ELBA-2024-12480

ELBA-2024-12480 - Unbreakable Enterprise kernel-container bug fix update

Type:	BUG
Severity:	NA
Release Date:	2024-07-08

Description

[5.4.17-2136.333.5.el8]
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)
- nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka)
- nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)
- ipv6: sr: fix incorrect unregister order (Hangbin Liu)
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu)
- fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen)
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter)
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai)
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)

[5.4.17-2136.333.4.el8]
- PCI: pciehp: Add Solidigm NVMe to spurious DLLSC quirk (Alan Adamson) [Orabug: 36622673]
- RDS/IB: Add counter to measure when RDS_IB_RX_LIMIT is reached (Hans Westgaard Ry) [Orabug: 36696279]
- net/mlx5e: Fix a race in command alloc flow (Shifeng Li) [Orabug: 36702071]
- Revert 'net/mlx5: Add retry mechanism to the command entry index allocation' (Qing Huang) [Orabug: 36702071]
- kallsyms: shuffle kallmodsyms writeout before symbol sort (Nick Alcock) [Orabug: 36722084]

[5.4.17-2136.333.3.el8]
- LTS tag: v5.4.277 (Sherry Yang)
- docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)
- usb: typec: ucsi: displayport: Fix potential deadlock (Heikki Krogerus)
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Srinivasan Shanmugam)
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells (Rob Herring)
- firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)
- smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara)
- net: bcmgenet: synchronize UMAC_CMD access (Doug Berger)
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() (Doug Berger)
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access (Doug Berger)
- net: bcmgenet: keep MAC in reset until PHY is up (Doug Berger)
- Revert 'net: bcmgenet: use RGMII loopback for MAC reset' (Doug Berger)
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (Sergey Shtylyov)
- LTS tag: v5.4.276 (Sherry Yang)
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (Chen-Yu Tsai)
- pinctrl: mediatek: remove set but not used variable 'e' (YueHaibing)
- pinctrl: mediatek: Fix some off by one bugs (Dan Carpenter)
- pinctrl: mediatek: Fix fallback behavior for bias_set_combo (Hsin-Yi Wang)
- regulator: core: fix debugfs creation regression (Johan Hovold)
- net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo)
- drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin)
- dyndbg: fix old BUG_ON in >control parser (Jim Cromie)
- tipc: fix UAF in error path (Paolo Abeni)
- usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)
- usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)
- firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos)
- net: qede: use return from qede_parse_flow_attr() for flower (Asbjorn Sloth Tonnesen)
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (Asbjorn Sloth Tonnesen)
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet)
- net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)
- phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet)
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats)
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou)
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou)
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima)
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet)
- xfrm: Preserve vlan tags for transport mode software GRO (Paul Davey)
- pinctrl: mediatek: Fix fallback call path (Hsin-Yi Wang)
- net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)
- fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)
- clk: Don't hold prepare_lock when calling kref_put() (Stephen Boyd)
- gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)
- gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)
- 9p: explicitly deny setlease attempts (Jeff Layton)
- fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)
- fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt)
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)
- MIPS: scall: Save thread_info.syscall unconditionally on entry (Jiaxun Yang)
- gpu: host1x: Do not setup DMA for virtual devices (Thierry Reding)
- scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)
- btrfs: always clear PERTRANS metadata during commit (Boris Burkov)
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve (Boris Burkov)
- tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)
- tools/power turbostat: Fix added raw MSR output (Doug Smythies)
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman)
- ata: sata_gemini: Check clk_enable() result (Chen Ni)
- net: bcmgenet: Reset RBUF on first open (Phil Elwell)
- ALSA: line6: Zero-initialize message buffers (Takashi Iwai)
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap)
- net: mark racy access on sk->sk_rcvbuf (linke li)
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (Igor Artemiev)
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price)
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec)
- tipc: fix a possible memleak in tipc_buf_append (Xin Long)
- net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behun)
- net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)
- net: qede: use return from qede_parse_flow_attr() for flow_spec (Asbjorn Sloth Tonnesen)
- net l2tp: drop flow hash on forward (David Bauer)
- nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima)
- bna: ensure the copied buf is NUL terminated (Bui Quang Minh)
- s390/mm: Fix clearing storage keys for huge pages (Claudio Imbrenda)
- s390/mm: Fix storage key clearing for guest huge pages (Claudio Imbrenda)
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng)
- power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)
- nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima)
- nfs: make the rpc_stat per net namespace (Josef Bacik)
- nfs: expose /proc/net/sunrpc/nfs in net namespaces (Josef Bacik)
- sunrpc: add a struct rpc_stats arg to rpc_create_args (Josef Bacik)
- pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (Chen-Yu Tsai)
- pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic (Chen-Yu Tsai)
- pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai)
- pinctrl: mediatek: remove shadow variable declaration (Light Hsieh)
- pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage (Light Hsieh)
- pinctrl: mediatek: Refine mtk_pinconf_get() (Light Hsieh)
- pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() (Light Hsieh)
- pinctrl: mediatek: Supporting driving setting without mapping current to register value (Light Hsieh)
- pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() (Light Hsieh)
- pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter)
- wifi: nl80211: don't free NULL coalescing rule (Johannes Berg)
- dmaengine: Revert 'dmaengine: pl330: issue_pending waits until WFP state' (Vinod Koul)
- LTS tag: v5.4.275 (Sherry Yang)
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)
- udp: preserve the connected status if only UDP cmsg (Yick Xie)
- dm: limit the number of targets and parameter size area (Mikulas Patocka)
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao)
- i2c: smbus: fix NULL function pointer dereference (Wolfram Sang)
- idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)
- dmaengine: owl: fix register access functions (Arnd Bergmann)
- tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() (Eric Dumazet)
- tcp: Clean up kernel listener's reqsk in inet_twsk_purge() (Kuniyuki Iwashima)
- mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)
- net: b44: set pause params only when interface is up (Peter Munster)
- ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)
- irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang)
- drm/amdgpu: Fix leak when GPU memory allocation fails (Mukul Joshi)
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn)
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (WangYuli)
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)
- tracing: Show size of requested perf buffer (Robin H. Johnson)
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan)
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)
- drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)
- serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg)
- serial: core: Provide port lock wrappers (Thomas Gleixner)
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)
- iavf: Fix TC config comparison with existing adapter TC config (Sudheer Mogilappagari)
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale)
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ido Schimmel)
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ido Schimmel)
- mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ido Schimmel)
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ido Schimmel)
- mlxsw: spectrum_acl_tcam: Rate limit error message (Ido Schimmel)
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ido Schimmel)
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ido Schimmel)
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ido Schimmel)
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim)
- ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)
- net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim)
- net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet)
- NFC: trf7970a: disable all regulators on removal (Paul Geurts)
- mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)
- vxlan: drop packets from invalid src-address (David Bauer)
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)
- arm64: dts: mediatek: mt2712: fix validation errors (Rafal Milecki)
- arm64: dts: mt2712: add ethernet device node (Biao Huang)
- arm64: dts: mediatek: mt7622: drop 'reset-names' from thermal block (Rafal Milecki)
- arm64: dts: mediatek: mt7622: fix ethernet controller 'compatible' (Rafal Milecki)
- arm64: dts: mediatek: mt7622: fix IR nodename (Rafal Milecki)
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)
- KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov)
- nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park)
- nouveau: fix instmem race condition around ptr stores (Dave Airlie)
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern)
- speakup: Avoid crash on very long word (Samuel Thibault)
- usb: Disable USB3 LPM at shutdown (Kai-Heng Feng)
- USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)
- USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)
- USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)
- USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)
- USB: serial: option: add Fibocom FM135-GL variants (bolan wang)
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain)
- comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich)
- binder: check offset alignment in binder_get_object() (Carlos Llamas)
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (Eric Biggers)
- clk: Get runtime PM before walking tree during disable_unused (Stephen Boyd)
- clk: Initialize struct clk_core kref earlier (Stephen Boyd)
- clk: Print an info line before disabling unused clocks (Konrad Dybcio)
- clk: remove extra empty line (Claudiu Beznea)
- clk: Mark 'all_lists' as const (Stephen Boyd)
- clk: Remove prepare_lock hold assertion in __clk_release() (Stephen Boyd)
- drm: nv04: Fix out of bounds access (Mikhail Kobuk)
- RDMA/rxe: Fix the problem 'mutex_destroy missing' (Yanjun.Zhu)
- tun: limit printing rate when illegal packet received by tun dev (Lei Chen)
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan)
- kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian)
- selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)
- btrfs: record delayed inode root in transaction (Boris Burkov)
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)
- selftests: timers: Fix abs() warning in posix_timers test (John Stultz)
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)
- drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjala)
- btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov)
- net: ena: Fix potential sign extension issue (David Arinzon)
- af_unix: Fix garbage collector racing against connect() (Michal Luczaj)
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)
- net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu)
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc)
- ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)
- ipv6: fib: hide unused 'pn' variable (Arnd Bergmann)
- geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet)
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (Petr Tesarik)
- net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets)
- Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov)
- batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)

