Skip to content
OpenAdvisories
High ELSA-2025-20319 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published May 11, 2025 · Updated May 11, 2025

Summary

[5.4.17-2136.343.5.1]
- nvme: fix deadlock between reset and scan (Bitao Hu) [Orabug: 37920457]

[5.4.17-2136.343.5]
- sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [Orabug: 37846673]
- sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts (NGI0)) [Orabug: 37846668]
- uek-rpm: remove .el7 from shim version (Samasth Norway Ananda) [Orabug: 37834734]

[5.4.17-2136.343.4]
- bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
- Revert 'sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy' (Magali Lemes)
- jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
- serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
- Revert 'sctp: sysctl: auth_enable: avoid using current->nsproxy' (Magali Lemes)
- net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
- vlan: fix memory leak in vlan_newlink() (Eric Dumazet)
- rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Hakon Bugge) [Orabug: 37747826]

[5.4.17-2136.343.3]
- LTS tag: v5.4.291 (Sherry Yang)
- eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
- slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku)
- intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
- intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
- intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
- Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher)
- xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
- usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
- usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
- usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
- usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
- usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
- usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)
- usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea)
- usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
- usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
- usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
- Revert 'drivers/card_reader/rtsx_usb: Restore interrupt based detection' (Christian Heusel)
- gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
- net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
- net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
- net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
- vlan: enforce underlying device type (Oscar Maes)
- ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen)
- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
- drm/sched: Fix preprocessor guard (Philipp Stanner)
- hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
- llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet)
- hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
- hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
- hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
- caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov)
- net: gso: fix ownership in __udp_gso_segment (Antoine Tenart)
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu)
- HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
- wifi: iwlwifi: limit printed string from FW file (Johannes Berg)
- mm/page_alloc: fix uninitialized variable (Hao Zhang)
- rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li)
- rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li)
- wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov)
- wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich)
- x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
- x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
- x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
- platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
- drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
- ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
- ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
- HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov)
- Revert 'of: reserved-memory: Fix using wrong number of cells to get property 'alignment'' (Rob Herring (Arm))
- drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
- drm/amdgpu: Check extended configuration space register when system uses large bar (Ma Jun)
- drm/amdgpu: skip BAR resizing if the bios already did it (Alex Deucher)
- acct: perform last write from workqueue (Christian Brauner)
- kernel/acct.c: use dedicated helper to access rlimit values (Yang Yang)
- kernel/acct.c: use #elif instead of #end and #elif (Hui Su)
- drop_monitor: fix incorrect initialization order (Gavrilov Ilia)
- pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le)
- sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner)
- phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
- phy: tegra: xusb: reset VBUS & ID OVERRIDE (BH Hsieh)
- usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich)
- perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
- ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov)
- x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
- net: mvpp2: cls: Fixe

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2136.343.5.1.el8uek
Oracle Linux · 7 kernel-uek-container 0:5.4.17-2136.343.5.1.el8uek
Oracle Linux · 7 kernel-uek-container-debug 0:5.4.17-2136.343.5.1.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2136.343.5.1.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2136.343.5.1.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2136.343.5.1.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2136.343.5.1.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2136.343.5.1.el7uek

Vulnerabilities 2

  • High 7.5

    net: core: reject skb_copy(_expand) for fraglist GSO skbs

    In the Linux kernel, the following vulnerability has been resolved: net: core: reject skb_copy(_expand) for fraglist GSO skbs SKB_GSO_FRAGLIST skbs must not be linearized, otherwise they become invalid. Return NULL if such an skb is passed to skb_copy or skb_…

  • Unscored —

    net: mana: Fix TX CQE error handling

    In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type (probably from a newer hardware), still free the SKB, update the queue tail, etc., otherwise the accounting will be wrong…