ELSA-2020-2427

ELSA-2020-2427 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2020-06-10

Description

[4.18.0-193.6.3_2.OL8]
- Oracle Linux certificates (Alexey Petrenko)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]

[4.18.0-193.6.3_2]
- rebuild to enable xt_u32 module (Jiri Benc) [1840800 1840799 1834769 1838190]

[4.18.0-193.6.2_2]
- [documentation] x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
- [documentation] x86/speculation: Add SRBDS vulnerability and mitigation documentation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
- [x86] x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
- [x86] x86/cpu: Add 'table' argument to cpu_matches() (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}
- [x86] x86/cpu: Add a steppings field to struct x86_cpu_id (Josh Poimboeuf) [1827191 1827192] {CVE-2020-0543}

[4.18.0-193.6.1_2]
- [char] tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send() (Steve Best) [1827632 1808048]
- [netdrv] bonding: fix active-backup transition after link failure (Jarod Wilson) [1838477 1819408]
- [netdrv] bonding: fix state transition issue in link monitoring (Jarod Wilson) [1838477 1819408]
- [kernel] sched/fair: Allow a per-CPU kthread waking a task to stack on the same CPU, to fix XFS performance regression (Phil Auld) [1834517 1745111]
- [block] block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Ming Lei) [1835531 1835532] {CVE-2020-12657}
- [kvm] KVM: x86: use raw clock values consistently (Marcelo Tosatti) [1822498 1768622]
- [kvm] KVM: x86: reorganize pvclock_gtod_data members (Marcelo Tosatti) [1822498 1768622]
- [kvm] KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti) [1822498 1768622]

[4.18.0-193.5.1_2]
- [fs] nfs: fix NULL deference in nfs4_get_valid_delegation ('J. Bruce Fields') [1837969 1831553]

[4.18.0-193.4.1_2]
- [bluetooth] Revert 'Bluetooth: btusb: driver to enable the usb-wakeup feature' (Gopal Tiwari) [1827620 1811534]
- [net] netlabel: cope with NULL catmap (Paolo Abeni) [1827249 1827251] {CVE-2020-10711}
- [mm] s390/mm: fix page table upgrade vs 2ndary address mode accesses (Vladis Dronov) [1828153 1828154] {CVE-2020-11884}

[4.18.0-193.3.1_2]
- [kernel] sched/isolation: Allow 'isolcpus=' to skip unknown sub-parameters (Peter Xu) [1832367 1799014]
- [firmware] efi: fix a mistype in comments mentioning efivar_entry_iter_begin() (Vladis Dronov) [1829527 1804417]
- [firmware] efi: add a sanity check to efivar_store_raw() (Vladis Dronov) [1829527 1804417]
- [firmware] efi: fix a race and a buffer overflow while reading efivars via sysfs (Vladis Dronov) [1829527 1804417]
- [net] net/smc: keep vlan_id for SMC-R in smc_listen_work() (Philipp Rudo) [1827631 1796890]

[4.18.0-193.2.1_2]
- [net] vti[6]: fix packet tx through bpf_redirect() in XinY cases (Sabrina Dubroca) [1821375 1795145]
- [net] xfrm interface: fix packet tx through bpf_redirect() (Sabrina Dubroca) [1821375 1795145]
- [net] vti[6]: fix packet tx through bpf_redirect() (Sabrina Dubroca) [1821375 1795145]
- [scripts] redhat: fix modpost.c prerequisites (Frantisek Hrbata) [1828229 1818499]
- [infiniband] IB/core: Avoid deadlock during netlink message handling (Kamal Heib) [1821381 1818986]
- [infiniband] RDMA/core: Support netlink commands in non init_net net namespaces (Kamal Heib) [1821381 1818986]
- [misc] mei: me: add comet point (lake) H device ids (Ken Cox) [1825262 1815355]
- [misc] mei: me: add comet point (lake) LP device ids (Ken Cox) [1825262 1815355]
- [misc] mei: define dma ring buffer sizes for PCH12 HW and newer (Ken Cox) [1825262 1815355]
- [misc] mei: hbm: define dma ring setup protocol (Ken Cox) [1825262 1815355]
- [net] SUNRPC: fix krb5p mount to provide large enough buffer in rq_rcvsize (Steve Dickson) [1826219 1825388]
- [mm] mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa (Rafael Aquini) [1827619 1763878]
- [mm] mm: thp: fix flags for pmd migration when split (Rafael Aquini) [1827619 1763878]
- [mm] mm: thp: relocate flush_cache_range() in migrate_misplaced_transhuge_page() (Rafael Aquini) [1827619 1763878]
- [mm] mm: thp: fix mmu_notifier in migrate_misplaced_transhuge_page() (Rafael Aquini) [1827619 1763878]
- [mm] mm: thp: fix MADV_DONTNEED vs migrate_misplaced_transhuge_page race condition (Rafael Aquini) [1827619 1763878]
- [md] Revert 'dm: always call blk_queue_split() in dm_process_bio()' (Mike Snitzer) [1821382 1820705]

