Summary
[5.15.0-308.179.6.2]
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920681]
- x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920681]
- x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920681]
- selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add 'vmexit' option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37863726] {CVE-2024-28956}
- x86/alternatives: Remove faulty optimization (Josh Poimboeuf) [Orabug: 37863726] {CVE-2024-28956}
- x86/alternative: Optimize returns patching (Borislav Petkov (AMD)) [Orabug: 37863726] {CVE-2024-28956}
Fixed packages 18
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | bpftool | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-container | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-container-debug | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-core | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-core | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-devel | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-debug-modules-extra | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-devel | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-doc | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-modules | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek-modules-extra | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k-core | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules | 0:5.15.0-308.179.6.2.el9uek |
| Oracle Linux · 8 | kernel-uek64k-modules-extra | 0:5.15.0-308.179.6.2.el9uek |
Vulnerabilities 1
-
Medium 5.6
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) …