Skip to content
OpenAdvisories
High ELSA-2024-12582 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 8)

Published Aug 12, 2024 · Updated Aug 12, 2024

Summary

[5.15.0-209.161.7]
- loop: Fix a race between loop detach and loop open (Gulam Mohamed) [Orabug: 36865975]

[5.15.0-209.161.6]
- net/mlx5e: drop shorter ethernet frames (Manjunath Patil) [Orabug: 36879156] {CVE-2024-41090} {CVE-2024-41091}
- x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre) [Orabug: 36672479]
- KVM: SVM: fix build error when CONFIG_HYPERV is unset (Simran Singh) [Orabug: 36508934]
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Alexandre Chartre)
- Revert 'mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again' (Jan Kara)
- mm: prevent derefencing NULL ptr in pfn_section_valid() (Waiman Long)

[5.15.0-209.161.5]
- rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan) [Orabug: 36760266]

[5.15.0-209.161.4]
- rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia) [Orabug: 36529561]
- KVM: x86: Advertise AVX-NE-CONVERT CPUID to user space (Jiaxi Chen) [Orabug: 36810714]
- KVM: x86: Advertise AVX-VNNI-INT8 CPUID to user space (Jiaxi Chen) [Orabug: 36810714]
- x86: KVM: Advertise AVX-IFMA CPUID to user space (Jiaxi Chen) [Orabug: 36810714]
- x86: KVM: Advertise AMX-FP16 CPUID to user space (Chang S. Bae) [Orabug: 36810714]
- x86: KVM: Advertise CMPccXADD CPUID to user space (Jiaxi Chen) [Orabug: 36810714]
- x86/cpufeatures: Put the AMX macros in the word 18 block (Jim Mattson) [Orabug: 36810714]
- intel_idle: add Sierra Forest SoC support (Artem Bityutskiy) [Orabug: 36810714]
- intel_idle: add Grand Ridge SoC support (Artem Bityutskiy) [Orabug: 36810714]
- perf/x86/intel/uncore: Support Sierra Forest and Grand Ridge (Kan Liang) [Orabug: 36810714]
- perf/x86/intel/uncore: Support IIO free-running counters on GNR (Kan Liang) [Orabug: 36810714]
- perf/x86/intel/uncore: Support Granite Rapids (Kan Liang) [Orabug: 36810714]
- perf/x86/uncore: Use u64 to replace unsigned for the uncore offsets array (Kan Liang) [Orabug: 36810714]
- perf/x86/intel/uncore: Generic uncore_get_uncores and MMIO format of SPR (Kan Liang) [Orabug: 36810714]
- Documentation/x86: Document resctrl's new sparse_masks (Fenghua Yu) [Orabug: 36810714]
- x86/resctrl: Add sparse_masks file in info (Fenghua Yu) [Orabug: 36810714]
- x86/resctrl: Enable non-contiguous CBMs in Intel CAT (Maciej Wieczor-Retman) [Orabug: 36810714]
- x86/resctrl: Rename arch_has_sparse_bitmaps (Maciej Wieczor-Retman) [Orabug: 36810714]
- x86/cpu: Fix Crestmont uarch (Peter Zijlstra) [Orabug: 36810714]
- x86/cpu: Fix Gracemont uarch (Peter Zijlstra) [Orabug: 36810714]
- powercap: RAPL: fix invalid initialization for pl4_supported field (Sumeet Pawnikar) [Orabug: 36810714]
- perf/x86/intel/uncore: Add events for Intel SPR IMC PMU (Stephane Eranian) [Orabug: 36810714]
- EDAC/i10nm: Add Intel Sierra Forest server support (Qiuxu Zhuo) [Orabug: 36810714]
- perf/x86/msr: Add Granite Rapids (Kan Liang) [Orabug: 36810714]
- platform/x86: ISST: Add support for MSR 0x54 (Srinivas Pandruvada) [Orabug: 36810714]
- powercap: RAPL: Add Power Limit4 support for Meteor Lake SoC (Sumeet Pawnikar) [Orabug: 36810714]
- EDAC/i10nm: Add Intel Granite Rapids server support (Qiuxu Zhuo) [Orabug: 36810714]
- EDAC/i10nm: Make more configurations CPU model specific (Qiuxu Zhuo) [Orabug: 36810714]
- powercap: intel_rapl: add support for Meteor Lake (Zhang Rui) [Orabug: 36810714]
- perf/x86/msr: Add Meteor Lake support (Kan Liang) [Orabug: 36810714]
- perf/x86: Add Meteor Lake support (Kan Liang) [Orabug: 36810714]
- perf: Add PMU_FORMAT_ATTR_SHOW (Kan Liang) [Orabug: 36810714]
- platform/x86: intel/pmc: Replace all the reg_map with init functions (Gayatri Kammela) [Orabug: 36810714]
- thermal: intel: intel_tcc_cooling: Add TCC cooling support for RaptorLake-S (Zhang Rui) [Orabug: 36810714]
- x86/intel_epb: Set Alder Lake N and Raptor Lake P normal EPB (Srinivas Pandruvada) [Orabug: 36810714]
- perf/x86/msr: Add new Raptor Lake S support (Kan Liang) [Orabug: 36810714]
- perf/x86: Add new Raptor Lake S support (Kan Liang) [Orabug: 36810714]
- x86/resctrl: Remove arch_has_empty_bitmaps (Babu Moger) [Orabug: 36810714]
- intel_idle: Add AlderLake-N support (Zhang Rui) [Orabug: 36810714]
- platform/x86/intel: pmc/core: Add Raptor Lake support to pmc core driver (Gayatri Kammela) [Orabug: 36810714]
- tools/power turbostat: Add support for RPL-S (Zhang Rui) [Orabug: 36810714]
- perf/x86/intel: Fix unchecked MSR access error for Alder Lake N (Kan Liang) [Orabug: 36810714]
- powercap: intel_rapl: Add support for RAPTORLAKE_S (Zhang Rui) [Orabug: 36810714]
- thermal: intel: Add TCC cooling support for Alder Lake-N and Raptor Lake-P (Sumeet Pawnikar) [Orabug: 36810714]
- powercap: RAPL: Add Power Limit4 support for Alder Lake-N and Raptor Lake-P (Sumeet Pawnikar) [Orabug: 36810714]
- EDAC/i10nm: Print an extra register set of retry_rd_err_log (Qiuxu Zhuo) [Orabug: 36810714]
- EDAC/i10nm: Retrieve and print retry_rd_err_log registers for HBM (Qiuxu Zhuo) [Orabug: 36810714]
- EDAC/skx_common: Add ChipSelect ADXL component (Qiuxu Zhuo) [Orabug: 36810714]
- perf/x86/intel: Fix PEBS data source encoding for ADL (Kan Liang) [Orabug: 36810714]
- perf/x86/intel: Fix PEBS memory access info encoding for ADL (Kan Liang) [Orabug: 36810714]
- platform/x86: intel/pmc: Add Alder Lake N support to PMC core driver (Gayatri Kammela) [Orabug: 36810714]
- platform/x86/intel: pmc: Support Intel Raptorlake P (George D Sworo) [Orabug: 36810714]
- tools/power turbostat: Support RAPTORLAKE P (George D Sworo) [Orabug: 36810714]
- powercap: intel_rapl: Add support for RAPTORLAKE_P (George D Sworo) [Orabug: 36810714]
- tools/power turbostat: add support for ALDERLAKE_N (Zhang Rui) [Orabug: 36810714]
- powercap: intel_rapl: add support for ALDERLAKE_N (Zhang Rui) [Orabug: 36810714]
- powercap: RAPL: Add Power Limit4 support for RaptorLake (Sumeet Pawnikar) [Orabug: 36810714]
- thermal: intel_tcc_cooling: Add TCC cooli

Fixed packages 14

ReleasePackageFixed in
Oracle Linux · 8 bpftool 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-container 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-container-debug 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-core 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-debug 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-debug-core 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-debug-devel 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-debug-modules 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-debug-modules-extra 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-devel 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-doc 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-modules 0:5.15.0-209.161.7.el9uek
Oracle Linux · 8 kernel-uek-modules-extra 0:5.15.0-209.161.7.el9uek

Vulnerabilities 2

  • High 8.8

    tap: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be…

  • High 8.8

    tun: add missing verification for short frame

    In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent…