Oracle8: ELSA-2022-9999: kernel-container Important Security Update
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Summary
[5.4.17-2136.313.6.el8] - Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari) [Orabug: 33000550] - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34475857] - EDAC/mce_amd: Do not load edac_mce_amd module on guests (Smita Koralahalli) [Orabug: 34484268] - uek: kabi: update kABI files for new symbol (Saeed Mirzamohammadi) [Orabug: 34595589] - RDS/IB Fix allocation warning (Hans Westgaard Ry) [Orabug: 34684322] - uek-rpm: Add support for building a kdump kernel on MIPS64 (Dave Kleikamp) [Orabug: 34696261] - hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek) [Orabug: 34710682] - hwmon: (opbmc) Driver message prefixes (Jan Zdarek) [Orabug: 34710682] - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" (Saeed Mirzamohammadi) [Orabug: 34724694] - Revert "sched/deadline: Fix priority inheritance with multiple scheduling classes" (Sherry Yang) [Orabug: 34700434] [5.4.17-2136.313.5.el8] - IB/mlx5: Move to fully dynamic UAR mode once user space supports it (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Extend QP creation to get uar page index from user space (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Extend CQ creation to get uar page index from user space (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Expose UAR object and its alloc/destroy commands (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Generally use the WC auto detection test result (Yishai Hadas) [Orabug: 34430072] - RDMA/mlx5: Use offsetofend() instead of duplicated variant (Leon Romanovsky) [Orabug: 34430072] - RDMA/mlx5: Remove duplicate definitions of SW_ICM macros (Erez Shitrit) [Orabug: 34430072] - IB/mlx5: Introduce UAPIs to manage packet pacing (Yishai Hadas) [Orabug: 34430072] - RDMA/mlx5: Prevent overflow in mmap offset calculations (Leon Romanovsky) [Orabug: 34430072] - RDMA/core: Make the entire API tree static (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Ensure that rdma_user_mmap_entry_remove() is a fence (Jason Gunthorpe) [Orabug: 34430072] - RDMA/mlx5: Set relaxed ordering when requested (Michael Guralnik) [Orabug: 34430072] - RDMA/core: Add the core support field to METHOD_GET_CONTEXT (Michael Guralnik) [Orabug: 34430072] - RDMA/uverbs: Add new relaxed ordering memory region access flag (Michael Guralnik) [Orabug: 34430072] - RDMA/core: Add optional access flags range (Michael Guralnik) [Orabug: 34430072] - RDMA/uverbs: Add ioctl command to get a device context (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Remove ucontext_lock from the uverbs_destry_ufile_hw() path (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Add UVERBS_METHOD_ASYNC_EVENT_ALLOC (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Use READ_ONCE for ib_ufile.async_file (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Make ib_uverbs_async_event_file into a uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Remove the ufile arg from rdma_alloc_begin_uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Simplify type usage for ib_uverbs_async_handler() (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Do not erase the type of ib_wq.uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Do not erase the type of ib_qp.uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Do not erase the type of ib_cq.uobject (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Make ib_ucq_object use ib_uevent_object (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Do not allow alloc_commit to fail (Jason Gunthorpe) [Orabug: 34430072] - RDMA/mlx5: Simplify devx async commands (Jason Gunthorpe) [Orabug: 34430072] - RDMA/core: Simplify destruction of FD uobjects (Jason Gunthorpe) [Orabug: 34430072] - RDMA/mlx5: Use RCU and direct refcounts to keep memory alive (Jason Gunthorpe) [Orabug: 34430072] - IB/mlx5: Add mmap support for VAR (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Introduce VAR object and its alloc/destroy methods (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Extend caps stage to handle VAR capabilities (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Fix device memory flows (Yishai Hadas) [Orabug: 34430072] - IB/core: Introduce rdma_user_mmap_entry_insert_range() API (Yishai Hadas) [Orabug: 34430072] - IB/mlx5: Support flow counters offset for bulk counters (Yevgeny Kliteynik) [Orabug: 34430072] - IB/mlx5: Rename profile and init methods (Michael Guralnik) [Orabug: 34430072] - RDMA: Connect between the mmap entry and the umap_priv structure (Michal Kalderon) [Orabug: 34430072] - RDMA/core: Create mmap database and cookie helper functions (Michal Kalderon) [Orabug: 34430072] - RDMA/core: Move core content from ib_uverbs to ib_core (Michal Kalderon) [Orabug: 34430072] - IB/mlx5: Test write combining support (Michael Guralnik) [Orabug: 34430072] - IB/mlx5: Align usage of QP1 create flags with rest of mlx5 defines (Michael Guralnik) [Orabug: 34430072] - IB/mlx5: Introduce and use mkey context setting helper routine (Parav Pandit) [Orabug: 34430072] - net/rds: Send congestion map updates only via path zero (Anand Khoje) [Orabug: 34578051] - Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry) [Orabug: 34662431] - net: vlan: Avoid using BUG() in vlan_proto_idx() (Florian Fainelli) [Orabug: 34672449] - KVM: x86: drop superfluous mmu_check_root() from fast_pgd_switch() (Vitaly Kuznetsov) [Orabug: 34679770] - KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (Babu Moger) [Orabug: 34679770] - KVM: x86: Invoke vendor's vcpu_after_set_cpuid() after all common updates (Sean Christopherson) [Orabug: 34679770] - KVM: x86: Move kvm_x86_ops.vcpu_after_set_cpuid() into kvm_vcpu_after_set_cpuid() (Xiaoyao Li) [Orabug: 34679770] - KVM: x86: Rename cpuid_update() callback to vcpu_after_set_cpuid() (Xiaoyao Li) [Orabug: 