Oracle7: ELSA-2022-9998: kernel Important Security Update | LinuxS...
Oracle Linux Security Advisory ELSA-2022-9998

https://linux.oracle.com/errata/ELSA-2022-9998.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.313.6.el7uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.313.6.el7uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.313.6.el7uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.313.6.el7uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.313.6.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.313.6.el7uek.x86_64.rpm

aarch64:
kernel-uek-5.4.17-2136.313.6.el7uek.aarch64.rpm
kernel-uek-debug-5.4.17-2136.313.6.el7uek.aarch64.rpm
kernel-uek-debug-devel-5.4.17-2136.313.6.el7uek.aarch64.rpm
kernel-uek-devel-5.4.17-2136.313.6.el7uek.aarch64.rpm
kernel-uek-doc-5.4.17-2136.313.6.el7uek.noarch.rpm
kernel-uek-tools-5.4.17-2136.313.6.el7uek.aarch64.rpm
kernel-uek-tools-libs-5.4.17-2136.313.6.el7uek.aarch64.rpm
perf-5.4.17-2136.313.6.el7uek.aarch64.rpm
python-perf-5.4.17-2136.313.6.el7uek.aarch64.rpm


SRPMS:
https://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.313.6.el7uek.src.rpm

Related CVEs:

CVE-2022-3028




Description of changes:

[5.4.17-2136.313.6.el7uek]
- Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari)  [Orabug: 33000550]
- NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo)  [Orabug: 34475857]
- EDAC/mce_amd: Do not load edac_mce_amd module on guests (Smita Koralahalli)  [Orabug: 34484268]
- uek: kabi: update kABI files for new symbol (Saeed Mirzamohammadi)  [Orabug: 34595589]
- RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 34684322]
- uek-rpm: Add support for building a kdump kernel on MIPS64 (Dave Kleikamp)  [Orabug: 34696261]
- hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek)  [Orabug: 34710682]
- hwmon: (opbmc) Driver message prefixes (Jan Zdarek)  [Orabug: 34710682]
- Revert "fs: check FMODE_LSEEK to control internal pipe splicing" (Saeed Mirzamohammadi)  [Orabug: 34724694]
- Revert "sched/deadline: Fix priority inheritance with multiple scheduling classes" (Sherry Yang)  [Orabug: 34700434]

[5.4.17-2136.313.5.el7uek]
- IB/mlx5: Move to fully dynamic UAR mode once user space supports it (Yishai Hadas)  [Orabug: 34430072]
- IB/mlx5: Extend QP creation to get uar page index from user space (Yishai Hadas)  [Orabug: 34430072]
- IB/mlx5: Extend CQ creation to get uar page index from user space (Yishai Hadas)  [Orabug: 34430072]
- IB/mlx5: Expose UAR object and its alloc/destroy commands (Yishai Hadas)  [Orabug: 34430072]
- IB/mlx5: Generally use the WC auto detection test result (Yishai Hadas)  [Orabug: 34430072]
- RDMA/mlx5: Use offsetofend() instead of duplicated variant (Leon Romanovsky)  [Orabug: 34430072]
- RDMA/mlx5: Remove duplicate definitions of SW_ICM macros (Erez Shitrit)  [Orabug: 34430072]
- IB/mlx5: Introduce UAPIs to manage packet pacing (Yishai Hadas)  [Orabug: 34430072]
- RDMA/mlx5: Prevent overflow in mmap offset calculations (Leon Romanovsky)  [Orabug: 34430072]
- RDMA/core: Make the entire API tree static (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Ensure that rdma_user_mmap_entry_remove() is a fence (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/mlx5: Set relaxed ordering when requested (Michael Guralnik)  [Orabug: 34430072]
- RDMA/core: Add the core support field to METHOD_GET_CONTEXT (Michael Guralnik)  [Orabug: 34430072]
- RDMA/uverbs: Add new relaxed ordering memory region access flag (Michael Guralnik)  [Orabug: 34430072]
- RDMA/core: Add optional access flags range (Michael Guralnik)  [Orabug: 34430072]
- RDMA/uverbs: Add ioctl command to get a device context (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Remove ucontext_lock from the uverbs_destry_ufile_hw() path (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Add UVERBS_METHOD_ASYNC_EVENT_ALLOC (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Use READ_ONCE for ib_ufile.async_file (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Make ib_uverbs_async_event_file into a uobject (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Remove the ufile arg from rdma_alloc_begin_uobject (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Simplify type usage for ib_uverbs_async_handler() (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Do not erase the type of ib_wq.uobject (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Do not erase the type of ib_qp.uobject (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Do not erase the type of ib_cq.uobject (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Make ib_ucq_object use ib_uevent_object (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Do not allow alloc_commit to fail (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/mlx5: Simplify devx async commands (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/core: Simplify destruction of FD uobjects (Jason Gunthorpe)  [Orabug: 34430072]
- RDMA/mlx5: Use RCU and direct refcounts to keep memory alive (Jason Gunthorpe)  [Orabug: 34430072]
- IB/mlx5: Add mmap support for VAR (Yishai Hadas)  [Orabug: 34430072]
- IB/mlx5: Introduce VAR object and its alloc/destroy methods (Yishai Hadas)  [Orabug: 34430072]
- IB/mlx5: Extend caps stage to handle VAR capabilities (Yishai Hadas)  [Orabug: 34430072]
- IB/mlx5: Fix device memory flows (Yishai Hadas)  [Orabug: 34430072]
- IB/core: Introduce rdma_user_mmap_entry_insert_range() API (Yishai Hadas)  [Orabug: 34430072]
- IB/mlx5: Support flow counters offset for bulk counters (Yevgeny Kliteynik)  [Orabug: 34430072]
- IB/mlx5: Rename profile and init methods (Michael Guralnik)  [Orabug: 34430072]
- RDMA: Connect between the mmap entry and the umap_priv structure (Michal Kalderon)  [Orabug: 34430072]
- RDMA/core: Create mmap database and cookie helper functions (Michal Kalderon)  [Orabug: 34430072]
- RDMA/core: Move core content from ib_uverbs to ib_core (Michal Kalderon)  [Orabug: 34430072]
- IB/mlx5: Test write combining support (Michael Guralnik)  [Orabug: 34430072]
- IB/mlx5: Align usage of QP1 create flags with rest of mlx5 defines (Michael Guralnik)  [Orabug: 34430072]
- IB/mlx5: Introduce and use mkey context setting helper routine (Parav Pandit)  [Orabug: 34430072]
- net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34578051]
- Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry)  [Orabug: 34662431]
- net: vlan: Avoid using BUG() in vlan_proto_idx() (Florian Fainelli)  [Orabug: 34672449]
- KVM: x86: drop superfluous mmu_check_root() from fast_pgd_switch() (Vitaly Kuznetsov)  [Orabug: 34679770]
- KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (Babu Moger)  [Orabug: 34679770]
- KVM: x86: Invoke vendor's vcpu_after_set_cpuid() after all common updates (Sean Christopherson)  [Orabug: 34679770]
- KVM: x86: Move kvm_x86_ops.vcpu_after_set_cpuid() into kvm_vcpu_after_set_cpuid() (Xiaoyao Li)  [Orabug: 34679770]
- KVM: x86: Rename cpuid_update() callback to vcpu_after_set_cpuid() (Xiaoyao Li)  [Orabug: 34679770]
- RDMA/cma: Use output interface for net_dev check (HÃ¥kon Bugge)  [Orabug: 34694980]

