ELSA-2020-5756

ELSA-2020-5756 - Unbreakable Enterprise kernel security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2020-07-14

Description


[5.4.17-2011.4.4uek]
- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (Sean Christopherson) [Orabug: 31536904]

[5.4.17-2011.4.3uek]
- NFS: replace cross device check in copy_file_range (Olga Kornievskaia) [Orabug: 31507615]
- rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry) [Orabug: 31504052]
- perf/smmuv3: Allow sharing MMIO registers with the SMMU driver (Jean-Philippe Brucker) [Orabug: 31422283]
- perf/smmuv3: use devm_platform_ioremap_resource() to simplify code (YueHaibing) [Orabug: 31422283]
- ACPI/IORT: Fix PMCG node single ID mapping handling (Tuan Phan) [Orabug: 31422283]
- uek-rpm: Increase CONFIG_NODES_SHIFT from 2 to 3 (Dave Kleikamp) [Orabug: 31422283]
- perf: avoid breaking KABI by reusing enum (Dave Kleikamp) [Orabug: 31422283]
- uek-rpm: update aarch64 configs for Ampere eMAG2 (Dave Kleikamp) [Orabug: 31422283]
- perf: arm_dmc620: Update ACPI ID. (Tuan Phan) [Orabug: 31422283]
- perf: arm_dsu: Support ACPI mode. (Tuan Phan) [Orabug: 31422283]
- perf: arm_dsu: Allow IRQ to be shared among devices. (Tuan Phan) [Orabug: 31422283]
- perf: arm_cmn: improve and make it work on 2P. (Tuan Phan) [Orabug: 31422283]
- Perf: arm-cmn: Allow irq to be shared. (Tuan Phan) [Orabug: 31422283]
- BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse) [Orabug: 31422283]
- BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors (James Morse) [Orabug: 31422283]
- BACKPORT: mm/memory-failure: Add memory_failure_queue_kick() (James Morse) [Orabug: 31422283]
- perf: Add ARM DMC-620 PMU driver. (Tuan Phan) [Orabug: 31422283]
- BACKPORT: WIP: perf/arm-cmn: Add ACPI support (Robin Murphy) [Orabug: 31422283]
- BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver (Robin Murphy) [Orabug: 31422283]
- BACKPORT: perf: Add Arm CMN-600 DT binding (Robin Murphy) [Orabug: 31422283]
- net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon) [Orabug: 30984983]
- mm: Fix mremap not considering huge pmd devmap (Fan Yang) [Orabug: 31452396] {CVE-2020-10757} {CVE-2020-10757}

[5.4.17-2011.4.2uek]
- UEK6 compiler warning for /net/rds/ib.c (Sharath Srinivasan) [Orabug: 31489529]
- UEK6 compiler warning for /net/rds/send.c (Sharath Srinivasan) [Orabug: 31489529]
- Fix up two build warnings in the UEK6 GA tree (Jack Vogel) [Orabug: 31489333]
- drivers/scsi/scsi_scan.c Fix the compiler warning. (Sudhakar Panneerselvam) [Orabug: 31489322]
- x86/retpoline: Fix retpoline unwind (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- x86: Change {JMP,CALL}_NOSPEC argument (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- x86: Simplify retpoline declaration (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- x86/speculation: Change STUFF_RSB to work with objtool (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- x86/unwind: Introduce UNWIND_HINT_EMPTY_ASM (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Add support for intra-function calls (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Remove INSN_STACK (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Make handle_insn_ops() unconditional (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Rework allocating stack_ops on decode (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- objtool: UNWIND_HINT_RET_OFFSET should not check registers (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: is_fentry_call() crashes if call has no destination (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Uniquely identify alternative instruction groups (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Remove check preventing branches within alternative (Julien Thierry) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Introduce HINT_RET_OFFSET (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Support multiple stack_op per instruction (Julien Thierry) [Orabug: 31077463] [Orabug: 31489320]

}


Related CVEs


CVE-2020-10711
CVE-2020-0543
CVE-2020-10757
CVE-2020-12655
CVE-2020-12770
CVE-2019-19769

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 7 (aarch64) kernel-uek-5.4.17-2011.4.4.el7uek.src.rpm9ec0b117789ce48eb71f1518a14b7524ELSA-2021-9220
kernel-uek-5.4.17-2011.4.4.el7uek.aarch64.rpm7a1cf95fe660e3dad530159f0394ef77ELSA-2021-9220
kernel-uek-debug-5.4.17-2011.4.4.el7uek.aarch64.rpmb08966ad8bf15092cee1912931d75bd0ELSA-2021-9220
kernel-uek-debug-devel-5.4.17-2011.4.4.el7uek.aarch64.rpm10de7707b8e2674b38b2173df18411f7ELSA-2021-9220
kernel-uek-devel-5.4.17-2011.4.4.el7uek.aarch64.rpm9532405bdbb396090fcd0459d9162d7dELSA-2021-9220
kernel-uek-doc-5.4.17-2011.4.4.el7uek.noarch.rpm276ab6f48cd1e9202222d1108a78156eELSA-2021-9220
kernel-uek-tools-5.4.17-2011.4.4.el7uek.aarch64.rpmf3a96f57c54c05119657119012cb95a0ELSA-2021-9220
kernel-uek-tools-libs-5.4.17-2011.4.4.el7uek.aarch64.rpmb2ab4684b60237f6d00ebd660748a031ELSA-2021-9220
perf-5.4.17-2011.4.4.el7uek.aarch64.rpm8d3231d9e35ca078cc1a639ffb45dc71ELSA-2021-9220
python-perf-5.4.17-2011.4.4.el7uek.aarch64.rpm940a5f0937bec146e92154e00e170108ELSA-2021-9220
Oracle Linux 7 (x86_64) kernel-uek-5.4.17-2011.4.4.el7uek.src.rpm9ec0b117789ce48eb71f1518a14b7524ELSA-2021-9220
kernel-uek-5.4.17-2011.4.4.el7uek.x86_64.rpmbc52a96d6b40544aa5afea1d8065cbccELSA-2021-9220
kernel-uek-debug-5.4.17-2011.4.4.el7uek.x86_64.rpm7e8dec879d5e3bd0807ff26a346c9bc4ELSA-2021-9220
kernel-uek-debug-devel-5.4.17-2011.4.4.el7uek.x86_64.rpm1d3cb361c1ccc0d555e6fab2f6f825c1ELSA-2021-9220
kernel-uek-devel-5.4.17-2011.4.4.el7uek.x86_64.rpm232f1bf8d34dbee719618f84fc5ffce0ELSA-2021-9220
kernel-uek-doc-5.4.17-2011.4.4.el7uek.noarch.rpm276ab6f48cd1e9202222d1108a78156eELSA-2021-9220
kernel-uek-tools-5.4.17-2011.4.4.el7uek.x86_64.rpmc79d5789b1f7b2dc37e7ef259bc145beELSA-2021-9220
Oracle Linux 8 (aarch64) kernel-uek-5.4.17-2011.4.4.el8uek.src.rpm75d78a5f0a65caeaa82a98e75ac00cec-
kernel-uek-5.4.17-2011.4.4.el8uek.aarch64.rpm59523a9cc3d0b5e70cc1d415f6099190-
kernel-uek-debug-5.4.17-2011.4.4.el8uek.aarch64.rpme38b72bd32dbdc2409c8e2281532c8c3-
kernel-uek-debug-devel-5.4.17-2011.4.4.el8uek.aarch64.rpmb38f2b874b2d6bec25aced161016c99d-
kernel-uek-devel-5.4.17-2011.4.4.el8uek.aarch64.rpm8f5027d07a9609505e1b710a619529a2-
kernel-uek-doc-5.4.17-2011.4.4.el8uek.noarch.rpmd029f1c75dd2b482f06b4eff4b888cb0-
Oracle Linux 8 (x86_64) kernel-uek-5.4.17-2011.4.4.el8uek.src.rpm75d78a5f0a65caeaa82a98e75ac00cec-
kernel-uek-5.4.17-2011.4.4.el8uek.x86_64.rpm2f338b5822663729ff8e1e7514e08fcc-
kernel-uek-debug-5.4.17-2011.4.4.el8uek.x86_64.rpma47bf14b6018a18036a04c7827fcabf5-
kernel-uek-debug-devel-5.4.17-2011.4.4.el8uek.x86_64.rpm55f87446d6344d360b5531e1e0906247-
kernel-uek-devel-5.4.17-2011.4.4.el8uek.x86_64.rpm2bba2ee9b666ebec30cfb91ef77d312c-
kernel-uek-doc-5.4.17-2011.4.4.el8uek.noarch.rpmd029f1c75dd2b482f06b4eff4b888cb0-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete