ELSA-2020-5756

ELSA-2020-5756 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2020-07-14

Description

[5.4.17-2011.4.4uek]
- KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (Sean Christopherson) [Orabug: 31536904]

[5.4.17-2011.4.3uek]
- NFS: replace cross device check in copy_file_range (Olga Kornievskaia) [Orabug: 31507615]
- rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry) [Orabug: 31504052]
- perf/smmuv3: Allow sharing MMIO registers with the SMMU driver (Jean-Philippe Brucker) [Orabug: 31422283]
- perf/smmuv3: use devm_platform_ioremap_resource() to simplify code (YueHaibing) [Orabug: 31422283]
- ACPI/IORT: Fix PMCG node single ID mapping handling (Tuan Phan) [Orabug: 31422283]
- uek-rpm: Increase CONFIG_NODES_SHIFT from 2 to 3 (Dave Kleikamp) [Orabug: 31422283]
- perf: avoid breaking KABI by reusing enum (Dave Kleikamp) [Orabug: 31422283]
- uek-rpm: update aarch64 configs for Ampere eMAG2 (Dave Kleikamp) [Orabug: 31422283]
- perf: arm_dmc620: Update ACPI ID. (Tuan Phan) [Orabug: 31422283]
- perf: arm_dsu: Support ACPI mode. (Tuan Phan) [Orabug: 31422283]
- perf: arm_dsu: Allow IRQ to be shared among devices. (Tuan Phan) [Orabug: 31422283]
- perf: arm_cmn: improve and make it work on 2P. (Tuan Phan) [Orabug: 31422283]
- Perf: arm-cmn: Allow irq to be shared. (Tuan Phan) [Orabug: 31422283]
- BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse) [Orabug: 31422283]
- BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors (James Morse) [Orabug: 31422283]
- BACKPORT: mm/memory-failure: Add memory_failure_queue_kick() (James Morse) [Orabug: 31422283]
- perf: Add ARM DMC-620 PMU driver. (Tuan Phan) [Orabug: 31422283]
- BACKPORT: WIP: perf/arm-cmn: Add ACPI support (Robin Murphy) [Orabug: 31422283]
- BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver (Robin Murphy) [Orabug: 31422283]
- BACKPORT: perf: Add Arm CMN-600 DT binding (Robin Murphy) [Orabug: 31422283]
- net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon) [Orabug: 30984983]
- mm: Fix mremap not considering huge pmd devmap (Fan Yang) [Orabug: 31452396] {CVE-2020-10757} {CVE-2020-10757}

[5.4.17-2011.4.2uek]
- UEK6 compiler warning for /net/rds/ib.c (Sharath Srinivasan) [Orabug: 31489529]
- UEK6 compiler warning for /net/rds/send.c (Sharath Srinivasan) [Orabug: 31489529]
- Fix up two build warnings in the UEK6 GA tree (Jack Vogel) [Orabug: 31489333]
- drivers/scsi/scsi_scan.c Fix the compiler warning. (Sudhakar Panneerselvam) [Orabug: 31489322]
- x86/retpoline: Fix retpoline unwind (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- x86: Change {JMP,CALL}_NOSPEC argument (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- x86: Simplify retpoline declaration (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- x86/speculation: Change STUFF_RSB to work with objtool (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- x86/unwind: Introduce UNWIND_HINT_EMPTY_ASM (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Add support for intra-function calls (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Remove INSN_STACK (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Make handle_insn_ops() unconditional (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Rework allocating stack_ops on decode (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- objtool: UNWIND_HINT_RET_OFFSET should not check registers (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: is_fentry_call() crashes if call has no destination (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Uniquely identify alternative instruction groups (Alexandre Chartre) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Remove check preventing branches within alternative (Julien Thierry) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Introduce HINT_RET_OFFSET (Peter Zijlstra) [Orabug: 31077463] [Orabug: 31489320]
- objtool: Support multiple stack_op per instruction (Julien Thierry) [Orabug: 31077463] [Orabug: 31489320]

