ELSA-2020-0374

ELSA-2020-0374 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2020-02-05

Description

[3.10.0-1062.12.1.OL7]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]

[3.10.0-1062.12.1]
- [powerpc] powerpc/pseries: Remove confusing warning message (Gustavo Duarte) [1780148 1748306]
- [powerpc] powerpc/pseries: Call H_BLOCK_REMOVE when supported (Gustavo Duarte) [1780148 1748306]
- [powerpc] powerpc/pseries: Read TLB Block Invalidate Characteristics (Gustavo Duarte) [1780148 1748306]
- [scsi] scsi: bnx2fc: Handle scope bits when array returns BUSY or TSF (Nilesh Javali) [1776290 1750577]
- [scsi] scsi: bnx2fc: remove set but not used variables 'task', 'port', 'orig_task' (Nilesh Javali) [1776290 1750577]
- [scsi] scsi: bnx2fc: remove set but not used variables 'lport', 'host' (Nilesh Javali) [1776290 1750577]
- [scsi] scsi: bnx2fc: remove set but not used variable 'fh' (Nilesh Javali) [1776290 1750577]
- [fs] SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write (Leif Sahlberg) [1767621 1764567]

[3.10.0-1062.11.1]
- [tty] TTY: serial_core, add ->install (Kenneth Yin) [1780163 1443152]
- [net] gro: fix use-after-free read in napi_gro_frags() (Paolo Abeni) [1780033 1750810]
- [net] cfg80211: wext: avoid copying malformed SSIDs (Stanislaw Gruszka) [1778631 1778632]
- [fs] userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx (Alex Gladkov) [1777351 1749766]
- [fs] gfs2: Use async glocks for rename (Robert S Peterson) [1777297 1677686]
- [fs] gfs2: create function gfs2_glock_update_hold_time (Robert S Peterson) [1777297 1677686]
- [fs] gfs2: separate holder for rgrps in gfs2_rename (Robert S Peterson) [1777297 1677686]
- [wireless] mwifiex: Fix three heap overflow at parsing element in cfg80211_ap_settings (Stanislaw Gruszka) [1776615 1776616]
- [x86] cpuidle-haltpoll: vcpu hotplug support (Marcelo Tosatti) [1776289 1771849]
- [cpuidle] cpuidle-haltpoll: return -ENODEV on modinit failure (Marcelo Tosatti) [1776289 1756843]
- [wireless] mwifiex: fix possible heap overflow in mwifiex_process_country_ie() (Stanislaw Gruszka) [1776205 1776206]
- [wireless] mwifiex: Fix heap overflow in mmwifiex_process_tdls_action_frame() (Stanislaw Gruszka) [1776156 1776157] {CVE-2019-14901}
- [fs] vfs: Fix EOVERFLOW testing in put_compat_statfs64 (Eric Sandeen) [1775678 1758001]
- [x86] x86/atomic: Fix smp_mb__{before,after}_atomic() (Prarit Bhargava) [1772812 1769569]
- [mm] mm-vmstat-reduce-zone-lock-holding-time-by-proc-pagetypeinfo-fix (Waiman Long) [1770732 1757943]
- [mm] mm, vmstat: reduce zone->lock holding time by /proc/pagetypeinfo (Waiman Long) [1770732 1757943]
- [mm] mm, vmstat: hide /proc/pagetypeinfo from normal users (Waiman Long) [1770732 1757943]
- [md] dm rq: fix handling underlying queue busy (Ming Lei) [1770113 1767482]
- [pci] hv: Use bytes 4 and 5 from instance ID as the PCI domain numbers (Mohammed Gamal) [1766097 1634251]
- [pci] hv: Detect and fix Hyper-V PCI domain number collision (Mohammed Gamal) [1766097 1634251]
- [pci] hv: Serialize the present and eject work items (Mohammed Gamal) [1766097 1634251]
- [netdrv] hv_netvsc: fix network namespace issues with VF support (Mohammed Gamal) [1766093 1741334]
- [netdrv] hv_netvsc: move VF to same namespace as netvsc device (Mohammed Gamal) [1766093 1741334]
- [netdrv] hv_netvsc: set master device (Mohammed Gamal) [1766093 1741334]
- [pci] PCI: hv: Avoid use of hv_pci_dev->pci_slot after freeing it (Mohammed Gamal) [1766089 1737567]

[3.10.0-1062.10.1]
- [net] netfilter: masquerade: don't flush all conntracks if only one address deleted on device (Patrick Talbert) [1779564 1771396]
- [net] netfilter: conntrack: resched in nf_ct_iterate_cleanup (Patrick Talbert) [1779564 1771396]

