ELBA-2024-10274-1
- ULN >
- Oracle Linux Errata repository >
- ELBA-2024-10274-1
ELBA-2024-10274-1 - kernel bug fix update
| Type: | BUG |
| Impact: | NA |
| Release Date: | 2024-11-28 |
Description
- [5.14.0-503.15.1.0.1.el9_5.OL9]
- Revert 'crypto: testmgr - allow ecdsa-nist-p256 and -p384 in FIPS mode' [Orabug: 36638086]
- Update module name for cryptographic module [Orabug: 36324521]
- [5.14.0-503.15.1.el9_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates
[5.14.0-503.15.1.el9_5]
- USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
- ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
- ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]
[5.14.0-503.14.1.el9_5]
- ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
- ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
- smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]
[5.14.0-503.13.1.el9_5]
- efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
- mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)
[5.14.0-503.12.1.el9_5]
- net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
- tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
- iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
- Revert 'fw loader: Remove the now superfluous sentinel element from ctl_table array' (Eric Chanudet) [RHEL-62925 RHEL-50129]
- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 9 (x86_64) | kernel-5.14.0-503.15.1.0.1.el9_5.src.rpm | 55bcbfcd7dd4e3c89e1b434a0605e1892cb34adc81f252d67c0fa83a518f76ff | - | ol9_x86_64_MODRHCK |
| bpftool-7.4.0-503.15.1.0.1.el9_5.x86_64.rpm | 3a47c55266f51af15e94bbdf59f860d607c68ab55017438f451f747fd1a36eb6 | - | ol9_x86_64_MODRHCK | |
| kernel-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 7eb233e87167e2b3418c63324e50339431cf8bf6bd3a46ae5ffff0c4cb33b6c4 | - | ol9_x86_64_MODRHCK | |
| kernel-abi-stablelists-5.14.0-503.15.1.0.1.el9_5.noarch.rpm | bd4cd3af18d86e7b79e1492651ac0c82302c1e774aededd3f206fa3074709423 | - | ol9_x86_64_MODRHCK | |
| kernel-core-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 1301e21ec1a054ea9581bcdbb1c15c5f5ee7c8f5f21696e0aadcea36b1c4aacd | - | ol9_x86_64_MODRHCK | |
| kernel-cross-headers-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 1f8acf22ac05d27e11f20efc1bc4c20a2a189207e44cffb3022f7e9e311fe3d6 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | d00f200e015623dbe4440bb93ae57ee1178ae9aed4f3332384280ae49654c9e0 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-core-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | e4a31e0e91ea619bcdb85e9511e6223304c1ba196e1a2fb81979c2421cf931b7 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-devel-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 43bbe2f5de7bb748c7c90255f019437e8a48a3e6742733687376fc8f0e2140eb | - | ol9_x86_64_MODRHCK | |
| kernel-debug-devel-matched-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | dd4774a80265db9a19814f69e129eab4a1f97e1a326bd780ea908f892dfd7fe8 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-modules-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 6b9f56cfc4a062fe1a454a0f0a1d6afd6bef56bedb31bc7abdfe094fd1c9169c | - | ol9_x86_64_MODRHCK | |
| kernel-debug-modules-core-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 3e5251473dd4eb10416cda4056c28eedb06914995eb80c28c9261eeecf782b6f | - | ol9_x86_64_MODRHCK | |
| kernel-debug-modules-extra-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | e72c082daab1b6e7798245697becee9bb2a63594ddc05ee16443c56d7c286674 | - | ol9_x86_64_MODRHCK | |
| kernel-debug-uki-virt-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 116848beb493d3fda33e6727af4e79fada847e1abbc01f7359fa1a14aa054c92 | - | ol9_x86_64_MODRHCK | |
| kernel-devel-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | ce50e71c2e1a4ddc064254225b8821b8f1dc275a2542220cc5abf8774a619806 | - | ol9_x86_64_MODRHCK | |
| kernel-devel-matched-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 60e329073764b417eec80f9730a2d678d5e6da0f21d049b991e5517961c2391b | - | ol9_x86_64_MODRHCK | |
| kernel-doc-5.14.0-503.15.1.0.1.el9_5.noarch.rpm | ad06e514589af9f3bdb93426ca75f04c8529760b0e00a4882c8baa136ed0dd5a | - | ol9_x86_64_MODRHCK | |
| kernel-headers-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 6ed400f1b03e1ea5a13fe82aec28b8001f83624438a9caa17a2a77da11adfc76 | - | ol9_x86_64_MODRHCK | |
| kernel-modules-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 3d42716bdb5425a23c523a405d88baf72bd34fd13cc81888f91326af14c38ee8 | - | ol9_x86_64_MODRHCK | |
| kernel-modules-core-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 67f4fd5f8ffaab6d3ff0f476b185e370754575cdc9fe1096f6bd8242774ea367 | - | ol9_x86_64_MODRHCK | |
| kernel-modules-extra-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 3ce780a374129fec1d703b987166f11ef1e41249688248d1c40e4babe9fb577a | - | ol9_x86_64_MODRHCK | |
| kernel-tools-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 9dd144e5641f5740233b5959c838d04587ab850cb20998527cc40536defacacf | - | ol9_x86_64_MODRHCK | |
| kernel-tools-libs-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 52a045eb7075bbb23c5225d6dc03cec7cf48c5be477fa51947277bc2fe202e94 | - | ol9_x86_64_MODRHCK | |
| kernel-tools-libs-devel-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 2f879f519613a74e09d9e9cd198435e9283199b153b33b22f0aef5f59f5541f2 | - | ol9_x86_64_MODRHCK | |
| kernel-uki-virt-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | eac143c5842142c78c68d564492d2b224552c535e9a1b2e3fecba4517acc18d3 | - | ol9_x86_64_MODRHCK | |
| kernel-uki-virt-addons-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | b346e881d67b5283bb185dcaf9cdfdc56ad8f76d2cdd4846cabc78003dd8bec9 | - | ol9_x86_64_MODRHCK | |
| libperf-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | a4b369bd8d4a483c3c2d360c393cee888d30c65a8cf02d1d67ec54003bfe1ed1 | - | ol9_x86_64_MODRHCK | |
| perf-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | ecd0895a54eab17411f222219c38441ac476e1c389f5db143345486fd83b67c0 | - | ol9_x86_64_MODRHCK | |
| python3-perf-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 3050bc8e9408f26f0171da8293b8c81506dd9710fa1c79ce6170a2df63f4a788 | - | ol9_x86_64_MODRHCK | |
| rtla-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 4cbb26e68e7cbd37487c74cd56c5e79b25cdc11349fe0c8ab6a0c19bc9b498fa | - | ol9_x86_64_MODRHCK | |
| rv-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm | 5830413b04f8cecbccffcd232d5ce8762c533725c3b539ed5d0081e6406f5afa | - | ol9_x86_64_MODRHCK | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
