Stay Connected:

ELSA-2019-4836

ELSA-2019-4836 - Unbreakable Enterprise kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2019-11-12

Description


[4.14.35-1902.7.3]
- rds: Rename rds_send_ping to rds_send_hs_ping (Hakon Bugge) [Orabug: 30418043]
- rds: Use {READ,WRITE}_ONCE for heartbeat start and state (Hakon Bugge) [Orabug: 30418043]
- rds: Change heartbeat params from module params to sysctl (Hakon Bugge) [Orabug: 30418043]
- rds: Fix and augment probe counters (Hakon Bugge) [Orabug: 30418043]
- rds: Introduce heartbeat interval (Hakon Bugge) [Orabug: 30418043]
- rds: Fix heartbeat (Hakon Bugge) [Orabug: 30418043]
- kexec: generate VMCOREINFO for modules (Isaac Chen) [Orabug: 30464386]
- rds: RDS does not flush IPv6 neighbor cache (Ka-Cheong Poon) [Orabug: 30283690]
- kvm: x86: mmu: Recovery of shattered NX large pages (Junaid Shahid) [Orabug: 29967630] {CVE-2018-12207}
- kvm: Add helper function for creating VM worker threads (Junaid Shahid) [Orabug: 29967630] {CVE-2018-12207}
- kvm: mmu: ITLB_MULTIHIT mitigation (Paolo Bonzini) [Orabug: 29967630] {CVE-2018-12207}
- x86: Add ITLB_MULTIHIT bug infrastructure (Pawan Gupta) [Orabug: 29967630] {CVE-2018-12207}
- KVM: x86: remove now unneeded hugepage gfn adjustment (Paolo Bonzini) [Orabug: 29967630] {CVE-2018-12207}
- KVM: x86: make FNAME(fetch) and __direct_map more similar (Paolo Bonzini) [Orabug: 29967630] {CVE-2018-12207}
- kvm: x86: Do not release the page inside mmu_set_spte() (Junaid Shahid) [Orabug: 29967630] {CVE-2018-12207}
- kvm: Convert kvm_lock to a mutex (Junaid Shahid) [Orabug: 29967630] {CVE-2018-12207}
- x86/tsx: Add config options to set tsx=on|off|auto (Michal Hocko) [Orabug: 30419234] {CVE-2019-11135}
- x86/speculation/taa: Add documentation for TSX Async Abort (Pawan Gupta) [Orabug: 30419234] {CVE-2019-11135}
- x86/tsx: Add 'auto' option to the tsx= cmdline parameter (Pawan Gupta) [Orabug: 30419234] {CVE-2019-11135}
- kvm/x86: Export MDS_NO=0 to guests when TSX is enabled (Pawan Gupta) [Orabug: 30419234] {CVE-2019-11135}
- x86/speculation/taa: Add sysfs reporting for TSX Async Abort (Pawan Gupta) [Orabug: 30419234] {CVE-2019-11135}
- x86/speculation/taa: Add mitigation for TSX Async Abort (Pawan Gupta) [Orabug: 30419234] {CVE-2019-11135}
- x86/cpu: Add a 'tsx=' cmdline option with TSX disabled by default (Pawan Gupta) [Orabug: 30419234] {CVE-2019-11135}
- x86/cpu: Add a helper function x86_read_arch_cap_msr() (Pawan Gupta) [Orabug: 30419234] {CVE-2019-11135}
- x86/msr: Add the IA32_TSX_CTRL MSR (Pawan Gupta) [Orabug: 30419234] {CVE-2019-11135}

[4.14.35-1902.7.2]
- floppy: fix div-by-zero in setup_format_params (Denis Efremov) [Orabug: 30447842] {CVE-2019-14284}
- perfutil: Warn when exceeding MAX_NR_CPUS in cpumap (Kyle Meyer) [Orabug: 30441330]
- perf header: Replace MAX_NR_CPUS with cpu__max_cpu() (Kyle Meyer) [Orabug: 30441330]
- perf machine: Replace MAX_NR_CPUS with perf_env::nr_cpus_online (Kyle Meyer) [Orabug: 30441330]
- perf session: Replace MAX_NR_CPUS with perf_env::nr_cpus_online (Kyle Meyer) [Orabug: 30441330]
- perf stat: Replace MAX_NR_CPUS with cpu__max_cpu() (Kyle Meyer) [Orabug: 30441330]
- perf svghelper: Replace MAX_NR_CPUS with perf_env::nr_cpus_online (Kyle Meyer) [Orabug: 30441330]
- perf timechart: Refactor svg_build_topology_map() (Kyle Meyer) [Orabug: 30441330]
- perf tools: Increase MAX_NR_CPUS and MAX_CACHES (Kyle Meyer) [Orabug: 30441330]
- x86/boot/64: Round memory hole size up to next PMD page (Steve Wahl) [Orabug: 30441300]
- x86/boot/64: Make level2_kernel_pgt pages invalid outside kernel area (Steve Wahl) [Orabug: 30441300]
- ACPICA: Increase total number of possible Owner IDs (Bob Moore) [Orabug: 30448814]