[5.4.17-2136.313.4.el7uek]
- arm64: pensando: Suppress tree-loop-distribute-patterns optimization (Henry Willard)  [Orabug: 34634974]
- uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi)  [Orabug: 34644240]
- ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Dave Hansen)  [Orabug: 34671342]

[5.4.17-2136.313.3.el7uek]
- Revert "net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()" (Sasha Levin) 
- USB: core: Fix RST error in hub.c (Alan Stern) 
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa) 
- parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang) 
- LTS tag: v5.4.213 (Sherry Yang) 
- MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling) 
- x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra) 
- sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen) 
- tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell) 
- nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg) 
- RDMA/mlx5: Set local port to one when accessing counters (Chris Mi) 
- ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun) 
- RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij) 
- i40e: Fix kernel crash during module removal (Ivan Vecera) 
- tipc: fix shift wrapping bug in map_get() (Dan Carpenter) 
- sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen) 
- afs: Use the operation issue time instead of the reply time for callbacks (David Howells) 
- rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells) 
- netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater) 
- netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi) 
- RDMA/hns: Fix supported page size (Chengchang Tang) 
- soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He) 
- RDMA/cma: Fix arguments order in net device validation (Michael Guralnik) 
- regulator: core: Clean up on enable failure (Andrew Halaney) 
- ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch) 
- smb3: missing inode locks in punch hole (David Howells) 
- scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang) 
- scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy) 
- nvmet: fix a use-after-free (Bart Van Assche) 
- debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman) 
- kprobes: Prohibit probes in gate area (Christian A. Ehrhardt) 
- ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke) 
- ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong) 
- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis) 
- drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang) 
- fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang) 
- arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla) 
- parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller) 
- parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong) 
- drm/radeon: add a force flush to delay work when radeon (Zhenneng Li) 
- drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li) 
- drm/gem: Fix GEM handle release errors (Jeffy Chen) 
- scsi: megaraid_sas: Fix double kfree() (Guixin Liu) 
- USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold) 
- USB: serial: ch341: fix lost character on LCR updates (Johan Hovold) 
- usb: dwc3: disable USB core PHY management (Johan Hovold) 
- usb: dwc3: fix PHY disable sequence (Johan Hovold) 
- btrfs: harden identification of a stale device (Anand Jain) 
- drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz) 
- ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai) 
- ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai) 
- net: mac802154: Fix a condition in the receive path (Miquel Raynal) 
- ip: fix triggering of 'icmp redirect' (Nicolas Dichtel) 
- wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant) 
- driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres) 
- usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati) 
- USB: core: Prevent nested device-reset calls (Alan Stern) 
- s390: fix nospec table alignments (Josh Poimboeuf) 
- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer) 
- usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta) 
- USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT) 
- usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit) 
- usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun) 
- USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao) 
- USB: serial: option: add Quectel EM060K modem (Yonglin Tan) 
- USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu) 
- USB: serial: cp210x: add Decagon UCA device id (Johan Hovold) 
- xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman) 
- thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg) 
- gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen) 
- hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf) 
- clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren) 
- Input: rk805-pwrkey - fix module autoloading (Peter Robinson) 
- clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai) 
- Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" (Stephen Boyd) 
- clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai) 
- drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King) 
- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold) 
- binder: fix UAF of ref->proc caused by race condition (Carlos Llamas) 
- USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens) 
- misc: fastrpc: fix memory corruption on open (Johan Hovold) 
- misc: fastrpc: fix memory corruption on probe (Johan Hovold) 
- iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson) 
- Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa) 
- tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun) 
- vt: Clear selection before changing the font (Helge Deller) 
- powerpc: align syscall table for ppc32 (Masahiro Yamada) 
- staging: rtl8712: fix use after free bugs (Dan Carpenter) 
- serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang) 
- net/smc: Remove redundant refcount increase (Yacan Liu) 
- Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" (Jakub Kicinski) 
