ELSA-2021-5227

ELSA-2021-5227 - kernel security and bug fix update

Type:SECURITY
Impact:MODERATE
Release Date:2021-12-22

Description


[4.18.0-348.7.1_5.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-348.7.1_5]
- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]

[4.18.0-348.6.1_5]
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]

[4.18.0-348.5.1_5]
- blk-mq: still set q->make_request_fn for blk-mq (Ming Lei) [2016384 1999728]

[4.18.0-348.4.1_5]
- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]

[4.18.0-348.3.1_5]
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}


Related CVEs


CVE-2021-20321

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-348.7.1.el8_5.src.rpmca90d3228367bb91c779db2cbe01493ee9c142d412a792d0c4bba20ddc90c021-ol8_aarch64_baseos_latest
kernel-4.18.0-348.7.1.el8_5.src.rpmca90d3228367bb91c779db2cbe01493ee9c142d412a792d0c4bba20ddc90c021-ol8_aarch64_codeready_builder
kernel-4.18.0-348.7.1.el8_5.src.rpmca90d3228367bb91c779db2cbe01493ee9c142d412a792d0c4bba20ddc90c021-ol8_aarch64_u5_baseos_patch
bpftool-4.18.0-348.7.1.el8_5.aarch64.rpmeb663a2e5ebda2c53bda8b12d8b7862a6ff32246eb4c942b8f53d28db1b4a4af-ol8_aarch64_baseos_latest
bpftool-4.18.0-348.7.1.el8_5.aarch64.rpmeb663a2e5ebda2c53bda8b12d8b7862a6ff32246eb4c942b8f53d28db1b4a4af-ol8_aarch64_u5_baseos_patch
kernel-cross-headers-4.18.0-348.7.1.el8_5.aarch64.rpm1ad2a75ebad2ebdfc0f4399c9759d2dd97738ac28ffcc249e4d06c0ce207359d-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-348.7.1.el8_5.aarch64.rpm1ad2a75ebad2ebdfc0f4399c9759d2dd97738ac28ffcc249e4d06c0ce207359d-ol8_aarch64_u5_baseos_patch
kernel-headers-4.18.0-348.7.1.el8_5.aarch64.rpm14a61b9be74a653a6f0077027c48ec089be4f22003c1858bc86b4c75486d230b-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-348.7.1.el8_5.aarch64.rpm14a61b9be74a653a6f0077027c48ec089be4f22003c1858bc86b4c75486d230b-ol8_aarch64_u5_baseos_patch
kernel-tools-4.18.0-348.7.1.el8_5.aarch64.rpm0dc31df966cffc38874c2182aada0f674797327b064fb7fab68e1a0c3bd396a8-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-348.7.1.el8_5.aarch64.rpm0dc31df966cffc38874c2182aada0f674797327b064fb7fab68e1a0c3bd396a8-ol8_aarch64_u5_baseos_patch
kernel-tools-libs-4.18.0-348.7.1.el8_5.aarch64.rpm189e32c580e81afbdd9db84cf18eb1fc9ca1a4de343865fc275e4ec167a8a91e-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-348.7.1.el8_5.aarch64.rpm189e32c580e81afbdd9db84cf18eb1fc9ca1a4de343865fc275e4ec167a8a91e-ol8_aarch64_u5_baseos_patch
kernel-tools-libs-devel-4.18.0-348.7.1.el8_5.aarch64.rpm691b9d1601c26581bd3b1b357f1f0fdd86cb33292aaa3cfe943006ce6082bd07-ol8_aarch64_codeready_builder
perf-4.18.0-348.7.1.el8_5.aarch64.rpm62d7514b3156e7bcb47de51623e49e6852303093025c713fd9ef842e35b9997a-ol8_aarch64_baseos_latest
perf-4.18.0-348.7.1.el8_5.aarch64.rpm62d7514b3156e7bcb47de51623e49e6852303093025c713fd9ef842e35b9997a-ol8_aarch64_u5_baseos_patch
python3-perf-4.18.0-348.7.1.el8_5.aarch64.rpm1255faf3d87c5b2bec2487057230d503a02593a55507bcd11f11a1e7754fccb0-ol8_aarch64_baseos_latest
python3-perf-4.18.0-348.7.1.el8_5.aarch64.rpm1255faf3d87c5b2bec2487057230d503a02593a55507bcd11f11a1e7754fccb0-ol8_aarch64_u5_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-348.7.1.el8_5.src.rpmca90d3228367bb91c779db2cbe01493ee9c142d412a792d0c4bba20ddc90c021-ol8_x86_64_baseos_latest
kernel-4.18.0-348.7.1.el8_5.src.rpmca90d3228367bb91c779db2cbe01493ee9c142d412a792d0c4bba20ddc90c021-ol8_x86_64_codeready_builder
kernel-4.18.0-348.7.1.el8_5.src.rpmca90d3228367bb91c779db2cbe01493ee9c142d412a792d0c4bba20ddc90c021-ol8_x86_64_u5_baseos_patch
bpftool-4.18.0-348.7.1.el8_5.x86_64.rpmde63f9c0a05c21f545c3d16c1ae1e8651668a5024a44a916b98c32541a6110e9-ol8_x86_64_baseos_latest
bpftool-4.18.0-348.7.1.el8_5.x86_64.rpmde63f9c0a05c21f545c3d16c1ae1e8651668a5024a44a916b98c32541a6110e9-ol8_x86_64_u5_baseos_patch
kernel-4.18.0-348.7.1.el8_5.x86_64.rpm8638dc15a2238bb72b6bce219f6191c0f79b400df637831d1e3ea21eaf3433b3-ol8_x86_64_baseos_latest
kernel-4.18.0-348.7.1.el8_5.x86_64.rpm8638dc15a2238bb72b6bce219f6191c0f79b400df637831d1e3ea21eaf3433b3-ol8_x86_64_u5_baseos_patch
kernel-abi-stablelists-4.18.0-348.7.1.el8_5.noarch.rpmd92d3dd5e62bda4cf164f5d3085e08967b890dc3e6e20650485df14be619b7c8-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-348.7.1.el8_5.noarch.rpmd92d3dd5e62bda4cf164f5d3085e08967b890dc3e6e20650485df14be619b7c8-ol8_x86_64_u5_baseos_patch
kernel-core-4.18.0-348.7.1.el8_5.x86_64.rpm8b33b9797bfd5727577bd139da5fa339d1487e9ed1abc1bd12ee92bf854efab4-ol8_x86_64_baseos_latest
kernel-core-4.18.0-348.7.1.el8_5.x86_64.rpm8b33b9797bfd5727577bd139da5fa339d1487e9ed1abc1bd12ee92bf854efab4-ol8_x86_64_u5_baseos_patch
kernel-cross-headers-4.18.0-348.7.1.el8_5.x86_64.rpm100ce8eaebe4d2e0bb94361ba1cbb3f844547da69ab7c9de09afabc8ce16f7e7-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-348.7.1.el8_5.x86_64.rpm100ce8eaebe4d2e0bb94361ba1cbb3f844547da69ab7c9de09afabc8ce16f7e7-ol8_x86_64_u5_baseos_patch
kernel-debug-4.18.0-348.7.1.el8_5.x86_64.rpm883359336b19bdec13ab91af8754a9af029cf684a14c79cc9dcff45e3e5238bf-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-348.7.1.el8_5.x86_64.rpm883359336b19bdec13ab91af8754a9af029cf684a14c79cc9dcff45e3e5238bf-ol8_x86_64_u5_baseos_patch
kernel-debug-core-4.18.0-348.7.1.el8_5.x86_64.rpm817d31cc6015f6183516f295111195a82a9a9df9671486da5edf4ebb10ff3416-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-348.7.1.el8_5.x86_64.rpm817d31cc6015f6183516f295111195a82a9a9df9671486da5edf4ebb10ff3416-ol8_x86_64_u5_baseos_patch
kernel-debug-devel-4.18.0-348.7.1.el8_5.x86_64.rpme6497ae18def61f9629c76c52636c20793a20d556e49e8dc9e0a3e5a5e18be81-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-348.7.1.el8_5.x86_64.rpme6497ae18def61f9629c76c52636c20793a20d556e49e8dc9e0a3e5a5e18be81-ol8_x86_64_u5_baseos_patch
kernel-debug-modules-4.18.0-348.7.1.el8_5.x86_64.rpm61d726e2d66bf3f169f7897921323299d1cf8429a76223d5ba1fcff11125ed72-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-348.7.1.el8_5.x86_64.rpm61d726e2d66bf3f169f7897921323299d1cf8429a76223d5ba1fcff11125ed72-ol8_x86_64_u5_baseos_patch
