ELSA-2019-3836

ELSA-2019-3836 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-11-13

Description

[2.6.32-754.24.2.OL6]
- Update genkey [bug 25599697]

[2.6.32-754.24.2]
- [documentation] Documentation: Add ITLB_MULTIHIT documentation (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [kvm] KVM: introduce no_huge_pages module parameter (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86: Add ITLB_MULTIHIT bug infrastructure (Paolo Bonzini) [1692385] {CVE-2018-12207}
- [x86] x86/spec_ctrl/taa: Enable TAA status change after late microcode (Waiman Long) [1766531] {CVE-2019-11135}
- [documentation] x86/speculation/taa: Add documentation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [base] x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/speculation/taa: Add mitigation for TSX Async Abort (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/cpu: Add a helper function x86_read_arch_cap_msr() (Waiman Long) [1766531] {CVE-2019-11135}
- [x86] x86/msr: Add the IA32_TSX_CTRL MSR (Waiman Long) [1766531] {CVE-2019-11135}
- [drm] drm/i915: Lower RM timeout to avoid DSI hard hangs (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/gen8+: Add RC6 CTX corruption WA (Dave Airlie) [1756824] {CVE-2019-0154}
- [drm] drm/i915/cmdparser: Ignore Length operands during command matching (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/cmdparser: Add support for backward jumps (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add gen9 BCS cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Allow parsing of unsized batches (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Support ro ppgtt mapped cmdparser shadow buffers (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Add support for mandatory cmdparsing (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Remove Master tables from cmdparser (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Disable Secure Batches for gen6+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915: Rename gen7 cmdparser tables (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Disable read-only support under GVT (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] erm/i915/gtt: Read-only pages for insert_entries on bdw+ (Dave Airlie) [1756891] {CVE-2019-0155}
- [drm] drm/i915/gtt: Add read only pages to gen8_pte_encode (Dave Airlie) [1756891] {CVE-2019-0155}

[2.6.32-754.24.1]
- [net] ip: Don't leak head fragment on queue timeout (Stefano Brivio) [1752536]
- [vhost] vhost_net: fix possible infinite loop (Eugenio Perez) [1702941]
- [vhost] vhost: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: introduce vhost_exceeds_weight() (Eugenio Perez) [1702941]
- [vhost] vhost_net: use packet weight for rx handler, too (Eugenio Perez) [1702941]
- [vhost] vhost-net: set packet weight of tx polling to 2 * vq size (Eugenio Perez) [1702941]
- [x86] x86/pti: Fix incorrect global bit setting with PTI on (Waiman Long) [1645724]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Rafael Aquini) [1560787]