- tcp: annotate data-race around challenge_timestamp (Eric Dumazet) 
- sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Høiland-Jørgensen) 
- kcm: fix strp_init() order and cleanup (Cong Wang) 
- ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou) 
- net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao) 
- Revert "xhci: turn off port power in shutdown" (Mathias Nyman) 
- wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter) 
- ieee802154/adf7242: defer destroy_workqueue call (Lin Ma) 
- iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson) 
- platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko) 
- drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson) 
- drm/msm/dsi: fix the inconsistent indenting (sunliming) 
- net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt) 
- Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (Yee Lee) 
- fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds) 
- net: mvpp2: debugfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman) 
- wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka) 
- efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim) 
- LTS tag: v5.4.212 (Sherry Yang) 
- net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) 
- net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao) 
- kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima) 
- lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin) 
- lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy) 
- btrfs: tree-checker: check for overlapping extent items (Josef Bacik) 
- netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven) 
- drm/amd/display: Fix pixel clock programming (Ilya Bakoulin) 
- s390/hypfs: avoid error message under KVM (Juergen Gross) 
- neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev) 
- drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang) 
- drm/amd/display: Avoid MPC infinite loop (Josip Pavic) 
- btrfs: unify lookup return value when dir entry is missing (Filipe Manana) 
- btrfs: do not pin logs too early during renames (Filipe Manana) 
- btrfs: introduce btrfs_lookup_match_dir (Marcos Paulo de Souza) 
- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn) 
- bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao) 
- ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong) 
- fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren) 
- HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati) 
- media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu) 
- udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy) 
- HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones) 
- Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz) 
- kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng) 
- x86/bugs: Add "unknown" reporting for MMIO Stale Data (Pawan Gupta) 
- s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer) 
- mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn) 
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar) 
- perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian) 
- md: call __md_stop_writes in md_stop (Guoqing Jiang) 
- mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand) 
- ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu) 
- s390: fix double free of GS and RI CBs on fork() failure (Brian Foster) 
- asm-generic: sections: refactor memory_intersects (Quanyang Wang) 
- loop: Check for overflow while configuring loop (Siddh Raman Pant) 
- x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin) 
- btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues) 
- btrfs: add info when mount fails due to stale replace target (Anand Jain) 
- btrfs: replace: drop assert for suspended replace (Anand Jain) 
- btrfs: fix silent failure when deleting root reference (Filipe Manana) 
- ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller) 
- net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima) 
- net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima) 
- net: Fix a data-race around netdev_budget. (Kuniyuki Iwashima) 
- net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima) 
- net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima) 
- net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima) 
- ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima) 
- net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima) 
- net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima) 
- netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso) 
- netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso) 
- netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso) 
- netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso) 
- bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta) 
- net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej Żenczykowski) 
- bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins) 
- net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov) 
- net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov) 
- rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux) 
- SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust) 
- xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong) 
- kernel/sched: Remove dl_boosted flag comment (Hui Su) 
- sched/deadline: Fix priority inheritance with multiple scheduling classes (Juri Lelli) 
- sched/deadline: Fix stale throttling on de-/boosted tasks (Lucas Stach) 
- sched/deadline: Unthrottle PI boosted threads while enqueuing (Daniel Bristot de Oliveira) 
- pinctrl: amd: Don't save/restore interrupt status and wake status bits (Basavaraj Natikar) 
- Revert "selftests/bpf: Fix test_align verifier log patterns" (Jean-Philippe Brucker) 
- Revert "selftests/bpf: Fix "dubious pointer arithmetic" test" (Jean-Philippe Brucker) 
- usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak) 
- kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap) 
- parisc: Fix exception handler for fldw and fstw instructions (Helge Deller) 
- audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui)

