ELSA-2020-2427
- ULN >
- Oracle Linux Errata repository >
- ELSA-2020-2427
ELSA-2020-2427 - kernel security and bug fix update
| Type: | SECURITY |
| Severity: | IMPORTANT |
| Release Date: | 2020-06-10 |
Description
[4.18.0-193.6.3_2.OL8]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
[4.18.0-193.6.3_2]
- rebuild to enable xt_u32 module (Jiri Benc) [1840800 1840799 1834769 1838190]
[4.18.0-193.6.2_2]
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
[4.18.0-193.6.1_2]
- [char] tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (Steve Best) [1827632 1808048]
- [netdrv] bonding: fix active-backup transition after link failure (Jarod Wilson) [1838477 1819408]
- [netdrv] bonding: fix state transition issue in link monitoring (Jarod Wilson) [1838477 1819408]
- [kernel] sched/fair: Allow a per-CPU kthread waking a task to stack on the same CPU, to fix XFS performance regression (Phil Auld) [1834517 1745111]
- [block] block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Ming Lei) [1835531 1835532] {CVE-2020-12657}
- [kvm] KVM: x86: use raw clock values consistently (Marcelo Tosatti) [1822498 1768622]
- [kvm] KVM: x86: reorganize pvclock_gtod_data members (Marcelo Tosatti) [1822498 1768622]
- [kvm] KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [1822498 1768622]
[4.18.0-193.5.1_2]
- [fs] nfs: fix NULL deference in nfs4_get_valid_delegation ('J. Bruce Fields') [1837969 1831553]
[4.18.0-193.4.1_2]
- [bluetooth] Revert 'Bluetooth: btusb: driver to enable the usb-wakeup feature' (Gopal Tiwari) [1827620 1811534]
- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}
[4.18.0-193.3.1_2]
- [kernel] sched/isolation: Allow 'isolcpus=' to skip unknown sub-parameters (Peter Xu) [1832367 1799014]
- [firmware] efi: fix a mistype in comments mentioning efivar_entry_iter_begin() (Vladis Dronov) [1829527 1804417]
- [firmware] efi: add a sanity check to efivar_store_raw() (Vladis Dronov) [1829527 1804417]
- [firmware] efi: fix a race and a buffer overflow while reading efivars via sysfs (Vladis Dronov) [1829527 1804417]
- [net] net/smc: keep vlan_id for SMC-R in smc_listen_work() (Philipp Rudo) [1827631 1796890]
[4.18.0-193.2.1_2]
- [net] vti[6]: fix packet tx through bpf_redirect() in XinY cases (Sabrina Dubroca) [1821375 1795145]
- [net] xfrm interface: fix packet tx through bpf_redirect() (Sabrina Dubroca) [1821375 1795145]
- [net] vti[6]: fix packet tx through bpf_redirect() (Sabrina Dubroca) [1821375 1795145]
- [scripts] redhat: fix modpost.c prerequisites (Frantisek Hrbata) [1828229 1818499]
- [infiniband] IB/core: Avoid deadlock during netlink message handling (Kamal Heib) [1821381 1818986]
- [infiniband] RDMA/core: Support netlink commands in non init_net net namespaces (Kamal Heib) [1821381 1818986]
- [misc] mei: me: add comet point (lake) H device ids (Ken Cox) [1825262 1815355]
- [misc] mei: me: add comet point (lake) LP device ids (Ken Cox) [1825262 1815355]
- [misc] mei: define dma ring buffer sizes for PCH12 HW and newer (Ken Cox) [1825262 1815355]
- [misc] mei: hbm: define dma ring setup protocol (Ken Cox) [1825262 1815355]
- [net] SUNRPC: fix krb5p mount to provide large enough buffer in rq_rcvsize (Steve Dickson) [1826219 1825388]
- [mm] mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (Rafael Aquini) [1827619 1763878]
- [mm] mm: thp: fix flags for pmd migration when split (Rafael Aquini) [1827619 1763878]