Related CVEs

CVE-2019-3900

CVE-2019-0154

CVE-2019-11135

CVE-2018-12207

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	kernel-2.6.32-754.24.2.el6.src.rpm	121d0d01b36383c386a379af431e6abb697c6d547e3080fae2f887d2a1634dab	ELSA-2024-1831	ol6_i386_latest
	kernel-2.6.32-754.24.2.el6.src.rpm	121d0d01b36383c386a379af431e6abb697c6d547e3080fae2f887d2a1634dab	ELSA-2024-1831	ol6_u10_i386_patch
	kernel-2.6.32-754.24.2.el6.i686.rpm	b421a857cf847405ff702254f9dd7f051cc79fc55f086982bdf4909047aecc66	ELSA-2024-1831	ol6_i386_latest
	kernel-2.6.32-754.24.2.el6.i686.rpm	b421a857cf847405ff702254f9dd7f051cc79fc55f086982bdf4909047aecc66	ELSA-2024-1831	ol6_u10_i386_patch
	kernel-abi-whitelists-2.6.32-754.24.2.el6.noarch.rpm	e2070d07c2ae5062be5788b52843a6227a8d5fc22fd2179e887d0be514501b27	ELSA-2024-1831	ol6_i386_latest
	kernel-abi-whitelists-2.6.32-754.24.2.el6.noarch.rpm	e2070d07c2ae5062be5788b52843a6227a8d5fc22fd2179e887d0be514501b27	ELSA-2024-1831	ol6_u10_i386_patch
	kernel-debug-2.6.32-754.24.2.el6.i686.rpm	f9ead109f8cb79de1b0ae18f2e77033d2c86e85c44e38e9b914f5de8d6bc9371	ELSA-2024-1831	ol6_i386_latest
	kernel-debug-2.6.32-754.24.2.el6.i686.rpm	f9ead109f8cb79de1b0ae18f2e77033d2c86e85c44e38e9b914f5de8d6bc9371	ELSA-2024-1831	ol6_u10_i386_patch
	kernel-debug-devel-2.6.32-754.24.2.el6.i686.rpm	d8ac0bdb5325bc96e723e04612daabda3d9e9e697d772ba86a47ec82c25c5a3c	ELSA-2024-1831	ol6_i386_latest
	kernel-debug-devel-2.6.32-754.24.2.el6.i686.rpm	d8ac0bdb5325bc96e723e04612daabda3d9e9e697d772ba86a47ec82c25c5a3c	ELSA-2024-1831	ol6_u10_i386_patch
	kernel-devel-2.6.32-754.24.2.el6.i686.rpm	feb45fa115901977a752c6e01e8e96ca3e2763d03ac82bd99dc0a745d2757938	ELSA-2024-1831	ol6_i386_latest
	kernel-devel-2.6.32-754.24.2.el6.i686.rpm	feb45fa115901977a752c6e01e8e96ca3e2763d03ac82bd99dc0a745d2757938	ELSA-2024-1831	ol6_u10_i386_patch
	kernel-doc-2.6.32-754.24.2.el6.noarch.rpm	c8094a552a161a2cb4e607adac1748659c374208fa52f0fd9b4849e67d374c6d	ELSA-2024-1831	ol6_i386_latest
	kernel-doc-2.6.32-754.24.2.el6.noarch.rpm	c8094a552a161a2cb4e607adac1748659c374208fa52f0fd9b4849e67d374c6d	ELSA-2024-1831	ol6_u10_i386_patch
	kernel-firmware-2.6.32-754.24.2.el6.noarch.rpm	203d6bb908092aa3a435da81ffd53f4acd7e102f7fb1fb831b6f14d2ee9b96bf	ELSA-2024-1831	ol6_i386_latest
	kernel-firmware-2.6.32-754.24.2.el6.noarch.rpm	203d6bb908092aa3a435da81ffd53f4acd7e102f7fb1fb831b6f14d2ee9b96bf	ELSA-2024-1831	ol6_u10_i386_patch
	kernel-headers-2.6.32-754.24.2.el6.i686.rpm	27a827f39ce1ffd155cb6c3b3c9ae3091441686391307a29f6ee415fbb9e698b	ELSA-2024-1831	ol6_i386_latest
	kernel-headers-2.6.32-754.24.2.el6.i686.rpm	27a827f39ce1ffd155cb6c3b3c9ae3091441686391307a29f6ee415fbb9e698b	ELSA-2024-1831	ol6_u10_i386_patch
	perf-2.6.32-754.24.2.el6.i686.rpm	8f69029086d805b51a799bf4cdd9db005afe455c7c4248cb44c8769229ad1d0d	ELSA-2024-1831	ol6_i386_latest
	perf-2.6.32-754.24.2.el6.i686.rpm	8f69029086d805b51a799bf4cdd9db005afe455c7c4248cb44c8769229ad1d0d	ELSA-2024-1831	ol6_u10_i386_patch
	python-perf-2.6.32-754.24.2.el6.i686.rpm	0392c284e022fd0710144e9f56be6b698c1cef37d31e3e578ae97db317f4fffa	ELSA-2024-1831	ol6_i386_latest
	python-perf-2.6.32-754.24.2.el6.i686.rpm	0392c284e022fd0710144e9f56be6b698c1cef37d31e3e578ae97db317f4fffa	ELSA-2024-1831	ol6_u10_i386_patch
Oracle Linux 6 (x86_64)	kernel-2.6.32-754.24.2.el6.src.rpm	121d0d01b36383c386a379af431e6abb697c6d547e3080fae2f887d2a1634dab	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-2.6.32-754.24.2.el6.src.rpm	121d0d01b36383c386a379af431e6abb697c6d547e3080fae2f887d2a1634dab	ELSA-2024-1831	ol6_x86_64_latest
