ELSA-2018-4126

ELSA-2018-4126 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-06-07

Description

[4.1.12-124.15.4]
- x86/bugs/IBRS: Keep SSBD mitigation in effect if spectre_v2=ibrs is selected (Mihai Carabas)
- fs/pstore: update the backend parameter in pstore module (Wang Long) [Orabug: 27994372]
- kvm: vmx: Reinstate support for CPUs without virtual NMI (Paolo Bonzini) [Orabug: 28041210]
- dm crypt: add big-endian variant of plain64 IV (Milan Broz) [Orabug: 28043932]
- x86/bugs: Rename SSBD_NO to SSB_NO (Konrad Rzeszutek Wilk) [Orabug: 28063992] {CVE-2018-3639}
- KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD (Tom Lendacky) [Orabug: 28063992] [Orabug: 28069548] {CVE-2018-3639}
- x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Thomas Gleixner) [Orabug: 28063992] {CVE-2018-3639}
- x86/bugs: Rework spec_ctrl base and mask logic (Thomas Gleixner) [Orabug: 28063992] {CVE-2018-3639}
- x86/bugs: Expose x86_spec_ctrl_base directly (Thomas Gleixner) [Orabug: 28063992] {CVE-2018-3639}
- x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host} (Borislav Petkov) [Orabug: 28063992] {CVE-2018-3639}
- x86/speculation: Rework speculative_store_bypass_update() (Thomas Gleixner) [Orabug: 28063992] {CVE-2018-3639}
- x86/speculation: Add virtualized speculative store bypass disable support (Tom Lendacky) [Orabug: 28063992] {CVE-2018-3639}
- x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Thomas Gleixner) [Orabug: 28063992] {CVE-2018-3639}
- x86/speculation: Handle HT correctly on AMD (Thomas Gleixner) [Orabug: 28063992] {CVE-2018-3639}
- x86/cpufeatures: Add FEATURE_ZEN (Thomas Gleixner) [Orabug: 28063992] {CVE-2018-3639}
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (Borislav Petkov) [Orabug: 28063992] {CVE-2018-3639}

[4.1.12-124.15.3]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds) [Orabug: 27947602] {CVE-2018-1000199}
- Revert 'perf/hwbp: Simplify the perf-hwbp code, fix documentation' (Brian Maly) [Orabug: 27947602]

Related CVEs

CVE-2018-1000199

CVE-2018-3639

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.15.4.el6uek.src.rpm	3731b814fbd224105c4a3a3fa668a45017e7fead09983f1bc389124f4360e59c	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-4.1.12-124.15.4.el6uek.x86_64.rpm	a67fb7fd14f77027fab01e830a7b670d98496ead5e4d679a5950d3dcd8f43964	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-debug-4.1.12-124.15.4.el6uek.x86_64.rpm	5af25a01549d47cdfcbf9c5ed461cc4437dffd5edcabeea80b9573194532fd57	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-debug-devel-4.1.12-124.15.4.el6uek.x86_64.rpm	087b285ed761d772bfea9edc07c435a0feccfa562740cc895d9b21af51e6bdda	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-devel-4.1.12-124.15.4.el6uek.x86_64.rpm	48aa035db4eaf64943cd3191a1daf9455de28fefd0e749e7db795f75c4292fd4	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-doc-4.1.12-124.15.4.el6uek.noarch.rpm	336951186d96a2964243db316bc3dd357d6d33cfef41cde5c5370f5631c50334	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-firmware-4.1.12-124.15.4.el6uek.noarch.rpm	9dd7e3e1ae0e42253ffe878b63472e3831062abb7de610178781a532cfb95da2	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.15.4.el7uek.src.rpm	93670ff70c9992c1759d652f5316035fa052bd7ad7a345a3b1a3e36f1556e273	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-4.1.12-124.15.4.el7uek.x86_64.rpm	a722c8e8b465c03fc27abb4810b174be0f7b7382395623879451c84b698d32c3	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-debug-4.1.12-124.15.4.el7uek.x86_64.rpm	0619257d74714952ec30c29217240b0666d7afdcb7a2fac55006f3c44b2372ea	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-debug-devel-4.1.12-124.15.4.el7uek.x86_64.rpm	fe990f30da6356aaee75010ecbfbee347d52f051b96afc90edaf32c79ce8c27e	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-devel-4.1.12-124.15.4.el7uek.x86_64.rpm	94a764804eb015b96b8eb8b6866d988c73162be7d8a85c9c34886180069b40c9	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-doc-4.1.12-124.15.4.el7uek.noarch.rpm	5a7e020035015d13cb2a0f9ed431231f67972229b9c3c8c82b8915e4a03b3628	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-firmware-4.1.12-124.15.4.el7uek.noarch.rpm	eb9b27ab83814cb2274ef5bc11e896cf040270a12d9b8067ab46812de72e0820	ELSA-2025-20007	ol7_x86_64_UEKR4_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team