Related CVEs

CVE-2020-12657

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-193.6.3.el8_2.src.rpm	4cc6ff20506e3f7a79c332abc8c0120fc1fff1fe28a2f1a36d40c1d4468e3f6f	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-193.6.3.el8_2.src.rpm	4cc6ff20506e3f7a79c332abc8c0120fc1fff1fe28a2f1a36d40c1d4468e3f6f	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-193.6.3.el8_2.src.rpm	4cc6ff20506e3f7a79c332abc8c0120fc1fff1fe28a2f1a36d40c1d4468e3f6f	-	ol8_aarch64_u2_baseos_patch
	bpftool-4.18.0-193.6.3.el8_2.aarch64.rpm	9b0d9ce5c5a5d2b4741bdbb390f0695ed7ccc482e1c55fc2f9bf175e32d9c44d	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-193.6.3.el8_2.aarch64.rpm	9b0d9ce5c5a5d2b4741bdbb390f0695ed7ccc482e1c55fc2f9bf175e32d9c44d	-	ol8_aarch64_u2_baseos_patch
	kernel-cross-headers-4.18.0-193.6.3.el8_2.aarch64.rpm	ed13f8b1a2774d184ccca15f8f11fd494ca2c75e850032760c4e1529469d9064	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-193.6.3.el8_2.aarch64.rpm	ed13f8b1a2774d184ccca15f8f11fd494ca2c75e850032760c4e1529469d9064	-	ol8_aarch64_u2_baseos_patch
	kernel-headers-4.18.0-193.6.3.el8_2.aarch64.rpm	0ec9395e446dc2530320e5179712d28cc40619a0221e1dbddaf6aae53a082a27	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-193.6.3.el8_2.aarch64.rpm	0ec9395e446dc2530320e5179712d28cc40619a0221e1dbddaf6aae53a082a27	-	ol8_aarch64_u2_baseos_patch
	kernel-tools-4.18.0-193.6.3.el8_2.aarch64.rpm	40b4afd553e9d1b086bcbfa7c17ff2d14c7890448f73f80473adacb25eed8f20	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-193.6.3.el8_2.aarch64.rpm	40b4afd553e9d1b086bcbfa7c17ff2d14c7890448f73f80473adacb25eed8f20	-	ol8_aarch64_u2_baseos_patch
	kernel-tools-libs-4.18.0-193.6.3.el8_2.aarch64.rpm	feb9eabb6d47fc71c52a04d2c2564331843868e77f0aaa07c7718208314cd14b	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-193.6.3.el8_2.aarch64.rpm	feb9eabb6d47fc71c52a04d2c2564331843868e77f0aaa07c7718208314cd14b	-	ol8_aarch64_u2_baseos_patch
	kernel-tools-libs-devel-4.18.0-193.6.3.el8_2.aarch64.rpm	53b94223e3cc8df4ddcb039b3a6ee1807b62c7668dc962c5527039b8d3e48455	-	ol8_aarch64_codeready_builder
	perf-4.18.0-193.6.3.el8_2.aarch64.rpm	38cd61c806cf3deaacb3f8d95479de651ecced48ce80385bf8da32e5c30f23de	-	ol8_aarch64_baseos_latest
	perf-4.18.0-193.6.3.el8_2.aarch64.rpm	38cd61c806cf3deaacb3f8d95479de651ecced48ce80385bf8da32e5c30f23de	-	ol8_aarch64_u2_baseos_patch
	python3-perf-4.18.0-193.6.3.el8_2.aarch64.rpm	18a34b677a1cdf35343c79d72da501a5f5adc0a18ee6ff51c673dfe7ca3a6ae5	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-193.6.3.el8_2.aarch64.rpm	18a34b677a1cdf35343c79d72da501a5f5adc0a18ee6ff51c673dfe7ca3a6ae5	-	ol8_aarch64_u2_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-193.6.3.el8_2.src.rpm	4cc6ff20506e3f7a79c332abc8c0120fc1fff1fe28a2f1a36d40c1d4468e3f6f	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-193.6.3.el8_2.src.rpm	4cc6ff20506e3f7a79c332abc8c0120fc1fff1fe28a2f1a36d40c1d4468e3f6f	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-193.6.3.el8_2.src.rpm	4cc6ff20506e3f7a79c332abc8c0120fc1fff1fe28a2f1a36d40c1d4468e3f6f	-	ol8_x86_64_u2_baseos_patch