	kernel-2.6.32-754.24.2.el6.x86_64.rpm	8d348bf1f682b1969bc8fc61dec2750215d2ade464852cd99b80527a06bf8f37	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-2.6.32-754.24.2.el6.x86_64.rpm	8d348bf1f682b1969bc8fc61dec2750215d2ade464852cd99b80527a06bf8f37	ELSA-2024-1831	ol6_x86_64_latest
	kernel-abi-whitelists-2.6.32-754.24.2.el6.noarch.rpm	e2070d07c2ae5062be5788b52843a6227a8d5fc22fd2179e887d0be514501b27	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-abi-whitelists-2.6.32-754.24.2.el6.noarch.rpm	e2070d07c2ae5062be5788b52843a6227a8d5fc22fd2179e887d0be514501b27	ELSA-2024-1831	ol6_x86_64_latest
	kernel-debug-2.6.32-754.24.2.el6.x86_64.rpm	d79cc105f6d40573921c334cea6bd34f1312681ddcdf37ad401cdeef260b9835	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-debug-2.6.32-754.24.2.el6.x86_64.rpm	d79cc105f6d40573921c334cea6bd34f1312681ddcdf37ad401cdeef260b9835	ELSA-2024-1831	ol6_x86_64_latest
	kernel-debug-devel-2.6.32-754.24.2.el6.i686.rpm	d8ac0bdb5325bc96e723e04612daabda3d9e9e697d772ba86a47ec82c25c5a3c	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-debug-devel-2.6.32-754.24.2.el6.i686.rpm	d8ac0bdb5325bc96e723e04612daabda3d9e9e697d772ba86a47ec82c25c5a3c	ELSA-2024-1831	ol6_x86_64_latest
	kernel-debug-devel-2.6.32-754.24.2.el6.x86_64.rpm	eb6f15bf97f39ca1717913c4cd40783db989e5c8645b18d9e637eb0e0458a8df	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-debug-devel-2.6.32-754.24.2.el6.x86_64.rpm	eb6f15bf97f39ca1717913c4cd40783db989e5c8645b18d9e637eb0e0458a8df	ELSA-2024-1831	ol6_x86_64_latest
	kernel-devel-2.6.32-754.24.2.el6.x86_64.rpm	1369c99c8ea80fc8cb0ffad5a989b6cf8508718b172bd586c710b917c5354206	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-devel-2.6.32-754.24.2.el6.x86_64.rpm	1369c99c8ea80fc8cb0ffad5a989b6cf8508718b172bd586c710b917c5354206	ELSA-2024-1831	ol6_x86_64_latest
	kernel-doc-2.6.32-754.24.2.el6.noarch.rpm	c8094a552a161a2cb4e607adac1748659c374208fa52f0fd9b4849e67d374c6d	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-doc-2.6.32-754.24.2.el6.noarch.rpm	c8094a552a161a2cb4e607adac1748659c374208fa52f0fd9b4849e67d374c6d	ELSA-2024-1831	ol6_x86_64_latest
	kernel-firmware-2.6.32-754.24.2.el6.noarch.rpm	203d6bb908092aa3a435da81ffd53f4acd7e102f7fb1fb831b6f14d2ee9b96bf	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-firmware-2.6.32-754.24.2.el6.noarch.rpm	203d6bb908092aa3a435da81ffd53f4acd7e102f7fb1fb831b6f14d2ee9b96bf	ELSA-2024-1831	ol6_x86_64_latest
	kernel-headers-2.6.32-754.24.2.el6.x86_64.rpm	c03093f77dc2dad0a334a5cf5041c903f7cbf18a82e91c7ca3e828348036b8d4	ELSA-2024-1831	ol6_u10_x86_64_patch
	kernel-headers-2.6.32-754.24.2.el6.x86_64.rpm	c03093f77dc2dad0a334a5cf5041c903f7cbf18a82e91c7ca3e828348036b8d4	ELSA-2024-1831	ol6_x86_64_latest
	perf-2.6.32-754.24.2.el6.x86_64.rpm	9c2280352a24efeb2aae1b277337907f580b56aefce63d79d8eab817ae029499	ELSA-2024-1831	ol6_u10_x86_64_patch
	perf-2.6.32-754.24.2.el6.x86_64.rpm	9c2280352a24efeb2aae1b277337907f580b56aefce63d79d8eab817ae029499	ELSA-2024-1831	ol6_x86_64_latest
	python-perf-2.6.32-754.24.2.el6.x86_64.rpm	05cf9be1ceebfd37c79d902b077c8e0c31083c2e43c455ed4807f1ee109bf610	ELSA-2024-1831	ol6_u10_x86_64_patch
	python-perf-2.6.32-754.24.2.el6.x86_64.rpm	05cf9be1ceebfd37c79d902b077c8e0c31083c2e43c455ed4807f1ee109bf610	ELSA-2024-1831	ol6_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team