ELSA-2016-1277

ELSA-2016-1277 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2016-06-23

Description

- [3.10.0-327.22.2.OL7]
- Oracle Linux certificates (Alexey Petrenko)

[3.10.0-327.22.2]
- [infiniband] security: Restrict use of the write() interface (Don Dutile) [1332553 1316685] {CVE-2016-4565}

[3.10.0-327.22.1]
- [mm] mmu_notifier: fix memory corruption (Jerome Glisse) [1335727 1307042]
- [misc] cxl: Increase timeout for detection of AFU mmio hang (Steve Best) [1335419 1329682]
- [misc] cxl: Configure the PSL for two CAPI ports on POWER8NVL (Steve Best) [1336389 1278793]
- [powerpc] Define PVR value for POWER8NVL processor (Steve Best) [1336389 1278793]
- [x86] Mark Intel Knights Landing-F processor as not supported (Steve Best) [1335407 1331516]
- [netdrv] ixgbevf: fix spoofed packets with random MAC (Ken Cox) [1335406 1247345]
- [netdrv] ixgbevf: use ether_addr_copy instead of memcpy (Ken Cox) [1335406 1247345]
- [scsi] hpsa: update rev to 3.4.10-0-RH3 (Joseph Szczypek) [1334773 1296287]
- [scsi] hpsa: check for a null phys_disk pointer in ioaccel2 path (Joseph Szczypek) [1334773 1296287]
- [cpufreq] intel_pstate: Fix divide by zero on Knights Landing (Steve Best) [1334438 1273305]
- [mm] hugetlbfs: optimize when NUMA=n (Rui Wang) [1334436 1274624]
- [mm] hugetlb: use memory policy when available (Rui Wang) [1334436 1274624]
- [mm] optimize put_mems_allowed() usage (Rui Wang) [1334436 1274624]
- [x86] Mark Intel Knights Landing processor as supported (Steve Best) [1332991 1158238]
- [block] virtio-blk: use VIRTIO_BLK_F_WCE and VIRTIO_BLK_F_CONFIG_WCE in virtio1 (Fam Zheng) [1327611 1266008]
- [x86] mm: suitable memory should go to ZONE_MOVABLE (Igor Mammedov) [1327588 1265880]
- [mm] memory-hotplug: add zone_for_memory() for selecting zone for new memory (Igor Mammedov) [1327588 1265880]
- [s390] mm: Fix memory hotplug for unaligned standby memory (Igor Mammedov) [1327588 1265880]
- [mm] memory-hotplug: Remove 'weak' from memory_block_size_bytes() declaration (Igor Mammedov) [1327588 1265880]
- [mm] Add prototype declaration to the header file (Igor Mammedov) [1327588 1265880]
- [mm] hotplug: verify hotplug memory range (Igor Mammedov) [1327588 1265880]
- [drm] vmwgfx: respect 'nomodeset' (Rob Clark) [1327587 1284936]
- [net] sctp: Prevent soft lockup when sctp_accept() is called during a timeout event (Xin Long) [1324748 1270586] {CVE-2015-8767}
- [net] sctp: Whitespace fix (Xin Long) [1324748 1270586] {CVE-2015-8767}
- [fs] xfs: fix splice/direct-IO deadlock (Bill O'Donnell) [1324098 824796]
- [fs] vfs: split generic splice code from i_mutex locking (Bill O'Donnell) [1324098 824796]
- [lib] keys: Fix ASN.1 indefinite length object parsing (David Howells) [1308814 1308815] {CVE-2016-0758}

[3.10.0-327.21.1]
- [lib] klist: fix starting point removed bug in klist iterators (Ewan Milne) [1333403 1309433]
- [acpi] tables: test the correct variable (Prarit Bhargava) [1331681 1242556]
- [x86] acpi: Handle apic/x2apic entries in MADT in correct order (Prarit Bhargava) [1331681 1242556]
- [acpi] tables: Add acpi_subtable_proc to ACPI table parsers (Prarit Bhargava) [1331681 1242556]
- [acpi] table: Always count matched and successfully parsed entries (Prarit Bhargava) [1331681 1242556]
- [acpi] table: Add new function to get table entries (Prarit Bhargava) [1331681 1242556]
- [netdrv] mlx4_en: Fix IRQ affinity on s390x (Kamal Heib) [1327583 1264148]
- [usb] xhci: Workaround to get Intel xHCI reset working more reliably (Torez Smith) [1327581 1318570]
- [block] Return EBUSY from BLKRRPART for mounted whole-dev fs (Eric Sandeen) [1324530 1285549]
- [powerpc] eeh: Fix PE location code (Gustavo Duarte) [1324528 1302537]
- [powerpc] eeh: Wrong place to call pci_get_slot() (Steve Best) [1327834 1273996]
- [net] ipv6: Nonlocal bind (Sabrina Dubroca) [1324502 1315968]
- [net] ipv4: bind ip_nonlocal_bind to current netns (Sabrina Dubroca) [1324502 1315968]

[3.10.0-327.20.1]
- [kernel] audit: stop an old auditd being starved out by a new auditd (Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: try harder to send to auditd upon netlink failure (Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: remove stray newlines from audit_log_lost messages (Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: get rid of *NO* daemon at audit_pid=0 message (Richard Guy Briggs) [1328802 1253123]
- [kernel] audit: prevent an older auditd shutdown from orphaning a newer auditd startup (Richard Guy Briggs) [1328802 1253123]
- [net] netlink: don't hold mutex in rcu callback when releasing mmapd ring (Phil Sutter) [1328801 1238749]
- [lib] rhashtable: Wait for RCU readers after final unzip work (Phil Sutter) [1328801 1238749]
- [net] netlink: Lockless lookup with RCU grace period in socket release (Phil Sutter) [1328801 1238749]
- [net] netlink: use jhash as hashfn for rhashtable (Phil Sutter) [1328801 1238749]