	bpftool-4.18.0-193.6.3.el8_2.x86_64.rpm	56ac3d1ea4a3ebb3a471aedea9dbbaeb4a1b3495dc7a85ec9c6b85cfdf67dc34	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-193.6.3.el8_2.x86_64.rpm	56ac3d1ea4a3ebb3a471aedea9dbbaeb4a1b3495dc7a85ec9c6b85cfdf67dc34	-	ol8_x86_64_u2_baseos_patch
	kernel-4.18.0-193.6.3.el8_2.x86_64.rpm	5ca0c7cc3c59972791e3ef146131f621f2be6af9298a5f4d997921887710089f	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-193.6.3.el8_2.x86_64.rpm	5ca0c7cc3c59972791e3ef146131f621f2be6af9298a5f4d997921887710089f	-	ol8_x86_64_u2_baseos_patch
	kernel-abi-whitelists-4.18.0-193.6.3.el8_2.noarch.rpm	53ef96ce7996da65a69340213244ff75b04cd552fff139d29c0ece04dda93f43	-	ol8_x86_64_baseos_latest
	kernel-abi-whitelists-4.18.0-193.6.3.el8_2.noarch.rpm	53ef96ce7996da65a69340213244ff75b04cd552fff139d29c0ece04dda93f43	-	ol8_x86_64_u2_baseos_patch
	kernel-core-4.18.0-193.6.3.el8_2.x86_64.rpm	1e4dc7544e398d0c8a54495cf961538b4fa2e790ed231053afe2c9e3babad34f	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-193.6.3.el8_2.x86_64.rpm	1e4dc7544e398d0c8a54495cf961538b4fa2e790ed231053afe2c9e3babad34f	-	ol8_x86_64_u2_baseos_patch
	kernel-cross-headers-4.18.0-193.6.3.el8_2.x86_64.rpm	2de8cec5bbbcae3d487335cd54a2e8ce280c17aa99c5176377e80291070c94a7	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-193.6.3.el8_2.x86_64.rpm	2de8cec5bbbcae3d487335cd54a2e8ce280c17aa99c5176377e80291070c94a7	-	ol8_x86_64_u2_baseos_patch
	kernel-debug-4.18.0-193.6.3.el8_2.x86_64.rpm	6ddfc67a0cde9d178aed7dafa5fb1ca99947f39c898ad7c9d44871c57e7263ce	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-193.6.3.el8_2.x86_64.rpm	6ddfc67a0cde9d178aed7dafa5fb1ca99947f39c898ad7c9d44871c57e7263ce	-	ol8_x86_64_u2_baseos_patch
	kernel-debug-core-4.18.0-193.6.3.el8_2.x86_64.rpm	5b7c5376cbcc21c7e67bdafad8fc94e0fdfa641ac92f83c9010a9577e237c095	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-193.6.3.el8_2.x86_64.rpm	5b7c5376cbcc21c7e67bdafad8fc94e0fdfa641ac92f83c9010a9577e237c095	-	ol8_x86_64_u2_baseos_patch
	kernel-debug-devel-4.18.0-193.6.3.el8_2.x86_64.rpm	c83b6510973485f598e6ecb929d4a6acc704e6f955b90fe139549de7d8f91f42	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-193.6.3.el8_2.x86_64.rpm	c83b6510973485f598e6ecb929d4a6acc704e6f955b90fe139549de7d8f91f42	-	ol8_x86_64_u2_baseos_patch
	kernel-debug-modules-4.18.0-193.6.3.el8_2.x86_64.rpm	96119d35f6086e76ee815e6518691e6b0e3620fdf5bf018a833d874f58862494	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-193.6.3.el8_2.x86_64.rpm	96119d35f6086e76ee815e6518691e6b0e3620fdf5bf018a833d874f58862494	-	ol8_x86_64_u2_baseos_patch