Related CVEs

CVE-2019-17133

CVE-2019-14895

CVE-2019-14901

CVE-2019-14816

CVE-2019-14898

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-1062.12.1.el7.src.rpm	a41079385df43a500342adb0906b816e91ee55316602e7eac01e1b8bb7f66a60	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1062.12.1.el7.src.rpm	a41079385df43a500342adb0906b816e91ee55316602e7eac01e1b8bb7f66a60	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-1062.12.1.el7.src.rpm	a41079385df43a500342adb0906b816e91ee55316602e7eac01e1b8bb7f66a60	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-3.10.0-1062.12.1.el7.src.rpm	a41079385df43a500342adb0906b816e91ee55316602e7eac01e1b8bb7f66a60	ELSA-2025-1281	ol7_x86_64_optional_latest
	kernel-3.10.0-1062.12.1.el7.src.rpm	a41079385df43a500342adb0906b816e91ee55316602e7eac01e1b8bb7f66a60	ELSA-2025-1281	ol7_x86_64_u7_patch
	bpftool-3.10.0-1062.12.1.el7.x86_64.rpm	fc26cc27be2265374ad7fbca769e6c4ccbba73e71874b419e63a2b55d6e029c6	ELSA-2025-1281	ol7_x86_64_latest
	bpftool-3.10.0-1062.12.1.el7.x86_64.rpm	fc26cc27be2265374ad7fbca769e6c4ccbba73e71874b419e63a2b55d6e029c6	ELSA-2025-1281	ol7_x86_64_latest_archive
	bpftool-3.10.0-1062.12.1.el7.x86_64.rpm	fc26cc27be2265374ad7fbca769e6c4ccbba73e71874b419e63a2b55d6e029c6	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-3.10.0-1062.12.1.el7.x86_64.rpm	cb067dcb9444bc3fb9832cad1ad5bee3654ac2e9b6de485cf7ff1430c4b9e5c2	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1062.12.1.el7.x86_64.rpm	cb067dcb9444bc3fb9832cad1ad5bee3654ac2e9b6de485cf7ff1430c4b9e5c2	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-3.10.0-1062.12.1.el7.x86_64.rpm	cb067dcb9444bc3fb9832cad1ad5bee3654ac2e9b6de485cf7ff1430c4b9e5c2	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-abi-whitelists-3.10.0-1062.12.1.el7.noarch.rpm	60ad27dfe90df8fc6417b9bb4a5056cd793d8ae7a3a489c4ee098b88c3c5b4e4	ELSA-2025-1281	ol7_x86_64_latest
	kernel-abi-whitelists-3.10.0-1062.12.1.el7.noarch.rpm	60ad27dfe90df8fc6417b9bb4a5056cd793d8ae7a3a489c4ee098b88c3c5b4e4	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-abi-whitelists-3.10.0-1062.12.1.el7.noarch.rpm	60ad27dfe90df8fc6417b9bb4a5056cd793d8ae7a3a489c4ee098b88c3c5b4e4	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-debug-3.10.0-1062.12.1.el7.x86_64.rpm	5371809154d393fc8228661b93437e48f1f26779f354467dc2a60ccdda6ae266	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-3.10.0-1062.12.1.el7.x86_64.rpm	5371809154d393fc8228661b93437e48f1f26779f354467dc2a60ccdda6ae266	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-3.10.0-1062.12.1.el7.x86_64.rpm	5371809154d393fc8228661b93437e48f1f26779f354467dc2a60ccdda6ae266	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-debug-devel-3.10.0-1062.12.1.el7.x86_64.rpm	6fc1979bd8216c2523a0c4c9f8eed48078a2cc8cd809d389a7bf90de93b943bc	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-devel-3.10.0-1062.12.1.el7.x86_64.rpm	6fc1979bd8216c2523a0c4c9f8eed48078a2cc8cd809d389a7bf90de93b943bc	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-debug-devel-3.10.0-1062.12.1.el7.x86_64.rpm	6fc1979bd8216c2523a0c4c9f8eed48078a2cc8cd809d389a7bf90de93b943bc	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-devel-3.10.0-1062.12.1.el7.x86_64.rpm	c6424fa80927031c87b85a3fd10db9b549fa4f4a02a76198c155750c82b6182b	ELSA-2025-1281	ol7_x86_64_latest
	kernel-devel-3.10.0-1062.12.1.el7.x86_64.rpm	c6424fa80927031c87b85a3fd10db9b549fa4f4a02a76198c155750c82b6182b	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-devel-3.10.0-1062.12.1.el7.x86_64.rpm	c6424fa80927031c87b85a3fd10db9b549fa4f4a02a76198c155750c82b6182b	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-doc-3.10.0-1062.12.1.el7.noarch.rpm	6f9faf88a041158e25d42e267a0a7da7713ace9428f368cdf7e7e00b01972824	ELSA-2025-1281	ol7_x86_64_latest