[3.10.0-327.19.1]
- [net] tcp, dccp: warn user for preferred ip_local_port_range (Florian Westphal) [1323960 1305525]
- [net] tcp, dccp: try to not exhaust ip_local_port_range in connect() (Florian Westphal) [1323960 1305525]
- [net] tcp: improve REUSEADDR/NOREUSEADDR cohabitation (Florian Westphal) [1323960 1305525]

Related CVEs

CVE-2015-8767

CVE-2016-4565

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-327.22.2.el7.src.rpm	b6b5f7657e10f0ea402df98ac108241e14457d0f7c5b2ec2b03d96f23f951ecc	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-327.22.2.el7.src.rpm	b6b5f7657e10f0ea402df98ac108241e14457d0f7c5b2ec2b03d96f23f951ecc	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-327.22.2.el7.src.rpm	b6b5f7657e10f0ea402df98ac108241e14457d0f7c5b2ec2b03d96f23f951ecc	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-3.10.0-327.22.2.el7.x86_64.rpm	096f45b3d538b34e92222337f978eb4c44e284d223bde7df92b6244e224d164c	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-327.22.2.el7.x86_64.rpm	096f45b3d538b34e92222337f978eb4c44e284d223bde7df92b6244e224d164c	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-abi-whitelists-3.10.0-327.22.2.el7.noarch.rpm	a41f2b983474104a1b7e7bd93ed415f73b4ef0b64592b592eaf48f71a698bafe	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-327.22.2.el7.noarch.rpm	a41f2b983474104a1b7e7bd93ed415f73b4ef0b64592b592eaf48f71a698bafe	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-debug-3.10.0-327.22.2.el7.x86_64.rpm	0d8cc999f670629e0f3bee75b9441552f4971f3853235f38933ce464b9cae69f	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-327.22.2.el7.x86_64.rpm	0d8cc999f670629e0f3bee75b9441552f4971f3853235f38933ce464b9cae69f	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-debug-devel-3.10.0-327.22.2.el7.x86_64.rpm	a13b2eec5ad01cdd5d8125b3465793fe2a0a631977c3c8e5e03b2a4457db7f1f	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-327.22.2.el7.x86_64.rpm	a13b2eec5ad01cdd5d8125b3465793fe2a0a631977c3c8e5e03b2a4457db7f1f	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-devel-3.10.0-327.22.2.el7.x86_64.rpm	30044e4e9772e2e150944c30d8418e2df70df01fcb73b27422c575e71dc1bdde	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-327.22.2.el7.x86_64.rpm	30044e4e9772e2e150944c30d8418e2df70df01fcb73b27422c575e71dc1bdde	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-doc-3.10.0-327.22.2.el7.noarch.rpm	6742acb29e7220ae6645026c6573c9b69784c5640577f698458420e52419b5a5	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-headers-3.10.0-327.22.2.el7.x86_64.rpm	82ced611c3de580408efb79bbad62f65a42d92eb3e0c635d3bc0b1df1884d3ef	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-327.22.2.el7.x86_64.rpm	82ced611c3de580408efb79bbad62f65a42d92eb3e0c635d3bc0b1df1884d3ef	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-tools-3.10.0-327.22.2.el7.x86_64.rpm	3c7d29b3cb23612a9c51a74810708dbb77acb4449e2917329b68b8739415448e	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-327.22.2.el7.x86_64.rpm	3c7d29b3cb23612a9c51a74810708dbb77acb4449e2917329b68b8739415448e	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-tools-libs-3.10.0-327.22.2.el7.x86_64.rpm	044033e322d1c669d4074bfe9ab2d57390c239d4925d4eab9c68060e181c544f	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-327.22.2.el7.x86_64.rpm	044033e322d1c669d4074bfe9ab2d57390c239d4925d4eab9c68060e181c544f	ELSA-2025-1281	ol7_x86_64_u2_patch
	kernel-tools-libs-devel-3.10.0-327.22.2.el7.x86_64.rpm	1a4bd9e87c52ce21ff7e997ed1561b09a26ea58530db15b92ca75d97bf858278	ELSA-2025-1281	ol7_x86_64_optional_archive
	perf-3.10.0-327.22.2.el7.x86_64.rpm	7e7844c76fb53f50383062fc658b6740cae53028e7bc94f7d6aa82f8eedd6364	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-327.22.2.el7.x86_64.rpm	7e7844c76fb53f50383062fc658b6740cae53028e7bc94f7d6aa82f8eedd6364	ELSA-2025-20019	ol7_x86_64_u2_patch
	python-perf-3.10.0-327.22.2.el7.x86_64.rpm	24382c8de964b9788bc6953c81ca49daedcc73714247ec48309a7800572dfed3	ELSA-2025-20019	ol7_x86_64_latest_archive
	python-perf-3.10.0-327.22.2.el7.x86_64.rpm	24382c8de964b9788bc6953c81ca49daedcc73714247ec48309a7800572dfed3	ELSA-2025-20019	ol7_x86_64_u2_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team