34679770] - RDMA/cma: Use output interface for net_dev check (Håkon Bugge) [Orabug: 34694980] [5.4.17-2136.313.4.el8] - arm64: pensando: Suppress tree-loop-distribute-patterns optimization (Henry Willard) [Orabug: 34634974] - uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi) [Orabug: 34644240] - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Dave Hansen) [Orabug: 34671342] [5.4.17-2136.313.3.el8] - Revert "net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()" (Sasha Levin) - USB: core: Fix RST error in hub.c (Alan Stern) - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa) - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang) - LTS tag: v5.4.213 (Sherry Yang) - MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling) - x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra) - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen) - tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell) - nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg) - RDMA/mlx5: Set local port to one when accessing counters (Chris Mi) - ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun) - RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij) - i40e: Fix kernel crash during module removal (Ivan Vecera) - tipc: fix shift wrapping bug in map_get() (Dan Carpenter) - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen) - afs: Use the operation issue time instead of the reply time for callbacks (David Howells) - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells) - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater) - netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi) - RDMA/hns: Fix supported page size (Chengchang Tang) - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He) - RDMA/cma: Fix arguments order in net device validation (Michael Guralnik) - regulator: core: Clean up on enable failure (Andrew Halaney) - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch) - smb3: missing inode locks in punch hole (David Howells) - scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang) - scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy) - nvmet: fix a use-after-free (Bart Van Assche) - debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman) - kprobes: Prohibit probes in gate area (Christian A. Ehrhardt) - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke) - ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong) - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis) - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang) - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang) - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla) - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller) - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong) - drm/radeon: add a force flush to delay work when radeon (Zhenneng Li) - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li) - drm/gem: Fix GEM handle release errors (Jeffy Chen) - scsi: megaraid_sas: Fix double kfree() (Guixin Liu) - USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold) - USB: serial: ch341: fix lost character on LCR updates (Johan Hovold) - usb: dwc3: disable USB core PHY management (Johan Hovold) - usb: dwc3: fix PHY disable sequence (Johan Hovold) - btrfs: harden identification of a stale device (Anand Jain) - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz) - ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai) - ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai) - net: mac802154: Fix a condition in the receive path (Miquel Raynal) - ip: fix triggering of 'icmp redirect' (Nicolas Dichtel) - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant) - driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres) - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati) - USB: core: Prevent nested device-reset calls (Alan Stern) - s390: fix nospec table alignments (Josh Poimboeuf) - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer) - usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta) - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT) - usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit) - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun) - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao) - USB: serial: option: add Quectel EM060K modem (Yonglin Tan) - USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu) - USB: serial: cp210x: add Decagon UCA device id (Johan Hovold) - xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman) - thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg) - gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen) - hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf) - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren) - Input: rk805-pwrkey - fix module autoloading (Peter Robinson) - clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai) - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" (Stephen Boyd) - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King) - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold) - binder: fix UAF of ref->proc caused by race condition (Carlos Llamas) - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens) - misc: fastrpc: fix memory corruption on open (Johan Hovold) - misc: fastrpc: fix memory corruption on probe (Johan Hovold) - iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson) - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa) - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun) - vt: Clear selection before changing the font (Helge Deller) - powerpc: align syscall table for ppc32 (Masahiro Yamada) - staging: rtl8712: fix use after free bugs (Dan Carpenter) - serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang) - net/smc: Remove redundant refcount increase (Yacan Liu) - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" (Jakub Kicinski) - tcp: annotate