ELSA-2019-4669

ELSA-2019-4669 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2019-05-31

Description

[4.1.12-124.27.2]
- x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju) [Orabug: 29797118]
- vxlan: test dev->flags & IFF_UP before accessing vxlan->dev->dev_addr (Venkat Venkatsubra) [Orabug: 29710939]
- vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (Eric Dumazet) [Orabug: 29710939]
- nvme: allow timed-out ios to retry (James Smart) [Orabug: 29301607]
- rds: Introduce a pool of worker threads for connection management (Hakon Bugge) [Orabug: 29391909]
- rds: Use rds_conn_path cp_wq when applicable (Hakon Bugge) [Orabug: 29391909]
- rds: ib: Implement proper cm_id compare (Hakon Bugge) [Orabug: 29391909]
- Revert 'net/rds: prevent RDS connections using stale ARP entries' (Hakon Bugge) [Orabug: 29391909]
- rds: ib: Flush ARP cache when needed (Hakon Bugge) [Orabug: 29391909]
- rds: Add simple heuristics to determine connect delay (Hakon Bugge) [Orabug: 29391909]
- rds: Fix one-sided connect (Hakon Bugge) [Orabug: 29391909]
- rds: Consolidate and align ftrace related to connection management (Hakon Bugge) [Orabug: 29391909]
- rds: ib: Fix gratuitous ARP storm (Hakon Bugge) [Orabug: 29391909]
- IB/mlx4: Increase the timeout for CM cache (Hakon Bugge) [Orabug: 29391909]
- kvm/speculation: Allow KVM guests to use SSBD even if host does not (Alejandro Jimenez) [Orabug: 29423804]
- x86/speculation: Keep enhanced IBRS on when spec_store_bypass_disable=on is used (Alejandro Jimenez) [Orabug: 29423804]
- x86/speculation: Clean up enhanced IBRS checks in bugs_64.c (Alejandro Jimenez) [Orabug: 29423804]
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings (Andrea Arcangeli) [Orabug: 29510356]
- bnxt_en: Reset device on RX buffer errors. (Michael Chan) [Orabug: 29651238]
- x86/mitigations: Fix the test for Xen PV guest (Boris Ostrovsky) [Orabug: 29774291]
- x86/speculation/mds: Fix verw usage to use memory operand (Kanth Ghatraju) [Orabug: 29791036] {CVE-2018-12127} {CVE-2018-12130}

Related CVEs

CVE-2018-12127

CVE-2018-12130

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.27.2.el6uek.src.rpm	f5e039f1ef9db44332876f0f006d17307ec33e000f395a1826aba8de46f6ed89	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-4.1.12-124.27.2.el6uek.x86_64.rpm	155cd72254808aca8c291a30a34f42e7d03a20a1c705ec9d785a6acd10beaf58	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-debug-4.1.12-124.27.2.el6uek.x86_64.rpm	837ce5a3cd5df686bdc69fc5ed3a1c9d3ad12c95b28582c275fb7788cd5504dd	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-debug-devel-4.1.12-124.27.2.el6uek.x86_64.rpm	3a5d26654dfb0fd1450d06bd1d9b1b46a01802d75da99ea9b144a99f09d7dfcc	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-devel-4.1.12-124.27.2.el6uek.x86_64.rpm	2d7fee1c5feb3458dbfedeb31b658d9b302b96fe3d60cc46f02bdd492c9402f5	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-doc-4.1.12-124.27.2.el6uek.noarch.rpm	91465333114efcd560cf649a95b0003fe70e310d2ac5875c1dc329ace617173a	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
	kernel-uek-firmware-4.1.12-124.27.2.el6uek.noarch.rpm	fadb5d92a57368af600194155c6c321b6f87c05ef0e5f8f36b190830675e66e8	ELSA-2025-20007	ol6_x86_64_UEKR4_archive
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.27.2.el7uek.src.rpm	56b6f0dbcc8af6025fe48ec2fc8b094d081bd52da2f363bea56741db8425fd3b	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-4.1.12-124.27.2.el7uek.x86_64.rpm	cc376b7a62e8c4243dd9f99ee476a19048d59c3b49eff4ad31cfcadbd980d624	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-debug-4.1.12-124.27.2.el7uek.x86_64.rpm	7fb5cb487733d914f91fb6c21680e6d67154a06aa8eba3e106e2332635831230	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-debug-devel-4.1.12-124.27.2.el7uek.x86_64.rpm	3e01dd381e8d2e2b948b46075f17dbdefc8aeb8bd6085bfc77e5859592484bac	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-devel-4.1.12-124.27.2.el7uek.x86_64.rpm	2b64cacb070e4d0c0fd24fc84c3992eb2a7451636577ab36ddeba1646bb746b3	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-doc-4.1.12-124.27.2.el7uek.noarch.rpm	ad0295d01e1756e96ca6c08bcf09a638a44cd1a9589ae63900b058d85c1a298a	ELSA-2025-20190	ol7_x86_64_UEKR4_archive
	kernel-uek-firmware-4.1.12-124.27.2.el7uek.noarch.rpm	c0396e7d8446e5629c5663e74d12c94e4c8feeaeafb690df8dee501ecaefcf2f	ELSA-2025-20007	ol7_x86_64_UEKR4_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team