[5.4.17-2136.313.2.el7uek]
- ice: enable ethtool hooks for E810 firmware update (John Donnelly)  [Orabug: 34077831]
- ice: add ice_handle_nvm_access() (John Donnelly)  [Orabug: 34077831]
- rds: cong: Make rds_cong_wait an array to reduce lock contention (HÃ¥kon Bugge)  [Orabug: 34574093]
- rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (HÃ¥kon Bugge)  [Orabug: 34574093]
- mm: memcg/slab: disable cache merging for KMALLOC_NORMAL caches (Waiman Long)  [Orabug: 34601144]
caches (Waiman Long)  [Orabug: 34601144]
- mm: memcg/slab: properly set up gfp flags for objcg pointer array (Waiman Long)  [Orabug: 34601144]
- mm, memcg: introduce mem_cgroup_kmem_disabled() (Roman Gushchin)  [Orabug: 34601144]
- mm, slab: make kmalloc_info[] contain all types of names (Pengfei Li)  [Orabug: 34601144]
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34639998]
- cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)  [Orabug: 34639998]
- cgroup: Optimize single thread migration (Michal Koutný)  [Orabug: 34639998]
- Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" (Imran Khan)  [Orabug: 34639998]
cpus_read_lock() deadlock" (Imran Khan)  [Orabug: 34639998]
- x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Yazen Ghannam)  [Orabug: 34639981]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Yazen Ghannam)  [Orabug: 34639981]
- x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Muralidhara M K)  [Orabug: 34639981]
- x86/mce: Increase maximum number of banks to 64 (Akshay Gupta)  [Orabug: 34639981]
- x86/MCE/AMD, EDAC/amd64: Move address translation to AMD64 EDAC (Yazen Ghannam)  [Orabug: 34639981]
- x86/MCE/AMD: Export smca_get_bank_type symbol (Mukul Joshi)  [Orabug: 34639981]
- EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Yazen Ghannam)  [Orabug: 34639981]
- EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (Yazen Ghannam)  [Orabug: 34639981]
- EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam)  [Orabug: 34639981]
- hwmon: (k10temp) Support up to 12 CCDs on AMD Family of processors (Babu Moger)  [Orabug: 34639981]
- hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger)  [Orabug: 34639981]
- x86/amd_nb: Add AMD Family 19h Models (10h-1Fh) and (A0h-AFh) PCI IDs (Yazen Ghannam)  [Orabug: 34639981]
- hwmon: (k10temp) Remove unused definitions (Babu Moger)  [Orabug: 34639981]
- hwmon: (k10temp) Remove residues of current and voltage (suma hegde)  [Orabug: 34639981]
- hwmon: (k10temp) Add support for yellow carp (Mario Limonciello)  [Orabug: 34639981]
- hwmon: (k10temp) Rework the temperature offset calculation (Mario Limonciello)  [Orabug: 34639981]
- hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU (Mario Limonciello)  [Orabug: 34639981]
- hwmon: (k10temp) Add additional missing Zen2 and Zen3 APUs (Mario Limonciello)  [Orabug: 34639981]
- hwmon: (k10temp) support Zen3 APUs (David Bartley)  [Orabug: 34639981]
- x86/amd_nb: Add AMD family 19h model 50h PCI ids (David Bartley)  [Orabug: 34639981]
- hwmon: (k10temp) Zen3 Ryzen Desktop CPUs support (Gabriel Craciunescu)  [Orabug: 34639981]
- hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (Guenter Roeck)  [Orabug: 34639981]
- hwmon: (k10temp) Add support for Zen3 CPUs (Wei Huang)  [Orabug: 34639981]
- hwmon: (k10temp) Take out debugfs code (Guenter Roeck)  [Orabug: 34639981]
- hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs (Wei Huang)  [Orabug: 34639981]
- hwmon: (k10temp) Create common functions and macros for Zen CPU families (Wei Huang)  [Orabug: 34639981]
- hwmon: (k10temp) make some symbols static (Jason Yan)  [Orabug: 34639981]
- hwmon: (k10temp) Reorganize and simplify temperature support detection (Guenter Roeck)  [Orabug: 34639981]
- Revert "hwmon: (k10temp) Add support for Zen3 CPUs" (Dave Kleikamp)  [Orabug: 34639981]
- uek-rpm: add missing nft_chain_nat.ko module (Venkat Venkatsubra)  [Orabug: 34639977]
- random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli)  [Orabug: 34639972]
- hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek)  [Orabug: 34639967]
- KVM: SVM: Clear the CR4 register on reset (Babu Moger)  [Orabug: 34639963]
- x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra)  [Orabug: 34639951]
- netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 34610051]
- uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour)  [Orabug: 34610044]
- uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour)  [Orabug: 34610044]
- uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour)  [Orabug: 34610044]
- uek-rpm: Add nftables support T93 and Ortano (Henry Willard)  [Orabug: 34610035]
- af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34610032]  {CVE-2022-3028}
- cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)  [Orabug: 34610025]
cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 34610025]
- audit: use extern storage class for audit_filter_syscall() (Ankur Arora)  [Orabug: 34586449]
- audit: annotate branch direction for audit_in_mask() (Ankur Arora)  [Orabug: 34586449]
- audit: cache ctx->major in audit_filter_syscall() (Ankur Arora)  [Orabug: 34586449]