[4.14.35-1902.7.1]
- tcp: fix tcp_rtx_queue_tail in case of empty retransmit queue (Tim Froidcoeur) [Orabug: 30331228]
- tcp: be more careful in tcp_fragment() (Eric Dumazet) [Orabug: 30331228]
- tcp: refine memory limit test in tcp_fragment() (Eric Dumazet) [Orabug: 30331228]
- scsi: mpt3sas: Bump mpt3sas driver version to 32.100.00.00 (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Fix module parameter max_msix_vectors (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Use Component img header to get Package ver (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Fail release cmnd if diag buffer is released (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Add app owned flag support for diag buffer (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Reuse diag buffer allocated at load time (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: clear release bit when buffer reregistered (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Maintain owner of buffer through UniqueID (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Free diag buffer without any status check (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Fix clear pending bit in ioctl status (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Display message before releasing diag buffer (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Register trace buffer based on NVDATA settings (Sreekanth Reddy) [Orabug: 30376510]
- scsi: mpt3sas: Update driver version to 31.100.00.00 (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Run SAS DEVICE STATUS CHANGE EVENT from ISR (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Reduce the performance drop (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Handle fault during HBA initialization (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Add sysfs to know supported features (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Support MEMORY MOVE Tool box command (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Allow ioctls to blocked access status NVMe (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Enumerate SES of a managed PCIe switch (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Update MPI headers to 2.6.8 spec (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Gracefully handle online firmware update (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: memset request frame before reusing (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Add support for PCIe Lane margin (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: support target smid for [abort|query] task (Minwoo Im) [Orabug: 30299961]
- scsi: mpt3sas: clean up a couple sizeof() uses (Dan Carpenter) [Orabug: 30299961]
- scsi: mpt3sas: Fix msix load balance on and off settings (Sreekanth Reddy) [Orabug: 30299961]
- scsi: mpt3sas: Determine smp affinity on per HBA basis (Sreekanth Reddy) [Orabug: 30299961]
- scsi: mpt3sas: Use configured PCIe link speed, not max (Sreekanth Reddy) [Orabug: 30299961]
- scsi: mpt3sas: Remove CPU arch check to determine perf_mode (Sreekanth Reddy) [Orabug: 30299961]
- scsi: mpt3sas: use DEVICE_ATTR_{RO, RW} (Tomas Henzl) [Orabug: 30299961]
- scsi: mpt3sas: make driver options visible in sys (Tomas Henzl) [Orabug: 30299961]
- scsi: mpt3sas: Mark expected switch fall-through (Gustavo A. R. Silva) [Orabug: 30299961]
- scsi: mpt3sas: Update driver version to 29.100.00.00 (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Introduce perf_mode module parameter (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Enable interrupt coalescing on high iops (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Affinity high iops queues IRQs to local node (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: save and use MSI-X index for posting RD (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Use high iops queues under some circumstances (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: change _base_get_msix_index prototype (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Add flag high_iops_queues (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Add Atomic RequestDescriptor support on Aero (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: function pointers of request descriptor (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() (Gen Zhang) [Orabug: 30299961]
- scsi: mpt3sas: fix indentation issue (Colin Ian King) [Orabug: 30299961]
- scsi: mpt3sas: Fix kernel panic during expander reset (Sreekanth Reddy) [Orabug: 30299961]
- scsi: mpt3sas: Update mpt3sas driver version to 28.100.00.00 (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Improve the threshold value and introduce module param (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Load balance to improve performance and avoid soft lockups (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Irq poll to avoid CPU hard lockups (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: simplify interrupt handler (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Fix typo in request_desript_type (Suganath Prabu) [Orabug: 30299961]
- scsi: mpt3sas: Add missing breaks in switch statements (Gustavo A. R. Silva) [Orabug: 30299961]
- scsi: mpt3sas: Update driver version to 27.102.00.00 (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Add support for ATLAS PCIe switch (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Add support for NVMe Switch Adapter (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: Rename mpi endpoint device ID macro. (Suganath Prabu S) [Orabug: 30299961]
- scsi: mpt3sas: mpt3sas_scsih: Mark expected switch fall-through (Gustavo A. R. Silva) [Orabug: 30299961]

