ELSA-2017-1615

ELSA-2017-1615 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2017-06-28

Description

- [3.10.0-514.26.1.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]

[3.10.0-514.26.1]
- [mm] enlarge stack guard gap (Larry Woodman) [1452732 1452733] {CVE-2017-1000364}
- Revert: [md] dm mirror: use all available legs on multiple failures (Mike Snitzer) [1449176 1383444]

[3.10.0-514.25.1]
- [lib] kobject: grab an extra reference on kobject->sd to allow duplicate deletes (Aristeu Rozanski) [1454851 1427252]
- [kernel] module: When modifying a module's text ignore modules which are going away too (Aaron Tomlin) [1454684 1386313]
- [kernel] module: Ensure a module's state is set accordingly during module coming cleanup code (Aaron Tomlin) [1454684 1386313]
- [net] vxlan: do not output confusing error message (Jiri Benc) [1454636 1445054]
- [net] vxlan: correctly handle ipv6.disable module parameter (Jiri Benc) [1454636 1445054]
- [iommu] vt-d: fix range computation when making room for large pages (Alex Williamson) [1450856 1435612]
- [fs] nfsd: stricter decoding of write-like NFSv2/v3 ops ('J. Bruce Fields') [1449282 1443204] {CVE-2017-7895}
- [fs] nfsd4: minor NFSv2/v3 write decoding cleanup ('J. Bruce Fields') [1449282 1443204] {CVE-2017-7895}
- [md] dm mirror: use all available legs on multiple failures (Mike Snitzer) [1449176 1383444]
- [fs] nfsd: check for oversized NFSv2/v3 arguments ('J. Bruce Fields') [1447642 1442407] {CVE-2017-7645}
- [scsi] ses: don't get power status of SES device slot on probe (Gustavo Duarte) [1446650 1434768]
- [scsi] ipr: do not set DID_PASSTHROUGH on CHECK CONDITION (Steve Best) [1446649 1441747]
- [net] macsec: dynamically allocate space for sglist (Sabrina Dubroca) [1445546 1445545] {CVE-2017-7477}
- [net] macsec: avoid heap overflow in skb_to_sgvec (Sabrina Dubroca) [1445546 1445545] {CVE-2017-7477}
- [fs] gfs2: Allow glocks to be unlocked after withdraw (Robert S Peterson) [1433882 1404005]
- [net] tcp: avoid infinite loop in tcp_splice_read() (Davide Caratti) [1430579 1430580] {CVE-2017-6214}
- [mm] vma_merge: correct false positive from __vma_unlink->validate_mm_rb (Andrea Arcangeli) [1428840 1374548]
- [mm] vma_merge: fix race vm_page_prot race condition against rmap_walk (Andrea Arcangeli) [1428840 1374548]
- [mm] fix use-after-free if memory allocation failed in vma_adjust() (Andrea Arcangeli) [1428840 1374548]
- [x86] kvm: x86: fix emulation of 'MOV SS, null selector' (Radim Krcmar) [1414742 1414743] {CVE-2017-2583}
- [powerpc] prom: Increase minimum RMA size to 512MB (Gustavo Duarte) [1450041 1411321]
- [pci] pciehp: Prioritize data-link event over presence detect (Myron Stowe) [1450124 1435818]
- [pci] pciehp: Don't re-read Slot Status when queuing hotplug event (Myron Stowe) [1450124 1435818]
- [pci] pciehp: Process all hotplug events before looking for new ones (Myron Stowe) [1450124 1435818]
- [pci] pciehp: Rename pcie_isr() locals for clarity (Myron Stowe) [1450124 1435818]

[3.10.0-514.24.1]
- [scsi] lpfc: Fix panic on BFS configuration (Maurizio Lombardi) [1452044 1443116]
- [vfio] type1: Reduce repetitive calls in vfio_pin_pages_remote() (Alex Williamson) [1450855 1438403]
- [vfio] type1: Remove locked page accounting workqueue (Alex Williamson) [1450855 1438403]
- [fs] nfs: Allow getattr to also report readdirplus cache hits (Dave Wysochanski) [1450851 1442068]
- [fs] nfs: Be more targeted about readdirplus use when doing lookup/revalidation (Dave Wysochanski) [1450851 1442068]
- [fs] nfs: Fix a performance regression in readdir (Dave Wysochanski) [1450851 1442068]
- [x86] xen: do not re-use pirq number cached in pci device msi msg data (Vitaly Kuznetsov) [1450037 1433831]
- [powerpc] mm: Add missing global TLB invalidate if cxl is active (Steve Best) [1449178 1440776]
- [powerpc] boot: Fix zImage TOC alignment (Gustavo Duarte) [1444343 1395838]

[3.10.0-514.23.1]
- [scsi] qla2xxx: Defer marking device lost when receiving an RSCN (Himanshu Madhani) [1446246 1436940]
- [scsi] qla2xxx: Fix typo in driver (Himanshu Madhani) [1446246 1436940]
- [scsi] qla2xxx: Fix crash in qla2xxx_eh_abort on bad ptr (Himanshu Madhani) [1446246 1436940]
- [scsi] qla2xxx: Avoid that issuing a LIP triggers a kernel crash (Himanshu Madhani) [1446246 1436940]
- [scsi] qla2xxx: Add fix to read correct register value for ISP82xx (Himanshu Madhani) [1446246 1436940]
- [scsi] qla2xxx: Disable the adapter and skip error recovery in case of register disconnect (Himanshu Madhani) [1446246 1436940]