[5.4.17-2136.333.2.el8]
- slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang) [Orabug: 36655469]
- slub: introduce count_partial_free_approx() (Jianfeng Wang) [Orabug: 36655469]

[5.4.17-2136.333.1.el8]
- net/rds: Get RDS statistics for each possible CPU (Anand Khoje) [Orabug: 35830449]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan) [Orabug: 36307093]
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan) [Orabug: 36307093]
- RDMA/cm: Use RCU synchronization mechanism to protect cm_id_private xa_load() (Danit Goldberg) [Orabug: 36375215]
- uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK6 (Jianfeng Wang) [Orabug: 36460675]
- fgraph: Add declaration of 'struct fgraph_ret_regs' (Steven Rostedt (Google)) [Orabug: 36460675]
- x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng) [Orabug: 36460675]
- arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng) [Orabug: 36460675]
- tracing: Add documentation for funcgraph-retval and funcgraph-retval-hex (Donglin Peng) [Orabug: 36460675]
- function_graph: Support recording and printing the return value of function (Donglin Peng) [Orabug: 36460675]
- fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware)) [Orabug: 36460675]
- block: fix io util% for exadata disk with 1 hw queue (Gulam Mohamed) [Orabug: 36511453]
- Revert 'Use inflight IO in io acct of high latency devices' (Gulam Mohamed) [Orabug: 36511453]
- kprobe/ftrace: bail out if ftrace was killed (Stephen Brennan) [Orabug: 36572635]
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang) [Orabug: 36592398]
- x86/returnthunk: Allow different return thunks (Peter Zijlstra) [Orabug: 36628382]
- tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima) [Orabug: 36637454]
- tcp: disable TFO blackhole logic by default (Wei Wang) [Orabug: 36637454]

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (x86_64)	kernel-uek-container-5.4.17-2136.333.5.el8.src.rpm	9a2d25ca0e323b902e32d5631069e1ef	-	ol8_x86_64_UEKR6
	kernel-uek-container-5.4.17-2136.333.5.el8.x86_64.rpm	59fced9959f460f2063f4445e6a38f55	-	ol8_x86_64_UEKR6
	kernel-uek-container-debug-5.4.17-2136.333.5.el8.x86_64.rpm	968a2ffb3f49052ef150a94d79aef978	-	ol8_x86_64_UEKR6