[5.4.17-2136.313.1.el7uek]
- video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (Javier Martinez Canillas)  [Orabug: 32301403]
- KVM: arm: vgic: Only use the virtual state when userspace accesses enable bits (Marc Zyngier)  [Orabug: 34542967]
- uek-rpm: mips: enable CRYTPTO_USER config options (Dave Kleikamp)  [Orabug: 34557309]


_______________________________________________
El-errata mailing list
[email protected]
https://oss.oracle.com/mailman/listinfo/el-errata

Oracle7: ELSA-2022-9998: kernel Important Security Update

Summary

Description of changes: [5.4.17-2136.313.6.el7uek] - Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari) [Orabug: 33000550] - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34475857] - EDAC/mce_amd: Do not load edac_mce_amd module on guests (Smita Koralahalli) [Orabug: 34484268] - uek: kabi: update kABI files for new symbol (Saeed Mirzamohammadi) [Orabug: 34595589] - RDS/IB Fix allocation warning (Hans Westgaard Ry) [Orabug: 34684322] - uek-rpm: Add support for building a kdump kernel on MIPS64 (Dave Kleikamp) [Orabug: 34696261] - hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek) [Orabug: 34710682] - hwmon: (opbmc) Driver message prefixes (Jan Zdarek) [Orabug: 34710682] - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" (Saeed Mirzamohammadi) [Orabug: 34724694] - Revert "sched/deadline: Fix priority inheritance with multiple scheduling classes" (Sherry Yang) [Orabug: 34700434] [5.4.17-2136.313.5.el7uek] - IB/mlx5: Move to fully dynamic UAR mode once user space supports it (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Extend QP creation to get uar page index from user space (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Extend CQ creation to get uar page index from user space (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Expose UAR object and its alloc/destroy commands (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Generally use the WC auto detection test result (Yishai Hadas) [Orabug: 34430072] - RDMA/mlx5: Use offsetofend() instead of duplicated variant (Leon Romanovsky) [Orabug: 34430072] - RDMA/mlx5: Remove duplicate definitions of SW_ICM macros (Erez Shitrit) [Orabug: 34430072] - IB/mlx5: Introduce UAPIs to manage packet pacing (Yishai Hadas) [Orabug: 34430072] - RDMA/mlx5: Prevent overflow in mmap offset calculations (Leon Romanovsky) [Orabug: 34430072] - RDMA/core: Make the entire API tree static (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Ensure that rdma_user_mmap_entry_remove() is a fence (Jason Gunthorpe) [Orabug: 34430072] - RDMA/mlx5: Set relaxed ordering when requested (Michael Guralnik) [Orabug: 34430072] - RDMA/core: Add the core support field to METHOD_GET_CONTEXT (Michael Guralnik) [Orabug: 34430072] - RDMA/uverbs: Add new relaxed ordering memory region access flag (Michael Guralnik) [Orabug: 34430072] - RDMA/core: Add optional access flags range (Michael Guralnik) [Orabug: 34430072] - RDMA/uverbs: Add ioctl command to get a device context (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Remove ucontext_lock from the uverbs_destry_ufile_hw() path (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Add UVERBS_METHOD_ASYNC_EVENT_ALLOC (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Use READ_ONCE for ib_ufile.async_file (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Make ib_uverbs_async_event_file into a uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Remove the ufile arg from rdma_alloc_begin_uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Simplify type usage for ib_uverbs_async_handler() (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Do not erase the type of ib_wq.uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Do not erase the type of ib_qp.uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Do not erase the type of ib_cq.uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Make ib_ucq_object use ib_uevent_object (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Do not allow alloc_commit to fail (Jason Gunthorpe) [Orabug: 34430072] - RDMA/mlx5: Simplify devx async commands (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Simplify destruction of FD uobjects (Jason Gunthorpe) [Orabug: 34430072] - RDMA/mlx5: Use RCU and direct refcounts to keep memory alive (Jason Gunthorpe) [Orabug: 34430072] - IB/mlx5: Add mmap support for VAR (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Introduce VAR object and its alloc/destroy methods (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Extend caps stage to handle VAR capabilities (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Fix device memory flows (Yishai Hadas) [Orabug: 34430072] - IB/core: Introduce rdma_user_mmap_entry_insert_range() API (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Support flow counters offset for bulk counters (Yevgeny Kliteynik) [Orabug: 34430072] - IB/mlx5: Rename profile and init methods (Michael Guralnik) [Orabug: 34430072] - RDMA: Connect between the mmap entry and the umap_priv structure (Michal Kalderon) [Orabug: 34430072] - RDMA/core: Create mmap database and cookie helper functions (Michal Kalderon) [Orabug: 34430072] - RDMA/core: Move core content from ib_uverbs to ib_core (Michal Kalderon) [Orabug: 34430072] - IB/mlx5: Test write combining support (Michael Guralnik) [Orabug: 34430072] - IB/mlx5: Align usage of QP1 create flags with rest of mlx5 defines (Michael Guralnik) [Orabug: 34430072] - IB/mlx5: Introduce and use mkey context setting helper routine (Parav Pandit) [Orabug: 34430072] - net/rds: Send congestion map updates only via path zero (Anand Khoje) [Orabug: 34578051] - Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry) [Orabug: 34662431] - net: vlan: Avoid using BUG() in vlan_proto_idx() (Florian Fainelli) [Orabug: 34672449] - KVM: x86: drop superfluous mmu_check_root() from fast_pgd_switch() (Vitaly Kuznetsov) [Orabug: 34679770] - KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (Babu Moger) [Orabug: 34679770] - KVM: x86: Invoke vendor's vcpu_after_set_cpuid() after all common updates (Sean Christopherson) [Orabug: 34679770] - KVM: x86: Move kvm_x86_ops.vcpu_after_set_cpuid() into kvm_vcpu_after_set_cpuid() (Xiaoyao Li) [Orabug: 34679770] - KVM: x86: Rename cpuid_update() callback to vcpu_after_set_cpuid() (Xiaoyao Li) [Orabug: 34679770] - RDMA/cma: Use output interface for net_dev check (Håkon Bugge) [Orabug: 34694980] [5.4.17-2136.313.4.el7uek] - arm64: pensando: Suppress tree-loop-distribute-patterns optimization (Henry Willard) [Orabug: 34634974] - uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi) [Orabug: 34644240] - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Dave Hansen) [Orabug: 34671342] [5.4.17-2136.313.3.el7uek] - Revert "net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()" (Sasha Levin) - USB: core: Fix RST error in hub.c (Alan Stern) - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa) - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang) - LTS tag: v5.4.213 (Sherry Yang) - MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling) - x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra) - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen) - tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell) - nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg) - RDMA/mlx5: Set local port to one when accessing counters (Chris Mi) - ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun) - RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij) - i40e: Fix kernel crash during module removal (Ivan Vecera) - tipc: fix shift wrapping bug in map_get() (Dan Carpenter) - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen) - afs: Use the operation issue time instead of the reply time for callbacks (David Howells) - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells) - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater) - netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi) - RDMA/hns: Fix supported page size (Chengchang Tang) - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He) - RDMA/cma: Fix arguments order in net device validation (Michael Guralnik) - regulator: core: Clean up on enable failure (Andrew Halaney) - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch) - smb3: missing inode locks in punch hole (David Howells) - scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang) - scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy) - nvmet: fix a use-after-free (Bart Van Assche) - debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman) - kprobes: Prohibit probes in gate area (Christian A. Ehrhardt) - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke) - ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong) - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis) - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang) - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang) - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla) - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller) - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong) - drm/radeon: add a force flush to delay work when radeon (Zhenneng Li) - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li) - drm/gem: Fix GEM handle release errors (Jeffy Chen) - scsi: megaraid_sas: Fix double kfree() (Guixin Liu) - USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold) - USB: serial: ch341: fix lost character on LCR updates (Johan Hovold) - usb: dwc3: disable USB core PHY management (Johan Hovold) - usb: dwc3: fix PHY disable sequence (Johan Hovold) - btrfs: harden identification of a stale device (Anand Jain) - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz) - ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai) - ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai) - net: mac802154: Fix a condition in the receive path (Miquel Raynal) - ip: fix triggering of 'icmp redirect' (Nicolas Dichtel) - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant) - driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres) - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati) - USB: core: Prevent nested device-reset calls (Alan Stern) - s390: fix nospec table alignments (Josh Poimboeuf) - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer) - usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta) - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT) - usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit) - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun) - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao) - USB: serial: option: add Quectel EM060K modem (Yonglin Tan) - USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu) - USB: serial: cp210x: add Decagon UCA device id (Johan Hovold) - xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman) - thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg) - gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen) - hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf) - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren) - Input: rk805-pwrkey - fix module autoloading (Peter Robinson) - clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai) - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" (Stephen Boyd) - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai) - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King) - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold) - binder: fix UAF of ref->proc caused by race condition (Carlos Llamas) - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens) - misc: fastrpc: fix memory corruption on open (Johan Hovold) - misc: fastrpc: fix memory corruption on probe (Johan Hovold) - iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson) - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa) - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun) - vt: Clear selection before changing the font (Helge Deller) - powerpc: align syscall table for ppc32 (Masahiro Yamada) - staging: rtl8712: fix use after free bugs (Dan Carpenter) - serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang) - net/smc: Remove redundant refcount increase (Yacan Liu) - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" (Jakub Kicinski) - tcp: annotate data-race around challenge_timestamp (Eric Dumazet) - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Høiland-Jørgensen) - kcm: fix strp_init() order and cleanup (Cong Wang) - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou) - net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao) - Revert "xhci: turn off port power in shutdown" (Mathias Nyman) - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter) - ieee802154/adf7242: defer destroy_workqueue call (Lin Ma) - iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson) - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko) - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson) - drm/msm/dsi: fix the inconsistent indenting (sunliming) - net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt) - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (Yee Lee) - fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds) - net: mvpp2: debugfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman) - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka) - efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim) - LTS tag: v5.4.212 (Sherry Yang) - net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao) - kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima) - lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin) - lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy) - btrfs: tree-checker: check for overlapping extent items (Josef Bacik) - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven) - drm/amd/display: Fix pixel clock programming (Ilya Bakoulin) - s390/hypfs: avoid error message under KVM (Juergen Gross) - neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev) - drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang) - drm/amd/display: Avoid MPC infinite loop (Josip Pavic) - btrfs: unify lookup return value when dir entry is missing (Filipe Manana) - btrfs: do not pin logs too early during renames (Filipe Manana) - btrfs: introduce btrfs_lookup_match_dir (Marcos Paulo de Souza) - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn) - bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao) - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong) - fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren) - HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati) - media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu) - udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy) - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones) - Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz) - kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng) - x86/bugs: Add "unknown" reporting for MMIO Stale Data (Pawan Gupta) - s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer) - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn) - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar) - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian) - md: call __md_stop_writes in md_stop (Guoqing Jiang) - mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand) - ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu) - s390: fix double free of GS and RI CBs on fork() failure (Brian Foster) - asm-generic: sections: refactor memory_intersects (Quanyang Wang) - loop: Check for overflow while configuring loop (Siddh Raman Pant) - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin) - btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues) - btrfs: add info when mount fails due to stale replace target (Anand Jain) - btrfs: replace: drop assert for suspended replace (Anand Jain) - btrfs: fix silent failure when deleting root reference (Filipe Manana) - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller) - net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima) - net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima) - net: Fix a data-race around netdev_budget. (Kuniyuki Iwashima) - net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima) - net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima) - net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima) - ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima) - net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima) - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima) - netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso) - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso) - netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso) - netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso) - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta) - net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej Żenczykowski) - bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins) - net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov) - net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov) - rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux) - SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust) - xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong) - kernel/sched: Remove dl_boosted flag comment (Hui Su) - sched/deadline: Fix priority inheritance with multiple scheduling classes (Juri Lelli) - sched/deadline: Fix stale throttling on de-/boosted tasks (Lucas Stach) - sched/deadline: Unthrottle PI boosted threads while enqueuing (Daniel Bristot de Oliveira) - pinctrl: amd: Don't save/restore interrupt status and wake status bits (Basavaraj Natikar) - Revert "selftests/bpf: Fix test_align verifier log patterns" (Jean-Philippe Brucker) - Revert "selftests/bpf: Fix "dubious pointer arithmetic" test" (Jean-Philippe Brucker) - usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak) - kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap) - parisc: Fix exception handler for fldw and fstw instructions (Helge Deller) - audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui) [5.4.17-2136.313.2.el7uek] - ice: enable ethtool hooks for E810 firmware update (John Donnelly) [Orabug: 34077831] - ice: add ice_handle_nvm_access() (John Donnelly) [Orabug: 34077831] - rds: cong: Make rds_cong_wait an array to reduce lock contention (Håkon Bugge) [Orabug: 