ELBA-2024-10274-1

ELBA-2024-10274-1 - kernel bug fix update

Type:	BUG
Severity:	NA
Release Date:	2024-11-28

Description

- [5.14.0-503.15.1.0.1.el9_5.OL9]
- Revert 'crypto: testmgr - allow ecdsa-nist-p256 and -p384 in FIPS mode' [Orabug: 36638086]
- Update module name for cryptographic module [Orabug: 36324521]

- [5.14.0-503.15.1.el9_5.OL9]
- Disable UKI signing [Orabug: 36571828]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Add Oracle Linux IMA certificates

[5.14.0-503.15.1.el9_5]
- USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
- attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
- ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
- ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
- wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
- bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
- net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
- ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]

[5.14.0-503.14.1.el9_5]
- ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
- ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
- smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
- cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]

[5.14.0-503.13.1.el9_5]
- efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
- mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
- mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
- ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
- gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)

[5.14.0-503.12.1.el9_5]
- net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
- tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
- tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
- iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
- Revert 'fw loader: Remove the now superfluous sentinel element from ctl_table array' (Eric Chanudet) [RHEL-62925 RHEL-50129]
- smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (x86_64)	kernel-5.14.0-503.15.1.0.1.el9_5.src.rpm	b6be5cd501cc52e804df1593f1d1d349	-	ol9_x86_64_MODRHCK
	bpftool-7.4.0-503.15.1.0.1.el9_5.x86_64.rpm	4b1887692f9a1ace8c542064c3e2b931	-	ol9_x86_64_MODRHCK
	kernel-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	a7ef8f74af7ed5aa1f2196ce2abd97d3	-	ol9_x86_64_MODRHCK
	kernel-abi-stablelists-5.14.0-503.15.1.0.1.el9_5.noarch.rpm	912866380dc1edeeeda30ae0ae3cc6ea	-	ol9_x86_64_MODRHCK
	kernel-core-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	684948b0bf4fe2f9b1b68cbf12430d13	-	ol9_x86_64_MODRHCK
	kernel-cross-headers-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	c34daba26c3dc47394e4dd0d26a929ba	-	ol9_x86_64_MODRHCK
	kernel-debug-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	864ce40f97a405d67dc07796da0a7787	-	ol9_x86_64_MODRHCK
	kernel-debug-core-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	08cfaf8b001b59ff174feffe548d22aa	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	3141bd9c82a0ae846ce57ce6c8a71f4f	-	ol9_x86_64_MODRHCK
	kernel-debug-devel-matched-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	b1a3bfc5fa107062a867c01a23b7626b	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	9642ab2e5528041947b5cd6a765927b1	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-core-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	4c71997068a4439f449b3d5bc4f52352	-	ol9_x86_64_MODRHCK
	kernel-debug-modules-extra-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	97f7b073cec0e6a65d459f20b9e7bcf8	-	ol9_x86_64_MODRHCK
	kernel-debug-uki-virt-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	c837e69a02a96624481fd0e54aab20aa	-	ol9_x86_64_MODRHCK
	kernel-devel-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	8647393310b7b38fdee78721459dc425	-	ol9_x86_64_MODRHCK
	kernel-devel-matched-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	a4d960ed5c2f43c2d3665706297ee637	-	ol9_x86_64_MODRHCK
	kernel-doc-5.14.0-503.15.1.0.1.el9_5.noarch.rpm	4e8fba53d70933f19211ca7afadd4690	-	ol9_x86_64_MODRHCK
	kernel-headers-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	4f28812f6f98536fe77dced928cc7f4f	-	ol9_x86_64_MODRHCK
	kernel-modules-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	96d9ea8b49ac29d8bb5ef7577a14c666	-	ol9_x86_64_MODRHCK
	kernel-modules-core-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	562a58411c37996ab5cc92f8f080bf37	-	ol9_x86_64_MODRHCK
	kernel-modules-extra-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	85ce3a32bd7cb047cbb90fc84fefbfb3	-	ol9_x86_64_MODRHCK
	kernel-tools-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	5686cc8caf1c80cd45410da75dff1440	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	1501f931a7e091bdcb17bc65e123d0a9	-	ol9_x86_64_MODRHCK
	kernel-tools-libs-devel-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	5a8d6ecb47e3cd6808df600e78834c5b	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	8b6af329acbc359d7e1e749a313ce957	-	ol9_x86_64_MODRHCK
	kernel-uki-virt-addons-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	d1c192fb75af7467f10298f5664dd8c3	-	ol9_x86_64_MODRHCK
	libperf-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	ce7a6444de11bebd2f1369a920d3d33c	-	ol9_x86_64_MODRHCK
	perf-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	9db8218e78dc98f27bed13410ecb87bd	-	ol9_x86_64_MODRHCK
	python3-perf-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	7fb0d13d328bb65e61aa4c7758a5d5ea	-	ol9_x86_64_MODRHCK
	rtla-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	e83aba96acd49e95ee1f2ccaa143cc38	-	ol9_x86_64_MODRHCK
	rv-5.14.0-503.15.1.0.1.el9_5.x86_64.rpm	b23af214629ab85f8b40e848d3cd6fd7	-	ol9_x86_64_MODRHCK