data-race around challenge_timestamp (Eric Dumazet) - kcm: fix strp_init() order and cleanup (Cong Wang) - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou) - net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao) - Revert "xhci: turn off port power in shutdown" (Mathias Nyman) - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter) - ieee802154/adf7242: defer destroy_workqueue call (Lin Ma) - iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson) - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko) - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson) - drm/msm/dsi: fix the inconsistent indenting (sunliming) - net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt) - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (Yee Lee) - fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds) - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka) - efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim) - LTS tag: v5.4.212 (Sherry Yang) - net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao) - kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima) - lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin) - lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy) - btrfs: tree-checker: check for overlapping extent items (Josef Bacik) - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven) - drm/amd/display: Fix pixel clock programming (Ilya Bakoulin) - s390/hypfs: avoid error message under KVM (Juergen Gross) - neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev) - drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang) - drm/amd/display: Avoid MPC infinite loop (Josip Pavic) - btrfs: unify lookup return value when dir entry is missing (Filipe Manana) - btrfs: do not pin logs too early during renames (Filipe Manana) - btrfs: introduce btrfs_lookup_match_dir (Marcos Paulo de Souza) - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn) - bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao) - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong) - fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren) - HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati) - media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu) - udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy) - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones) - Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz) - kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng) - x86/bugs: Add "unknown" reporting for MMIO Stale Data (Pawan Gupta) - s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer) - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn) - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar) - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian) - md: call __md_stop_writes in md_stop (Guoqing Jiang) - mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand) - ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu) - s390: fix double free of GS and RI CBs on fork() failure (Brian Foster) - asm-generic: sections: refactor memory_intersects (Quanyang Wang) - loop: Check for overflow while configuring loop (Siddh Raman Pant) - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin) - btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues) - btrfs: add info when mount fails due to stale replace target (Anand Jain) - btrfs: replace: drop assert for suspended replace (Anand Jain) - btrfs: fix silent failure when deleting root reference (Filipe Manana) - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller) - net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima) - net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima) - net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima) - net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima) - net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima) - ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima) - net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima) - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima) - netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso) - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso) - netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso) - netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso) - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta) - net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej Żenczykowski) - bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins) - net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov) - net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov) - rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux) - SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust) - xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong) - kernel/sched: Remove dl_boosted flag comment (Hui Su) - sched/deadline: Fix priority inheritance with multiple scheduling classes (Juri Lelli) - sched/deadline: Fix stale throttling on de-/boosted tasks (Lucas Stach) - sched/deadline: Unthrottle PI boosted threads while enqueuing (Daniel Bristot de Oliveira) - pinctrl: amd: Don't save/restore interrupt status and wake status bits (Basavaraj Natikar) - Revert "selftests/bpf: Fix test_align verifier log patterns" (Jean-Philippe Brucker) - Revert "selftests/bpf: Fix "dubious pointer arithmetic" test" (Jean-Philippe Brucker) - usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak) - kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap) - parisc: Fix exception handler for fldw and fstw instructions (Helge Deller) - audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui) Read the full advisory
SRPMs
https://oss.oracle.com:443/ol8/SRPMS-updates/kernel-uek-container-5.4.17-2136.313.6.el8.src.rpm
x86_64
kernel-uek-container-5.4.17-2136.313.6.el8.x86_64.rpm kernel-uek-container-debug-5.4.17-2136.313.6.el8.x86_64.rpm
aarch64
i386