	kernel-debug-modules-extra-4.18.0-193.6.3.el8_2.x86_64.rpm	0a149132a9cac8dd2188fab92f152bdca4c3dd74f6ba5bbe0568d8b53a06412e	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-193.6.3.el8_2.x86_64.rpm	0a149132a9cac8dd2188fab92f152bdca4c3dd74f6ba5bbe0568d8b53a06412e	-	ol8_x86_64_u2_baseos_patch
	kernel-devel-4.18.0-193.6.3.el8_2.x86_64.rpm	cc27fde5010b2afa0cb92eddf5cac32a0d704d3b4cc782088756d17ca3e41958	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-193.6.3.el8_2.x86_64.rpm	cc27fde5010b2afa0cb92eddf5cac32a0d704d3b4cc782088756d17ca3e41958	-	ol8_x86_64_u2_baseos_patch
	kernel-doc-4.18.0-193.6.3.el8_2.noarch.rpm	98f5950eacfcb63d6167d3f86b7b8ed0be4f171c499246f0a4c0d5c648cffa9d	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-193.6.3.el8_2.noarch.rpm	98f5950eacfcb63d6167d3f86b7b8ed0be4f171c499246f0a4c0d5c648cffa9d	-	ol8_x86_64_u2_baseos_patch
	kernel-headers-4.18.0-193.6.3.el8_2.x86_64.rpm	d2dc3556e539a1466cb099f64cf6b27d9e57f9e1c633cd5936604baf6a8ca1b4	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-193.6.3.el8_2.x86_64.rpm	d2dc3556e539a1466cb099f64cf6b27d9e57f9e1c633cd5936604baf6a8ca1b4	-	ol8_x86_64_u2_baseos_patch
	kernel-modules-4.18.0-193.6.3.el8_2.x86_64.rpm	f3642deb43686cec8f85af65adf2c228293494797224b6cc14ea3878476c9157	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-193.6.3.el8_2.x86_64.rpm	f3642deb43686cec8f85af65adf2c228293494797224b6cc14ea3878476c9157	-	ol8_x86_64_u2_baseos_patch
	kernel-modules-extra-4.18.0-193.6.3.el8_2.x86_64.rpm	a5d69c87f2571dcd34acdf6e0486c0a5d1e8167acb44430e7dbf11723ddf6c33	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-193.6.3.el8_2.x86_64.rpm	a5d69c87f2571dcd34acdf6e0486c0a5d1e8167acb44430e7dbf11723ddf6c33	-	ol8_x86_64_u2_baseos_patch
	kernel-tools-4.18.0-193.6.3.el8_2.x86_64.rpm	c3d0bccdea61d445b1610eace34145ea5a1ee980a6afde8eb1d5f4a958905316	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-193.6.3.el8_2.x86_64.rpm	c3d0bccdea61d445b1610eace34145ea5a1ee980a6afde8eb1d5f4a958905316	-	ol8_x86_64_u2_baseos_patch
	kernel-tools-libs-4.18.0-193.6.3.el8_2.x86_64.rpm	54800a7384fa27c1d9806ac7f9954e25df09b80bf9236f443323d1b4dbab1d03	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-193.6.3.el8_2.x86_64.rpm	54800a7384fa27c1d9806ac7f9954e25df09b80bf9236f443323d1b4dbab1d03	-	ol8_x86_64_u2_baseos_patch
	kernel-tools-libs-devel-4.18.0-193.6.3.el8_2.x86_64.rpm	3b8114675bd57cb55f4095d08a027915531d633e2c304d7582631c5facb5030b	-	ol8_x86_64_codeready_builder
	perf-4.18.0-193.6.3.el8_2.x86_64.rpm	5d1636d198734e3900c909754e8d14107f6118eb21dbdea459dc797464857d38	-	ol8_x86_64_baseos_latest
	perf-4.18.0-193.6.3.el8_2.x86_64.rpm	5d1636d198734e3900c909754e8d14107f6118eb21dbdea459dc797464857d38	-	ol8_x86_64_u2_baseos_patch
	python3-perf-4.18.0-193.6.3.el8_2.x86_64.rpm	5a41fd98deaa3418843ed9a9991e0ce976cb58894d63c57328dbf12bdb342f25	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-193.6.3.el8_2.x86_64.rpm	5a41fd98deaa3418843ed9a9991e0ce976cb58894d63c57328dbf12bdb342f25	-	ol8_x86_64_u2_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team