34574093] - rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Håkon Bugge) [Orabug: 34574093] - mm: memcg/slab: disable cache merging for KMALLOC_NORMAL caches (Waiman Long) [Orabug: 34601144] caches (Waiman Long) [Orabug: 34601144] - mm: memcg/slab: properly set up gfp flags for objcg pointer array (Waiman Long) [Orabug: 34601144] - mm, memcg: introduce mem_cgroup_kmem_disabled() (Roman Gushchin) [Orabug: 34601144] - mm, slab: make kmalloc_info[] contain all types of names (Pengfei Li) [Orabug: 34601144] cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34639998] - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo) [Orabug: 34639998] - cgroup: Optimize single thread migration (Michal Koutný) [Orabug: 34639998] - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" (Imran Khan) [Orabug: 34639998] cpus_read_lock() deadlock" (Imran Khan) [Orabug: 34639998] - x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Yazen Ghannam) [Orabug: 34639981] - x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Yazen Ghannam) [Orabug: 34639981] - x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Muralidhara M K) [Orabug: 34639981] - x86/mce: Increase maximum number of banks to 64 (Akshay Gupta) [Orabug: 34639981] - x86/MCE/AMD, EDAC/amd64: Move address translation to AMD64 EDAC (Yazen Ghannam) [Orabug: 34639981] - x86/MCE/AMD: Export smca_get_bank_type symbol (Mukul Joshi) [Orabug: 34639981] - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Yazen Ghannam) [Orabug: 34639981] - EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (Yazen Ghannam) [Orabug: 34639981] - EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam) [Orabug: 34639981] - hwmon: (k10temp) Support up to 12 CCDs on AMD Family of processors (Babu Moger) [Orabug: 34639981] - hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger) [Orabug: 34639981] - x86/amd_nb: Add AMD Family 19h Models (10h-1Fh) and (A0h-AFh) PCI IDs (Yazen Ghannam) [Orabug: 34639981] - hwmon: (k10temp) Remove unused definitions (Babu Moger) [Orabug: 34639981] - hwmon: (k10temp) Remove residues of current and voltage (suma hegde) [Orabug: 34639981] - hwmon: (k10temp) Add support for yellow carp (Mario Limonciello) [Orabug: 34639981] - hwmon: (k10temp) Rework the temperature offset calculation (Mario Limonciello) [Orabug: 34639981] - hwmon: (k10temp) Don't show Tdie for all Zen/Zen2/Zen3 CPU/APU (Mario Limonciello) [Orabug: 34639981] - hwmon: (k10temp) Add additional missing Zen2 and Zen3 APUs (Mario Limonciello) [Orabug: 34639981] - hwmon: (k10temp) support Zen3 APUs (David Bartley) [Orabug: 34639981] - x86/amd_nb: Add AMD family 19h model 50h PCI ids (David Bartley) [Orabug: 34639981] - hwmon: (k10temp) Zen3 Ryzen Desktop CPUs support (Gabriel Craciunescu) [Orabug: 34639981] - hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (Guenter Roeck) [Orabug: 34639981] - hwmon: (k10temp) Add support for Zen3 CPUs (Wei Huang) [Orabug: 34639981] - hwmon: (k10temp) Take out debugfs code (Guenter Roeck) [Orabug: 34639981] - hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs (Wei Huang) [Orabug: 34639981] - hwmon: (k10temp) Create common functions and macros for Zen CPU families (Wei Huang) [Orabug: 34639981] - hwmon: (k10temp) make some symbols static (Jason Yan) [Orabug: 34639981] - hwmon: (k10temp) Reorganize and simplify temperature support detection (Guenter Roeck) [Orabug: 34639981] - Revert "hwmon: (k10temp) Add support for Zen3 CPUs" (Dave Kleikamp) [Orabug: 34639981] - uek-rpm: add missing nft_chain_nat.ko module (Venkat Venkatsubra) [Orabug: 34639977] - random: Fix incorrect type for 'rc' variable (Harshit Mogalapalli) [Orabug: 34639972] - hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek) [Orabug: 34639967] - KVM: SVM: Clear the CR4 register on reset (Babu Moger) [Orabug: 34639963] - x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra) [Orabug: 34639951] - netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal) [Orabug: 34610051] - uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour) [Orabug: 34610044] - uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour) [Orabug: 34610044] - uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour) [Orabug: 34610044] - uek-rpm: Add nftables support T93 and Ortano (Henry Willard) [Orabug: 34610035] - af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu) [Orabug: 34610032] {CVE-2022-3028} - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa) [Orabug: 34610025] cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34610025] - audit: use extern storage class for audit_filter_syscall() (Ankur Arora) [Orabug: 34586449] - audit: annotate branch direction for audit_in_mask() (Ankur Arora) [Orabug: 34586449] - audit: cache ctx->major in audit_filter_syscall() (Ankur Arora) [Orabug: 34586449] [5.4.17-2136.313.1.el7uek] - video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (Javier Martinez Canillas) [Orabug: 32301403] - KVM: arm: vgic: Only use the virtual state when userspace accesses enable bits (Marc Zyngier) [Orabug: 34542967] - uek-rpm: mips: enable CRYTPTO_USER config options (Dave Kleikamp) [Orabug: 34557309]

i386

x86_64

kernel-uek-5.4.17-2136.313.6.el7uek.x86_64.rpm kernel-uek-debug-5.4.17-2136.313.6.el7uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2136.313.6.el7uek.x86_64.rpm kernel-uek-devel-5.4.17-2136.313.6.el7uek.x86_64.rpm kernel-uek-doc-5.4.17-2136.313.6.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.313.6.el7uek.x86_64.rpm aarch64: kernel-uek-5.4.17-2136.313.6.el7uek.aarch64.rpm kernel-uek-debug-5.4.17-2136.313.6.el7uek.aarch64.rpm kernel-uek-debug-devel-5.4.17-2136.313.6.el7uek.aarch64.rpm kernel-uek-devel-5.4.17-2136.313.6.el7uek.aarch64.rpm kernel-uek-doc-5.4.17-2136.313.6.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.313.6.el7uek.aarch64.rpm kernel-uek-tools-libs-5.4.17-2136.313.6.el7uek.aarch64.rpm perf-5.4.17-2136.313.6.el7uek.aarch64.rpm python-perf-5.4.17-2136.313.6.el7uek.aarch64.rpm

SRPMS

https://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.313.6.el7uek.src.rpm

Severity
Related CVEs: CVE-2022-3028

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.