[3.10.0-514.22.1]
- [mm] hugetlb: don't use reserved during VM_SHARED mapping cow (Larry Woodman) [1445184 1385473]

Related CVEs

CVE-2017-6214

CVE-2017-7477

CVE-2017-7895

CVE-2017-2583

CVE-2017-7645

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-514.26.1.el7.src.rpm	a667004aa69b55269b023e86e377f0718b1236df44020c2e8f71f0c25aef7539	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-514.26.1.el7.src.rpm	a667004aa69b55269b023e86e377f0718b1236df44020c2e8f71f0c25aef7539	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-514.26.1.el7.src.rpm	a667004aa69b55269b023e86e377f0718b1236df44020c2e8f71f0c25aef7539	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-3.10.0-514.26.1.el7.x86_64.rpm	af0c64811d7ced7021ffa9ba936a68cdfae65c224e5bc0815ac49d4089bebde3	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-514.26.1.el7.x86_64.rpm	af0c64811d7ced7021ffa9ba936a68cdfae65c224e5bc0815ac49d4089bebde3	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-abi-whitelists-3.10.0-514.26.1.el7.noarch.rpm	dbffcee1a5ca785e78b3c4adeb86fb9d63a06653e092dbb23a9d27a81b109b6d	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-514.26.1.el7.noarch.rpm	dbffcee1a5ca785e78b3c4adeb86fb9d63a06653e092dbb23a9d27a81b109b6d	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-debug-3.10.0-514.26.1.el7.x86_64.rpm	459c94cda63995822ef75d738f1b97afc1fa59ab9042db1d0c581df7c50cfd92	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-514.26.1.el7.x86_64.rpm	459c94cda63995822ef75d738f1b97afc1fa59ab9042db1d0c581df7c50cfd92	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-debug-devel-3.10.0-514.26.1.el7.x86_64.rpm	76b1372013df83316b9b2898173868a54b92ab01e3786151fddfb0920168aa1a	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-514.26.1.el7.x86_64.rpm	76b1372013df83316b9b2898173868a54b92ab01e3786151fddfb0920168aa1a	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-devel-3.10.0-514.26.1.el7.x86_64.rpm	3273ceede114cb78632b282785d769c7b21a30481fdd8cfe914fa3f0d20e04d6	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-514.26.1.el7.x86_64.rpm	3273ceede114cb78632b282785d769c7b21a30481fdd8cfe914fa3f0d20e04d6	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-doc-3.10.0-514.26.1.el7.noarch.rpm	05387cbe31c29cff0b8105c4eb80f1b9944ddb1022d72e582047e822314f58c0	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-doc-3.10.0-514.26.1.el7.noarch.rpm	05387cbe31c29cff0b8105c4eb80f1b9944ddb1022d72e582047e822314f58c0	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-headers-3.10.0-514.26.1.el7.x86_64.rpm	eaa998382f9769745d93d52238461d3ea0941002d773f03ccb29f41ad8e00d9e	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-514.26.1.el7.x86_64.rpm	eaa998382f9769745d93d52238461d3ea0941002d773f03ccb29f41ad8e00d9e	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-tools-3.10.0-514.26.1.el7.x86_64.rpm	033c270ecd8989bed355676fb761eaf9eae1a96de4f3a495b039189376ba58f2	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-514.26.1.el7.x86_64.rpm	033c270ecd8989bed355676fb761eaf9eae1a96de4f3a495b039189376ba58f2	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-tools-libs-3.10.0-514.26.1.el7.x86_64.rpm	ec610c0440164524728f4b7e93fcd77c70d95014ef9419e1bfac7b96ea13dd9e	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-514.26.1.el7.x86_64.rpm	ec610c0440164524728f4b7e93fcd77c70d95014ef9419e1bfac7b96ea13dd9e	ELSA-2025-1281	ol7_x86_64_u3_patch
	kernel-tools-libs-devel-3.10.0-514.26.1.el7.x86_64.rpm	69eec440759700337d89c7370f0647480b3661ec3901f8ef106e80d56e80f5e3	ELSA-2025-1281	ol7_x86_64_optional_archive
	perf-3.10.0-514.26.1.el7.x86_64.rpm	1d06e2c730335976885185fe75d842a4d0591d14002ddf8d9905fd635025c135	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-514.26.1.el7.x86_64.rpm	1d06e2c730335976885185fe75d842a4d0591d14002ddf8d9905fd635025c135	ELSA-2025-20019	ol7_x86_64_u3_patch
	python-perf-3.10.0-514.26.1.el7.x86_64.rpm	7c91f336915228defd496f63dd317d3732e11626479b8118dc218a67d77a9ce9	ELSA-2025-20019	ol7_x86_64_latest_archive
	python-perf-3.10.0-514.26.1.el7.x86_64.rpm	7c91f336915228defd496f63dd317d3732e11626479b8118dc218a67d77a9ce9	ELSA-2025-20019	ol7_x86_64_u3_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team