[4.14.35-1902.7.0]
- rds: fix uninteneded increase of rds_rdma:pool->max_items_soft (Manjunath Patil) [Orabug: 30397933]
- ACPI / APEI: Fix parsing HEST that includes Deferred Machine Check subtable (Yazen Ghannam) [Orabug: 30385327]
- rds: add ibmr to busy_list in flush code path (Manjunath Patil) [Orabug: 30383090]
- net-sysfs: Fix mem leak in netdev_register_kobject (YueHaibing) [Orabug: 30350262] {CVE-2019-15916}
- kernel-uek.spec: defuse a memory bomb in xargs (Lukas Lipinsky) [Orabug: 30339974]
- xen-netfront: do not use ~0U as error return value for xennet_fill_frags() (Dongli Zhang) [Orabug: 30395404]


Related CVEs


CVE-2019-11135
CVE-2019-14284
CVE-2019-15916
CVE-2018-12207

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 7 (aarch64) kernel-uek-4.14.35-1902.7.3.el7uek.src.rpm6b7b00e2ed305a536336a1a469eb760012e7a744f126e2832faf5eb57c281479ELSA-2025-20190ol7_aarch64_latest
kernel-uek-4.14.35-1902.7.3.el7uek.src.rpm6b7b00e2ed305a536336a1a469eb760012e7a744f126e2832faf5eb57c281479ELSA-2025-20190ol7_aarch64_u7_patch
kernel-uek-4.14.35-1902.7.3.el7uek.aarch64.rpm01810bf013a3cbe9129fe059a3f31228e6c1f4853686e16924a504a72d4b10a5ELSA-2025-20190ol7_aarch64_latest
kernel-uek-4.14.35-1902.7.3.el7uek.aarch64.rpm01810bf013a3cbe9129fe059a3f31228e6c1f4853686e16924a504a72d4b10a5ELSA-2025-20190ol7_aarch64_u7_patch
kernel-uek-debug-4.14.35-1902.7.3.el7uek.aarch64.rpmf9ccbf2e58bfd958763671a58b28a9a4a3fbb2a0b9d27085037316af3327d73eELSA-2025-20190ol7_aarch64_latest
kernel-uek-debug-4.14.35-1902.7.3.el7uek.aarch64.rpmf9ccbf2e58bfd958763671a58b28a9a4a3fbb2a0b9d27085037316af3327d73eELSA-2025-20190ol7_aarch64_u7_patch
kernel-uek-debug-devel-4.14.35-1902.7.3.el7uek.aarch64.rpm74bc7b6e202d733f9dbe7c5f34e21e7ab77b976b6d30451ab32b023504e4ad6cELSA-2025-20190ol7_aarch64_latest
kernel-uek-debug-devel-4.14.35-1902.7.3.el7uek.aarch64.rpm74bc7b6e202d733f9dbe7c5f34e21e7ab77b976b6d30451ab32b023504e4ad6cELSA-2025-20190ol7_aarch64_u7_patch
kernel-uek-devel-4.14.35-1902.7.3.el7uek.aarch64.rpm0076fec9c658a0b69fdda941ed6cfaf31562379e8a3154d8f54ec672bd736142ELSA-2025-20190ol7_aarch64_latest
kernel-uek-devel-4.14.35-1902.7.3.el7uek.aarch64.rpm0076fec9c658a0b69fdda941ed6cfaf31562379e8a3154d8f54ec672bd736142ELSA-2025-20190ol7_aarch64_u7_patch
kernel-uek-headers-4.14.35-1902.7.3.el7uek.aarch64.rpma8e703c29c3d78f24c1cc7516ee021af7013c61b1bc37db30505305ca9c87d41ELBA-2025-20014ol7_aarch64_latest
kernel-uek-headers-4.14.35-1902.7.3.el7uek.aarch64.rpma8e703c29c3d78f24c1cc7516ee021af7013c61b1bc37db30505305ca9c87d41ELBA-2025-20014ol7_aarch64_u7_patch
