ELSA-2021-4777

ELSA-2021-4777 - kernel security and bug fix update

Type:SECURITY
Severity:IMPORTANT
Release Date:2021-11-24

Description


[3.10.0-1160.49.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.49.1]
- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]

[3.10.0-1160.48.1]
- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]

[3.10.0-1160.47.1]
- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]

[3.10.0-1160.46.1]
- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]


Related CVEs


CVE-2020-36385

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (x86_64) kernel-3.10.0-1160.49.1.el7.src.rpm8725f3092d140278b7c6a052affc19dc-
bpftool-3.10.0-1160.49.1.el7.x86_64.rpm4c83b248d82b9224cba7a5df75ca93a1-
kernel-3.10.0-1160.49.1.el7.x86_64.rpm099ac70e5026d033d3369a2e40c4789f-
kernel-abi-whitelists-3.10.0-1160.49.1.el7.noarch.rpm437299c6114bb43a250840e4fc710fe9-
kernel-debug-3.10.0-1160.49.1.el7.x86_64.rpm775c115375ac4568c7520839ff334492-
kernel-debug-devel-3.10.0-1160.49.1.el7.x86_64.rpm552be78184dd921e0d327fe4ef280130-
kernel-devel-3.10.0-1160.49.1.el7.x86_64.rpmf3fd96e185e042d044d5dbfb9880c622-
kernel-doc-3.10.0-1160.49.1.el7.noarch.rpm7573d0080643d28c4e66c80de5e8be88-
kernel-headers-3.10.0-1160.49.1.el7.x86_64.rpm74d463e4c26f78fa1a6adf55b4e082aa-
kernel-tools-3.10.0-1160.49.1.el7.x86_64.rpm03ea2ef47e6c1b4d1df676b76078dcd2-
kernel-tools-libs-3.10.0-1160.49.1.el7.x86_64.rpm60490ef975e2ae5acedad57d6616f913-
kernel-tools-libs-devel-3.10.0-1160.49.1.el7.x86_64.rpm0325554fb48004442ad568e06f7b1045-
perf-3.10.0-1160.49.1.el7.x86_64.rpmb0ea5eaa23701a14d1825136caebafad-
python-perf-3.10.0-1160.49.1.el7.x86_64.rpm043cb5769d8e941e8200ed4d93918040-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete