre Gondois) [Orabug: 36227024]
- bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju) [Or
Fixed packages 14
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-206.153.7.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-206.153.7.el9uek |
Vulnerabilities 1
-
Medium 4.7
CVE-2024-2201
A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent Fine(IBT), and to leak arbitrary Linux kernel memory on Intel systems.