}

Related CVEs

CVE-2020-0543

CVE-2020-10757

CVE-2020-10711

CVE-2020-12655

CVE-2020-12770

CVE-2019-19769

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	kernel-uek-5.4.17-2011.4.4.el7uek.src.rpm	c3cb0663853cb2399915dcd1c051420b99f09ecec75906749f89a0ff678cb7f4	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-5.4.17-2011.4.4.el7uek.aarch64.rpm	fc9ae5b56f412753fedb457bc9265104b1e04a283d095b34cd6f4a5d30f89dc3	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-debug-5.4.17-2011.4.4.el7uek.aarch64.rpm	1fcb66971292912931853167b4c963527a42a410dc2e1abb4bed0475364cca6e	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-debug-devel-5.4.17-2011.4.4.el7uek.aarch64.rpm	5362772e3813b8ce83c0e471f12700c8ccd2dbc3a720c14c6952825fce89f444	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-devel-5.4.17-2011.4.4.el7uek.aarch64.rpm	87c6207e702bd8d44f71a46add6ec776474370f5212ed7afdf18062f733d56df	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-doc-5.4.17-2011.4.4.el7uek.noarch.rpm	b706cceec2c0d35c4760fda456a94e72cb663157671ab01cc5f42b6c75388017	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-tools-5.4.17-2011.4.4.el7uek.aarch64.rpm	fd680d2e9d5d880979d1644a4c19faa14c3913666b341dbb8c0735b80b999434	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-tools-libs-5.4.17-2011.4.4.el7uek.aarch64.rpm	620a80b2c359743ed9adf725fd74e9cf5bd2b4a4e69eca600f6a6e563e48a5c3	ELSA-2025-20019	ol7_aarch64_UEKR6
	perf-5.4.17-2011.4.4.el7uek.aarch64.rpm	5a7edd4e34fc04de549eb79cc19bb2e0f6c8d2df9fe27459dd348b48ba351530	ELSA-2025-20019	ol7_aarch64_UEKR6
	python-perf-5.4.17-2011.4.4.el7uek.aarch64.rpm	a47dd9b2d868fe71d4d86ed19de1e0eb8855867977b076421adea40144aea75e	ELSA-2025-20019	ol7_aarch64_UEKR6
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2011.4.4.el7uek.src.rpm	c3cb0663853cb2399915dcd1c051420b99f09ecec75906749f89a0ff678cb7f4	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-5.4.17-2011.4.4.el7uek.x86_64.rpm	b96d9d36deba0598c1f09922a6d729c3f0c584ee3f3ed8664b9d43f2602a932b	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2011.4.4.el7uek.x86_64.rpm	1cbbb8de5eab78cf7849187abca161140512a51823e86b7d992397d80c40571e	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2011.4.4.el7uek.x86_64.rpm	da2f403f949b346313c4efd8b4281109d053d45b7c2a5bf7c6fb7adcaca5cdc5	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2011.4.4.el7uek.x86_64.rpm	1954209f51a49b50ec9c0ca80f16a10788c2d004f97ae23f96105f9d08b48f6f	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2011.4.4.el7uek.noarch.rpm	b706cceec2c0d35c4760fda456a94e72cb663157671ab01cc5f42b6c75388017	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-tools-5.4.17-2011.4.4.el7uek.x86_64.rpm	86490676f1190db208beeee3d22e0994e82133955a63ca8b7acc2e1093485bfd	ELSA-2025-20190	ol7_x86_64_UEKR6
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2011.4.4.el8uek.src.rpm	2579fa4edc3286085dbd751121a65aafecfb352a64e04c07f487d809da9d9ac3	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2011.4.4.el8uek.aarch64.rpm	31ec328f34f468df7e6c63cc047e3458c77a1afab7aebf3d0d9f555b8a59b366	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2011.4.4.el8uek.aarch64.rpm	31ec328f34f468df7e6c63cc047e3458c77a1afab7aebf3d0d9f555b8a59b366	-	ol8_aarch64_u2_baseos_patch
	kernel-uek-debug-5.4.17-2011.4.4.el8uek.aarch64.rpm	9c8371cbe1bca40ba6c1a9bb403291e16deccab63a2280577a61615048ca7812	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-5.4.17-2011.4.4.el8uek.aarch64.rpm	9c8371cbe1bca40ba6c1a9bb403291e16deccab63a2280577a61615048ca7812	-	ol8_aarch64_u2_baseos_patch
	kernel-uek-debug-devel-5.4.17-2011.4.4.el8uek.aarch64.rpm	7665ccd238c36c8585a5a6ad63d4f2a1df445a423ddeb6b6e72969b389905f05	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-devel-5.4.17-2011.4.4.el8uek.aarch64.rpm	7665ccd238c36c8585a5a6ad63d4f2a1df445a423ddeb6b6e72969b389905f05	-	ol8_aarch64_u2_baseos_patch
	kernel-uek-devel-5.4.17-2011.4.4.el8uek.aarch64.rpm	741ec127652689de3d56909e463e060efe37fa18f588028ad6c617602de85e5a	-	ol8_aarch64_baseos_latest
	kernel-uek-devel-5.4.17-2011.4.4.el8uek.aarch64.rpm	741ec127652689de3d56909e463e060efe37fa18f588028ad6c617602de85e5a	-	ol8_aarch64_u2_baseos_patch
	kernel-uek-doc-5.4.17-2011.4.4.el8uek.noarch.rpm	61e87f57b3a099219f7c016ea8decbc002336ef65759c6e0c1d47c0bac3454bd	-	ol8_aarch64_baseos_latest
	kernel-uek-doc-5.4.17-2011.4.4.el8uek.noarch.rpm	61e87f57b3a099219f7c016ea8decbc002336ef65759c6e0c1d47c0bac3454bd	-	ol8_aarch64_u2_baseos_patch
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2011.4.4.el8uek.src.rpm	2579fa4edc3286085dbd751121a65aafecfb352a64e04c07f487d809da9d9ac3	-	ol8_x86_64_UEKR6
	kernel-uek-5.4.17-2011.4.4.el8uek.src.rpm	2579fa4edc3286085dbd751121a65aafecfb352a64e04c07f487d809da9d9ac3	-	ol8_x86_64_baseos_latest
	kernel-uek-5.4.17-2011.4.4.el8uek.src.rpm	2579fa4edc3286085dbd751121a65aafecfb352a64e04c07f487d809da9d9ac3	-	ol8_x86_64_u2_baseos_patch
	kernel-uek-5.4.17-2011.4.4.el8uek.x86_64.rpm	0da0521c0b1bc1a29b5459df2d83649232c1a174cc5583732319c47d8c8c542d	-	ol8_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2011.4.4.el8uek.x86_64.rpm	f271d313e77ece102963bdcc13989f847be22ea882b197cde205e97257aac594	-	ol8_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2011.4.4.el8uek.x86_64.rpm	4cbad8c7bb67aa6a552ab5171579700fa375540b2d18d0c688f01fb9224f79b3	-	ol8_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2011.4.4.el8uek.x86_64.rpm	9fd1bcc7bffe9ddb9fd497a336409d8d948a03f394e647b36d2956b1c379543c	-	ol8_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2011.4.4.el8uek.noarch.rpm	61e87f57b3a099219f7c016ea8decbc002336ef65759c6e0c1d47c0bac3454bd	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team