kernel-debug-modules-extra-4.18.0-348.7.1.el8_5.x86_64.rpm8cbd76dde177b255cb47235316f8445e1cd618a38693ce027a71d4bf4dbe8190-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-348.7.1.el8_5.x86_64.rpm8cbd76dde177b255cb47235316f8445e1cd618a38693ce027a71d4bf4dbe8190-ol8_x86_64_u5_baseos_patch
kernel-devel-4.18.0-348.7.1.el8_5.x86_64.rpm77798124c8ed9609ac5657c86bc2d4c71eb6994cebe5c3889f76833270646e83-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-348.7.1.el8_5.x86_64.rpm77798124c8ed9609ac5657c86bc2d4c71eb6994cebe5c3889f76833270646e83-ol8_x86_64_u5_baseos_patch
kernel-doc-4.18.0-348.7.1.el8_5.noarch.rpm20696ff8a355087ff5c31563e4a45f1e33abe49297d7bdb4ca095cf1a53e6725-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-348.7.1.el8_5.noarch.rpm20696ff8a355087ff5c31563e4a45f1e33abe49297d7bdb4ca095cf1a53e6725-ol8_x86_64_u5_baseos_patch
kernel-headers-4.18.0-348.7.1.el8_5.x86_64.rpm9726f0c08e3ad24accbe416d4ed79490481cc80b0babddb018e2e5def2589851-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-348.7.1.el8_5.x86_64.rpm9726f0c08e3ad24accbe416d4ed79490481cc80b0babddb018e2e5def2589851-ol8_x86_64_u5_baseos_patch
kernel-modules-4.18.0-348.7.1.el8_5.x86_64.rpm7bc8128a902deb5a5ef16a61f095f3401915fc674b426bd841d346f749a551fe-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-348.7.1.el8_5.x86_64.rpm7bc8128a902deb5a5ef16a61f095f3401915fc674b426bd841d346f749a551fe-ol8_x86_64_u5_baseos_patch
kernel-modules-extra-4.18.0-348.7.1.el8_5.x86_64.rpmff455078d263eb519e882c41bc7c096ac192db564b662f5c297a3fae7dd87ad9-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-348.7.1.el8_5.x86_64.rpmff455078d263eb519e882c41bc7c096ac192db564b662f5c297a3fae7dd87ad9-ol8_x86_64_u5_baseos_patch
kernel-tools-4.18.0-348.7.1.el8_5.x86_64.rpm03e5bc91403eeeeb8e8583f8784f10b0e39f9e9fe5dd52978b3f6e546ab2b9b3-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-348.7.1.el8_5.x86_64.rpm03e5bc91403eeeeb8e8583f8784f10b0e39f9e9fe5dd52978b3f6e546ab2b9b3-ol8_x86_64_u5_baseos_patch
kernel-tools-libs-4.18.0-348.7.1.el8_5.x86_64.rpm9ae2da3c183d771ff4e5875083cb0489fa6766d835578f6baeed5c8c6f8ebc82-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-348.7.1.el8_5.x86_64.rpm9ae2da3c183d771ff4e5875083cb0489fa6766d835578f6baeed5c8c6f8ebc82-ol8_x86_64_u5_baseos_patch
kernel-tools-libs-devel-4.18.0-348.7.1.el8_5.x86_64.rpm0ac2c676915f31d148c4ef7a25c91a883ff3e113b1071216357fc331d042ea72-ol8_x86_64_codeready_builder
perf-4.18.0-348.7.1.el8_5.x86_64.rpm0f32f64b22059771097fe202df605ac5f38d3a1480e1993a778d3fbcaf407b01-ol8_x86_64_baseos_latest
perf-4.18.0-348.7.1.el8_5.x86_64.rpm0f32f64b22059771097fe202df605ac5f38d3a1480e1993a778d3fbcaf407b01-ol8_x86_64_u5_baseos_patch
python3-perf-4.18.0-348.7.1.el8_5.x86_64.rpm99108f965afde3cfd701e5ddc827f074d3fffc1dd1baed9b57d5fc0cf1ef7013-ol8_x86_64_baseos_latest
python3-perf-4.18.0-348.7.1.el8_5.x86_64.rpm99108f965afde3cfd701e5ddc827f074d3fffc1dd1baed9b57d5fc0cf1ef7013-ol8_x86_64_u5_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete