ELSA-2019-0818

ELSA-2019-0818 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-04-23

Description

[3.10.0-957.12.1.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [bug 24817676]

[3.10.0-957.12.1]
- [kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
- [kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
- [kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
- [scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
- [x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
- [net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
- [net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
- [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
- [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
- [net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
- [net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
- [netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
- [acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
- [watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
- [acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
- [net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
- [net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
- [x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
- [nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
- [nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
- [nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
- [md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
- [md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
- [md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
- [net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
- [net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
- [netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
- [netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
- [kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
- [kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
- [mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
- [fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]

[3.10.0-957.11.1]
- [net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
- [net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
- [net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
- [netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]

Related CVEs

CVE-2019-7221

CVE-2019-6974

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-957.12.1.el7.src.rpm	e22236c84f308988f92fe70d161bf4eb1672c2ec1f65c02803d923ba64e67506	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-957.12.1.el7.src.rpm	e22236c84f308988f92fe70d161bf4eb1672c2ec1f65c02803d923ba64e67506	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-957.12.1.el7.src.rpm	e22236c84f308988f92fe70d161bf4eb1672c2ec1f65c02803d923ba64e67506	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-957.12.1.el7.src.rpm	e22236c84f308988f92fe70d161bf4eb1672c2ec1f65c02803d923ba64e67506	ELSA-2025-1281	ol7_x86_64_optional_latest
	kernel-3.10.0-957.12.1.el7.src.rpm	e22236c84f308988f92fe70d161bf4eb1672c2ec1f65c02803d923ba64e67506	ELSA-2025-1281	ol7_x86_64_u6_patch
	bpftool-3.10.0-957.12.1.el7.x86_64.rpm	c35755e1d69f000ead9663a86c9e4f92cecbe9739677e4ed63cea20ab502ec92	ELSA-2025-1281	ol7_x86_64_latest
	bpftool-3.10.0-957.12.1.el7.x86_64.rpm	c35755e1d69f000ead9663a86c9e4f92cecbe9739677e4ed63cea20ab502ec92	ELSA-2025-1281	ol7_x86_64_latest_archive
	bpftool-3.10.0-957.12.1.el7.x86_64.rpm	c35755e1d69f000ead9663a86c9e4f92cecbe9739677e4ed63cea20ab502ec92	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-3.10.0-957.12.1.el7.x86_64.rpm	c60338c3ddc3bc687e7c8672c8a81f81876254e70ccdee0a917eb03986252bb8	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-957.12.1.el7.x86_64.rpm	c60338c3ddc3bc687e7c8672c8a81f81876254e70ccdee0a917eb03986252bb8	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-957.12.1.el7.x86_64.rpm	c60338c3ddc3bc687e7c8672c8a81f81876254e70ccdee0a917eb03986252bb8	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-abi-whitelists-3.10.0-957.12.1.el7.noarch.rpm	40aad3eba79715852cd70d5e6184b1e0da25c6b3c4af4ba8ec57498aa603bdba	ELSA-2025-1281	ol7_x86_64_latest
	kernel-abi-whitelists-3.10.0-957.12.1.el7.noarch.rpm	40aad3eba79715852cd70d5e6184b1e0da25c6b3c4af4ba8ec57498aa603bdba	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-957.12.1.el7.noarch.rpm	40aad3eba79715852cd70d5e6184b1e0da25c6b3c4af4ba8ec57498aa603bdba	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-debug-3.10.0-957.12.1.el7.x86_64.rpm	235f0f9dcf49ce8cdf4c55089bdfb40780aad73437c24dce629dbfcad0ae1bc3	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-3.10.0-957.12.1.el7.x86_64.rpm	235f0f9dcf49ce8cdf4c55089bdfb40780aad73437c24dce629dbfcad0ae1bc3	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-957.12.1.el7.x86_64.rpm	235f0f9dcf49ce8cdf4c55089bdfb40780aad73437c24dce629dbfcad0ae1bc3	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-debug-devel-3.10.0-957.12.1.el7.x86_64.rpm	996a6484a06e8e88a83307779cd50fcafa90cd8fbb01a2be5180dec05dda4eea	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-devel-3.10.0-957.12.1.el7.x86_64.rpm	996a6484a06e8e88a83307779cd50fcafa90cd8fbb01a2be5180dec05dda4eea	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-957.12.1.el7.x86_64.rpm	996a6484a06e8e88a83307779cd50fcafa90cd8fbb01a2be5180dec05dda4eea	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-devel-3.10.0-957.12.1.el7.x86_64.rpm	e2919da818d702ed1a66f10742fa6da02330aee1d9adf2654ca2be07183f9816	ELSA-2025-1281	ol7_x86_64_latest
	kernel-devel-3.10.0-957.12.1.el7.x86_64.rpm	e2919da818d702ed1a66f10742fa6da02330aee1d9adf2654ca2be07183f9816	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-957.12.1.el7.x86_64.rpm	e2919da818d702ed1a66f10742fa6da02330aee1d9adf2654ca2be07183f9816	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-doc-3.10.0-957.12.1.el7.noarch.rpm	4e2811da021253fbd640928c3fdbbedc305220894b7a241ba19532b50e482a21	ELSA-2025-1281	ol7_x86_64_latest
	kernel-doc-3.10.0-957.12.1.el7.noarch.rpm	4e2811da021253fbd640928c3fdbbedc305220894b7a241ba19532b50e482a21	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-doc-3.10.0-957.12.1.el7.noarch.rpm	4e2811da021253fbd640928c3fdbbedc305220894b7a241ba19532b50e482a21	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-headers-3.10.0-957.12.1.el7.x86_64.rpm	7efa3c9db1e622ad2ff6a4367856efd05853cd9bd40f889c707ad9dc802330f7	ELSA-2025-1281	ol7_x86_64_latest
	kernel-headers-3.10.0-957.12.1.el7.x86_64.rpm	7efa3c9db1e622ad2ff6a4367856efd05853cd9bd40f889c707ad9dc802330f7	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-957.12.1.el7.x86_64.rpm	7efa3c9db1e622ad2ff6a4367856efd05853cd9bd40f889c707ad9dc802330f7	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-tools-3.10.0-957.12.1.el7.x86_64.rpm	3ea41618c8afc3c57dc4d93df9c78a0b054126b5ca86c1984552d4d96bf6c1d4	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-3.10.0-957.12.1.el7.x86_64.rpm	3ea41618c8afc3c57dc4d93df9c78a0b054126b5ca86c1984552d4d96bf6c1d4	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-957.12.1.el7.x86_64.rpm	3ea41618c8afc3c57dc4d93df9c78a0b054126b5ca86c1984552d4d96bf6c1d4	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-tools-libs-3.10.0-957.12.1.el7.x86_64.rpm	065ccf642e3c454acdd2489c4530ca1b9a8fc53866b24f3fd1ff7be61ae6d1f6	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-libs-3.10.0-957.12.1.el7.x86_64.rpm	065ccf642e3c454acdd2489c4530ca1b9a8fc53866b24f3fd1ff7be61ae6d1f6	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-957.12.1.el7.x86_64.rpm	065ccf642e3c454acdd2489c4530ca1b9a8fc53866b24f3fd1ff7be61ae6d1f6	ELSA-2025-1281	ol7_x86_64_u6_patch
	kernel-tools-libs-devel-3.10.0-957.12.1.el7.x86_64.rpm	73b593b2be7b86c5f40141cba4d5827ad94b1f36fdc3c852222a20df0e53df22	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-tools-libs-devel-3.10.0-957.12.1.el7.x86_64.rpm	73b593b2be7b86c5f40141cba4d5827ad94b1f36fdc3c852222a20df0e53df22	ELSA-2025-1281	ol7_x86_64_optional_latest
	perf-3.10.0-957.12.1.el7.x86_64.rpm	43753b74969490f64ba977ebbee9d55df84c83380b337cc1185a1ad742a516da	ELSA-2025-20019	ol7_x86_64_latest
	perf-3.10.0-957.12.1.el7.x86_64.rpm	43753b74969490f64ba977ebbee9d55df84c83380b337cc1185a1ad742a516da	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-957.12.1.el7.x86_64.rpm	43753b74969490f64ba977ebbee9d55df84c83380b337cc1185a1ad742a516da	ELSA-2025-20019	ol7_x86_64_u6_patch
	python-perf-3.10.0-957.12.1.el7.x86_64.rpm	f3e41592d86df65418a167d72b1f9e1ea872226fc0f3ebdfafcaa8122bf59bf3	ELSA-2025-20019	ol7_x86_64_latest
	python-perf-3.10.0-957.12.1.el7.x86_64.rpm	f3e41592d86df65418a167d72b1f9e1ea872226fc0f3ebdfafcaa8122bf59bf3	ELSA-2025-20019	ol7_x86_64_latest_archive
	python-perf-3.10.0-957.12.1.el7.x86_64.rpm	f3e41592d86df65418a167d72b1f9e1ea872226fc0f3ebdfafcaa8122bf59bf3	ELSA-2025-20019	ol7_x86_64_u6_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team