ELBA-2023-4819-1

ELBA-2023-4819-1 - kernel bug fix update

Type:	BUG
Impact:	NA
Release Date:	2023-08-31

Description

[3.10.0-1160.99.1.0.2.el7.OL7]
- md/raid5: fix oops during stripe resizing (Ritika Srivastava) [Orabug: 34048726]
- blk-mq: Remove generation seqeunce (Ritika Srivastava) [Orabug: 33964689]
- block: init flush rq ref count to 1 (Ritika Srivastava) [Orabug: 33964689]
- block: fix null pointer dereference in blk_mq_rq_timed_out() (Ritika Srivastava) [Orabug: 33964689]
- [xen/netfront] stop tx queues during live migration (Orabug: 33446314)
- [xen/balloon] Support xend-based toolstack (Orabug: 28663970)
- [x86/apic/x2apic] avoid allocate multiple irq vectors for a single interrupt on multiple cpu, otherwise irq vectors would be used up when there are only 2 cpu online per node. [Orabug: 28691156]
- [bonding] avoid repeated display of same link status change. [Orabug: 28109857]
- [ipc] ipc/sem.c: bugfix for semctl(,,GETZCNT) (Manfred Spraul) [Orabug: 22552377
- kexec: Increase KEXEC_AUTO_RESERVED_SIZE to 256M [Orabug: 31517048

[3.10.0-1160.99.1.0.1.el7.OL7]
- debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}

[3.10.0-1160.99.1.el7.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9]
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.99.1.el7]
- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}

[3.10.0-1160.98.1.el7]
- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]

[3.10.0-1160.97.1.el7]
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]

[3.10.0-1160.96.1.el7]
- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-1160.99.1.0.2.el7.src.rpm	ccd1ef7cea6194d21d2cdccc8ffe0dacbb5fa5850020ebee36c57fafafc242d7	ELSA-2025-1281	ol7_x86_64_MODRHCK
	bpftool-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	b04a52201b12104d5ae6e9db306a83fb98a2f4cccd094d08c738d01a17397211	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	f53372f73466909e82db6a451c18b34e433b68ddc1791c5873c6968e1482458b	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-abi-whitelists-3.10.0-1160.99.1.0.2.el7.noarch.rpm	150d1966b05c7d2396e10be7483e0f3c61f07d3775f12b8a6ac8a00392555350	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-debug-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	f42da1bcea3e93ea22befc14ca3d1b007f37102fdf4351aa8efa6a3139e79f31	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-debug-devel-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	f6a8a843180ae0ff965cd5bd72521e4b6dff785bdf61eae1f10d891d09232967	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-devel-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	cfa9261aa8e2480d9ca680f07c376519f569f35c950e8c70685e2f0543eb3349	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-doc-3.10.0-1160.99.1.0.2.el7.noarch.rpm	da33dd20ae0aca4eff9d19a2c001a6c3b320c5c0137b5d08bec7607dd7c2652e	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-headers-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	871c77e1e7b891e0d9e5b1a285760dacc0160cde180a50fb215f7a674260294f	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-tools-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	884b45edb45290fc598957224149e70da6b85a45af418e9e9f228013fa11411d	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-tools-libs-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	2b4bb735a2b90668ce29fa8d8459a8817adb1d9de39cc495a7de8b6874efdf6c	ELSA-2025-1281	ol7_x86_64_MODRHCK
	kernel-tools-libs-devel-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	42faa37385f98b01c828a5bce5ec971497775b04832c359967149760d51df315	ELSA-2025-1281	ol7_x86_64_MODRHCK
	perf-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	a0f1f2ea99aa0af42e3e9d8aae8dfda41eebe10d3ddb17e368af4c056cecbb1d	ELSA-2025-20019	ol7_x86_64_MODRHCK
	python-perf-3.10.0-1160.99.1.0.2.el7.x86_64.rpm	db25c9db7a0cc7a9aff44da82436786ac33625c80f360fbdfcbe4bec513f9153	ELSA-2025-20019	ol7_x86_64_MODRHCK

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team