	kernel-doc-3.10.0-1062.12.1.el7.noarch.rpm	6f9faf88a041158e25d42e267a0a7da7713ace9428f368cdf7e7e00b01972824	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-doc-3.10.0-1062.12.1.el7.noarch.rpm	6f9faf88a041158e25d42e267a0a7da7713ace9428f368cdf7e7e00b01972824	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-headers-3.10.0-1062.12.1.el7.x86_64.rpm	a5753993bb2d56fb6e8c0319bd8fc16f7d3a4db9bc8d6071ad138d88e637b2ba	ELSA-2025-1281	exadata_dbserver_19.2.11.0.0_x86_64_base
	kernel-headers-3.10.0-1062.12.1.el7.x86_64.rpm	a5753993bb2d56fb6e8c0319bd8fc16f7d3a4db9bc8d6071ad138d88e637b2ba	ELSA-2025-1281	exadata_dbserver_19.2.12.0.0_x86_64_base
	kernel-headers-3.10.0-1062.12.1.el7.x86_64.rpm	a5753993bb2d56fb6e8c0319bd8fc16f7d3a4db9bc8d6071ad138d88e637b2ba	ELSA-2025-1281	exadata_dbserver_19.3.5.0.0_x86_64_base
	kernel-headers-3.10.0-1062.12.1.el7.x86_64.rpm	a5753993bb2d56fb6e8c0319bd8fc16f7d3a4db9bc8d6071ad138d88e637b2ba	ELSA-2025-1281	exadata_dbserver_19.3.6.0.0_x86_64_base
	kernel-headers-3.10.0-1062.12.1.el7.x86_64.rpm	a5753993bb2d56fb6e8c0319bd8fc16f7d3a4db9bc8d6071ad138d88e637b2ba	ELSA-2025-1281	ol7_x86_64_latest
	kernel-headers-3.10.0-1062.12.1.el7.x86_64.rpm	a5753993bb2d56fb6e8c0319bd8fc16f7d3a4db9bc8d6071ad138d88e637b2ba	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-headers-3.10.0-1062.12.1.el7.x86_64.rpm	a5753993bb2d56fb6e8c0319bd8fc16f7d3a4db9bc8d6071ad138d88e637b2ba	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-tools-3.10.0-1062.12.1.el7.x86_64.rpm	e33c9256dbb3ab953a9170b5cae6b00d68824267e424b73e92489d17e9422ad5	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-3.10.0-1062.12.1.el7.x86_64.rpm	e33c9256dbb3ab953a9170b5cae6b00d68824267e424b73e92489d17e9422ad5	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-3.10.0-1062.12.1.el7.x86_64.rpm	e33c9256dbb3ab953a9170b5cae6b00d68824267e424b73e92489d17e9422ad5	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-tools-libs-3.10.0-1062.12.1.el7.x86_64.rpm	1a42020893ebed765f00fb635dc9f9b668049e4f967c1b296c317817ef583311	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-libs-3.10.0-1062.12.1.el7.x86_64.rpm	1a42020893ebed765f00fb635dc9f9b668049e4f967c1b296c317817ef583311	ELSA-2025-1281	ol7_x86_64_latest_archive
	kernel-tools-libs-3.10.0-1062.12.1.el7.x86_64.rpm	1a42020893ebed765f00fb635dc9f9b668049e4f967c1b296c317817ef583311	ELSA-2025-1281	ol7_x86_64_u7_patch
	kernel-tools-libs-devel-3.10.0-1062.12.1.el7.x86_64.rpm	ed5cc68c38937b3ca17b191689ab5f142c9dc19571d07c1350aae1f17020849a	ELSA-2025-1281	ol7_x86_64_optional_archive
	kernel-tools-libs-devel-3.10.0-1062.12.1.el7.x86_64.rpm	ed5cc68c38937b3ca17b191689ab5f142c9dc19571d07c1350aae1f17020849a	ELSA-2025-1281	ol7_x86_64_optional_latest
	perf-3.10.0-1062.12.1.el7.x86_64.rpm	3f3b25a122d264cc5ebba799b11a38ce4dabdd909a89d543e5fd9156e1163a24	ELSA-2025-20019	ol7_x86_64_latest
	perf-3.10.0-1062.12.1.el7.x86_64.rpm	3f3b25a122d264cc5ebba799b11a38ce4dabdd909a89d543e5fd9156e1163a24	ELSA-2025-20019	ol7_x86_64_latest_archive
	perf-3.10.0-1062.12.1.el7.x86_64.rpm	3f3b25a122d264cc5ebba799b11a38ce4dabdd909a89d543e5fd9156e1163a24	ELSA-2025-20019	ol7_x86_64_u7_patch
	python-perf-3.10.0-1062.12.1.el7.x86_64.rpm	e57a3a0e6cbffa39c75cdae7436654f266b2538196b5493cb1a2ecfa5ef5d8b3	ELSA-2025-20019	ol7_x86_64_latest
	python-perf-3.10.0-1062.12.1.el7.x86_64.rpm	e57a3a0e6cbffa39c75cdae7436654f266b2538196b5493cb1a2ecfa5ef5d8b3	ELSA-2025-20019	ol7_x86_64_latest_archive
	python-perf-3.10.0-1062.12.1.el7.x86_64.rpm	e57a3a0e6cbffa39c75cdae7436654f266b2538196b5493cb1a2ecfa5ef5d8b3	ELSA-2025-20019	ol7_x86_64_u7_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team