ELSA-2018-4288

ELSA-2018-4288 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2018-11-28

Description

[4.1.12-124.22.4]
- Revert commit 8bd274934987 ('block: fix bdi vs gendisk lifetime mismatch') (Ashish Samant) [Orabug: 28968102]
- KVM/x86: Add IBPB support (Ashok Raj) [Orabug: 28703712]
- x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky) [Orabug: 28814570]
- x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky) [Orabug: 28814570]
- x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky) [Orabug: 28814570]
- x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky) [Orabug: 28814570]
- x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky) [Orabug: 28814570]

[4.1.12-124.22.3]
- net: net_failover: fix typo in net_failover_slave_register() (Liran Alon) [Orabug: 28122104]
- virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala) [Orabug: 28122104]
- virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala) [Orabug: 28122104]
- net: Introduce net_failover driver (Sridhar Samudrala) [Orabug: 28122104]
- net: Introduce generic failover module (Sridhar Samudrala) [Orabug: 28122104]
- net: introduce lower state changed info structure for LAG lowers (Jiri Pirko) [Orabug: 28122104]
- net: introduce change lower state notifier (Jiri Pirko) [Orabug: 28122104]
- net: add info struct for LAG changeupper (Jiri Pirko) [Orabug: 28122104]
- net: add possibility to pass information about upper device via notifier (Jiri Pirko) [Orabug: 28122104]
- net: Check CHANGEUPPER notifier return value (Ido Schimmel) [Orabug: 28122104]
- net: introduce change upper device notifier change info (Jiri Pirko) [Orabug: 28122104]
- x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan) [Orabug: 28271063]
- x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan) [Orabug: 28271063]
- x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan) [Orabug: 28271063]
- xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil) [Orabug: 28798861]
- scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart) [Orabug: 28855939]
- scsi: virtio_scsi: let host do exception handling (Paolo Bonzini) [Orabug: 28856913]
- net/rds: Fix endless RNR situation (Venkat Venkatsubra) [Orabug: 28857027]
- scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko) [Orabug: 28892656] {CVE-2018-1000204}
- cdrom: fix improper type cast, which can leat to information leak. (Young_X) [Orabug: 28929767] {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}

Related CVEs

CVE-2018-18710

CVE-2018-1000204

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.22.4.el6uek.src.rpm	eb4e4d5296eddbd467aabd133e58304f23d319fb02bde3115798565d2efbd4b0	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-4.1.12-124.22.4.el6uek.x86_64.rpm	e062111a0b9b42f95633f912729a57294f89fabcd073e9abce9f17ec2d1e4ca4	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-debug-4.1.12-124.22.4.el6uek.x86_64.rpm	ef81800827cee679993b456cfb4720cc2255d20d0c6a18241388d644026b4e05	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-debug-devel-4.1.12-124.22.4.el6uek.x86_64.rpm	d0b71911a142cb5d22603ab052853974b95e028b365440b51d14283683a817ce	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-devel-4.1.12-124.22.4.el6uek.x86_64.rpm	ba86c3523a63681393c7c7aed62f04fa7cab38b5ca87762adb9a4c1bb6e7c00e	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-doc-4.1.12-124.22.4.el6uek.noarch.rpm	914a7d76762ffde27dc6bcdbc7e7f2ded72b7aec267cf98f9e323cf005557f74	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-firmware-4.1.12-124.22.4.el6uek.noarch.rpm	1eda420a6f38d2575d91ef8a77a8a5257615fa5a3bec19f330ab5098a0d5e8ee	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.22.4.el7uek.src.rpm	096af16c76f7b200a74ba3eaf0fd5ad74fe45e7b34ce5ff3e4cf791a37442bd2	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-4.1.12-124.22.4.el7uek.x86_64.rpm	92b8dbbbe31e40010df07da463825f05dbe194d7fa44338492559f2f12c41310	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-debug-4.1.12-124.22.4.el7uek.x86_64.rpm	36066ede6248f88f270721d0a569f9964e18cfb7dfbb32130fabf8b99e6e9c1b	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-debug-devel-4.1.12-124.22.4.el7uek.x86_64.rpm	f83d348660426cc094d62612d933d56298bf2462e6a0678e334653c11672d07a	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-devel-4.1.12-124.22.4.el7uek.x86_64.rpm	7976ea00437880f6f1dde2d6b534658240f3beb62586c6d0108ebf27c219c8e0	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-doc-4.1.12-124.22.4.el7uek.noarch.rpm	d9825c9af0ab85fb4c0ebb3dfd17878ee2519b3f90314ddfe5fe704a15dd12f5	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-firmware-4.1.12-124.22.4.el7uek.noarch.rpm	6a944ff9adaecdb6723001b3cfd44ccc5e56972ec82517bbe2634e9a8edca43c	ELSA-2025-20007	ol7_x86_64_UEKR4_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team