- [mm] mm: thp: relocate flush_cache_range() in migrate_misplaced_transhuge_page() (Rafael Aquini) [1827619 1763878]
- [mm] mm: thp: fix mmu_notifier in migrate_misplaced_transhuge_page() (Rafael Aquini) [1827619 1763878]
- [mm] mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition (Rafael Aquini) [1827619 1763878]
- [md] Revert 'dm: always call blk_queue_split() in dm_process_bio()' (Mike Snitzer) [1821382 1820705]
Related CVEs
| CVE-2020-12657 |
Updated Packages
| Release/Architecture | Filename | MD5sum | Superseded By Advisory |
| Oracle Linux 8 (aarch64) | kernel-4.18.0-193.6.3.el8_2.src.rpm | 6cfb9b23dd06de37b909bbc1b33a4c91 | - |
| bpftool-4.18.0-193.6.3.el8_2.aarch64.rpm | 272948a2c6c1459ca6d1c4be5ffc0bdb | - | |
| kernel-cross-headers-4.18.0-193.6.3.el8_2.aarch64.rpm | e6c8c1edbe3acfcb52c4557b432de43f | - | |
| kernel-headers-4.18.0-193.6.3.el8_2.aarch64.rpm | 1d24ab016e66e694bda10d66dd4b8b76 | - | |
| kernel-tools-4.18.0-193.6.3.el8_2.aarch64.rpm | eed52bb5e884b41b1df471b88f51581d | - | |
| kernel-tools-libs-4.18.0-193.6.3.el8_2.aarch64.rpm | f520242a01849e3322c7f5d2eae97e81 | - | |
| kernel-tools-libs-devel-4.18.0-193.6.3.el8_2.aarch64.rpm | 04d58c9d9790f418620f66ef71be5047 | - | |
| perf-4.18.0-193.6.3.el8_2.aarch64.rpm | 6373da67cf6e11d20d809b3f120714b6 | - | |
| python3-perf-4.18.0-193.6.3.el8_2.aarch64.rpm | 44de57db0ec50212119bd3f982fd4e4f | - | |
| Oracle Linux 8 (x86_64) | kernel-4.18.0-193.6.3.el8_2.src.rpm | 6cfb9b23dd06de37b909bbc1b33a4c91 | - |
| bpftool-4.18.0-193.6.3.el8_2.x86_64.rpm | 4c97bf9c506a915ae90fba7ed4d57c15 | - | |
| kernel-4.18.0-193.6.3.el8_2.x86_64.rpm | a6ce5e85cc04a782456085324465b79b | - | |
| kernel-abi-whitelists-4.18.0-193.6.3.el8_2.noarch.rpm | fc20b7ec84ba835970c5f21957e6319b | - | |
| kernel-core-4.18.0-193.6.3.el8_2.x86_64.rpm | f44f5090eecbc65e326692eb6a510410 | - | |
| kernel-cross-headers-4.18.0-193.6.3.el8_2.x86_64.rpm | 2cdbdb9f25d85039ed83d8f7cbd902fb | - | |
| kernel-debug-4.18.0-193.6.3.el8_2.x86_64.rpm | befc2d9d44f2cc20b7aea888f229fafa | - | |
| kernel-debug-core-4.18.0-193.6.3.el8_2.x86_64.rpm | 31c392290d7b4f5470e6cc207ce9921d | - | |
| kernel-debug-devel-4.18.0-193.6.3.el8_2.x86_64.rpm | be4c2e3e28909a49ebeb5b92eea250ae | - | |
| kernel-debug-modules-4.18.0-193.6.3.el8_2.x86_64.rpm | e7d810c921278b6ba0e80e2ed73bb2a3 | - | |
| kernel-debug-modules-extra-4.18.0-193.6.3.el8_2.x86_64.rpm | b2fad745d964911b18fac6198361678c | - | |
| kernel-devel-4.18.0-193.6.3.el8_2.x86_64.rpm | af2ad839362cab81909ef7bd4a0f0584 | - | |
| kernel-doc-4.18.0-193.6.3.el8_2.noarch.rpm | 57146b2e9b01fa307bf9d213156d768c | - | |
| kernel-headers-4.18.0-193.6.3.el8_2.x86_64.rpm | 532b982a08d493289d90b39ba5111d38 | - | |
| kernel-modules-4.18.0-193.6.3.el8_2.x86_64.rpm | 36c9df23a124d98033249a5106930fb1 | - | |
| kernel-modules-extra-4.18.0-193.6.3.el8_2.x86_64.rpm | 9c0621a09e24d4e75cd356b52d2aaacf | - | |
| kernel-tools-4.18.0-193.6.3.el8_2.x86_64.rpm | 09a69dea2221e0d68a261f5bafa7b309 | - | |
| kernel-tools-libs-4.18.0-193.6.3.el8_2.x86_64.rpm | aa310f66cbd9ecb278d8630cef50306b | - | |
| kernel-tools-libs-devel-4.18.0-193.6.3.el8_2.x86_64.rpm | f7bb129b31f6eae98668a25dfda4cc1b | - | |
| perf-4.18.0-193.6.3.el8_2.x86_64.rpm | 42e296830c7713eb0fdbec5b71c8715f | - | |
| python3-perf-4.18.0-193.6.3.el8_2.x86_64.rpm | bf673ae578704ef59e2d8cca7e2c85d8 | - | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