kernel-uek-tools-4.14.35-1902.7.3.el7uek.aarch64.rpmc0d762992e23e484cf6be3a38aab475086c5ac805679f2e25671d70f62a5d3feELSA-2025-20190ol7_aarch64_latest
kernel-uek-tools-4.14.35-1902.7.3.el7uek.aarch64.rpmc0d762992e23e484cf6be3a38aab475086c5ac805679f2e25671d70f62a5d3feELSA-2025-20190ol7_aarch64_u7_patch
kernel-uek-tools-libs-4.14.35-1902.7.3.el7uek.aarch64.rpm6488346229ea932c7f2a1ed04ae150d3d0c0aaaaa6b8fdae1f36d36e15697845ELSA-2025-20019ol7_aarch64_latest
kernel-uek-tools-libs-4.14.35-1902.7.3.el7uek.aarch64.rpm6488346229ea932c7f2a1ed04ae150d3d0c0aaaaa6b8fdae1f36d36e15697845ELSA-2025-20019ol7_aarch64_u7_patch
kernel-uek-tools-libs-devel-4.14.35-1902.7.3.el7uek.aarch64.rpm14e03b8194c31b82cf4cc450af0fdb964e8f73d98dbc381309160dafff05c8f8ELBA-2025-20014ol7_aarch64_latest
kernel-uek-tools-libs-devel-4.14.35-1902.7.3.el7uek.aarch64.rpm14e03b8194c31b82cf4cc450af0fdb964e8f73d98dbc381309160dafff05c8f8ELBA-2025-20014ol7_aarch64_u7_patch
perf-4.14.35-1902.7.3.el7uek.aarch64.rpm7099d1997bb82559d35de1db1f22abf4d5220ee93e5c4f469ee680a7954f64c4ELSA-2025-20019ol7_aarch64_latest
perf-4.14.35-1902.7.3.el7uek.aarch64.rpm7099d1997bb82559d35de1db1f22abf4d5220ee93e5c4f469ee680a7954f64c4ELSA-2025-20019ol7_aarch64_u7_patch
python-perf-4.14.35-1902.7.3.el7uek.aarch64.rpm8d52d981881e0cd1ac003c32ce48e223c78601682ac039ca49ad774404d94229ELSA-2025-20019ol7_aarch64_latest
python-perf-4.14.35-1902.7.3.el7uek.aarch64.rpm8d52d981881e0cd1ac003c32ce48e223c78601682ac039ca49ad774404d94229ELSA-2025-20019ol7_aarch64_u7_patch
Oracle Linux 7 (x86_64) kernel-uek-4.14.35-1902.7.3.el7uek.src.rpm6b7b00e2ed305a536336a1a469eb760012e7a744f126e2832faf5eb57c281479ELSA-2025-20190ol7_x86_64_UEKR5_archive
kernel-uek-4.14.35-1902.7.3.el7uek.x86_64.rpm1a25af1027f5920dfaa33ed5baff3433f99e4ea68100b88f526ad2943f087cedELSA-2025-20190ol7_x86_64_UEKR5_archive
kernel-uek-debug-4.14.35-1902.7.3.el7uek.x86_64.rpmc144585dea0b3f7d2dccac989846b1fc0dcc0122d30f90e2b9807f5f05017ef8ELSA-2025-20190ol7_x86_64_UEKR5_archive
kernel-uek-debug-devel-4.14.35-1902.7.3.el7uek.x86_64.rpm7c9dc96e3fc94fbfefbf47fcb31e038c1257c623ce70ddb474c5fd81e529a962ELSA-2025-20190ol7_x86_64_UEKR5_archive
kernel-uek-devel-4.14.35-1902.7.3.el7uek.x86_64.rpmf9785bf56d64d82d4f86310574b0d4cf64cd43a5edfe2156d1461a08ec8891cbELSA-2025-20190ol7_x86_64_UEKR5_archive
kernel-uek-doc-4.14.35-1902.7.3.el7uek.noarch.rpmeb6657e846ff2d01be21ca403a4803f87b20f49d7f6c0cff14b1f514b67dd3a2ELSA-2025-20190ol7_x86_64_UEKR5_archive
kernel-uek-tools-4.14.35-1902.7.3.el7uek.x86_64.rpme33499fff646b28db10ab2f6974e19475fd1286e9abe37943ee4914e9b9f6716ELSA-2025-20190ol7_x86_64_UEKR5_archive



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights