ELSA-2021-2168

ELSA-2021-2168 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-06-02

Description

[4.18.0-305.3.1_4.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-305.3.1_4]
- Revert 'uio: use request_threaded_irq instead' (Vitaly Kuznetsov) [1952952 1946644]
- drm/ast: Set format registers in primary plane's update (Lyude Paul) [1952900 1923857]
- net/sched: act_ct: clear post_ct if doing ct_clear (Marcelo Ricardo Leitner) [1956458 1941889]
- md/raid1: properly indicate failure when ending a failed write request (Nigel Croxon) [1955188 1954588]
- nitro_enclaves: Fix stale file descriptors on failed usercopy (Vitaly Kuznetsov) [1956379 1953717]

[4.18.0-305.2.1_4]
- net/mlx5e: Allow to match on MPLS parameters only for MPLS over UDP (Alaa Hleihel) [1952061 1936742]
- net/mlx5e: Reject tc rules which redirect from a VF to itself (Alaa Hleihel) [1952065 1932839]
- net/mlx5: CT: Add support for matching on ct_state inv and rel flags (Alaa Hleihel) [1952062 1942681]
- KVM: VMX: Don't use vcpu->run->internal.ndata as an array index (Jon Maloy) [1954221 1954219]
- tools/power turbostat: Revert '[tools] tools/power turbostat: Enable accumulate RAPL display' (Prarit Bhargava) [1952987 1944699]

[4.18.0-305.1.1_4]
- ALSA: usb-audio: fix NULL ptr dereference in usb_audio_probe (Jaroslav Kysela) [1954545 1870724]
- ALSA: usb-audio: fix use after free in usb_audio_disconnect (Jaroslav Kysela) [1954545 1870724]
- ALSA: usb-audio: Disable USB autosuspend properly in setup_disable_autosuspend() (Jaroslav Kysela) [1954545 1870724]
- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1945123 1924230]
- geneve: do not modify the shared tunnel info when PMTU triggers an ICMP reply (Antoine Tenart) [1944667 1941753]
- vxlan: do not modify the shared tunnel info when PMTU triggers an ICMP reply (Antoine Tenart) [1944667 1941753]
- redhat: switch to zstream (Jan Stancek)

Related CVEs

CVE-2021-3543

CVE-2021-3501

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-305.3.1.el8_4.src.rpm	5204dc0c0d08a9b44620385fb81cf6f5b12e1a13b57cc4d6c8f60785bba011d2	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-305.3.1.el8_4.src.rpm	5204dc0c0d08a9b44620385fb81cf6f5b12e1a13b57cc4d6c8f60785bba011d2	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-305.3.1.el8_4.src.rpm	5204dc0c0d08a9b44620385fb81cf6f5b12e1a13b57cc4d6c8f60785bba011d2	-	ol8_aarch64_u4_baseos_patch
	bpftool-4.18.0-305.3.1.el8_4.aarch64.rpm	a95b5fc5a3134e309e292614249f3e45e715464b981b9613a3fc24b7dac5390f	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-305.3.1.el8_4.aarch64.rpm	a95b5fc5a3134e309e292614249f3e45e715464b981b9613a3fc24b7dac5390f	-	ol8_aarch64_u4_baseos_patch
	kernel-cross-headers-4.18.0-305.3.1.el8_4.aarch64.rpm	93b41c3872ea64d34efc924b984462a47dbaba0ea71958d42f77fc2c3947d3c7	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-305.3.1.el8_4.aarch64.rpm	93b41c3872ea64d34efc924b984462a47dbaba0ea71958d42f77fc2c3947d3c7	-	ol8_aarch64_u4_baseos_patch
	kernel-headers-4.18.0-305.3.1.el8_4.aarch64.rpm	e14d19ea31f96cc2b38df61747d42d10507dbaeaaa98cfa349e8627ffcba418a	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-305.3.1.el8_4.aarch64.rpm	e14d19ea31f96cc2b38df61747d42d10507dbaeaaa98cfa349e8627ffcba418a	-	ol8_aarch64_u4_baseos_patch
	kernel-tools-4.18.0-305.3.1.el8_4.aarch64.rpm	f311b20f2f85f7c458cf97f69b2c8c07fbac8935bf5f1bea0e704c75eecb6844	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-305.3.1.el8_4.aarch64.rpm	f311b20f2f85f7c458cf97f69b2c8c07fbac8935bf5f1bea0e704c75eecb6844	-	ol8_aarch64_u4_baseos_patch
	kernel-tools-libs-4.18.0-305.3.1.el8_4.aarch64.rpm	ef45b0cf50f6fa8999caf7b952898d46bc0f3df0bda7cadcccc7441c24480edd	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-305.3.1.el8_4.aarch64.rpm	ef45b0cf50f6fa8999caf7b952898d46bc0f3df0bda7cadcccc7441c24480edd	-	ol8_aarch64_u4_baseos_patch
	kernel-tools-libs-devel-4.18.0-305.3.1.el8_4.aarch64.rpm	de1dda83a8948301d50aca83f196ed3ea4d6bac915f8feaf816fea8360404adb	-	ol8_aarch64_codeready_builder
	perf-4.18.0-305.3.1.el8_4.aarch64.rpm	f95a96cef78f4b298e551ebe9e9020b4de5a8036e67d66ace619a56adf667084	-	ol8_aarch64_baseos_latest
	perf-4.18.0-305.3.1.el8_4.aarch64.rpm	f95a96cef78f4b298e551ebe9e9020b4de5a8036e67d66ace619a56adf667084	-	ol8_aarch64_u4_baseos_patch
	python3-perf-4.18.0-305.3.1.el8_4.aarch64.rpm	d8cc98d593884f8415af64c0187188ea9a5fe55c85466f5ffe20b38bc708c88a	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-305.3.1.el8_4.aarch64.rpm	d8cc98d593884f8415af64c0187188ea9a5fe55c85466f5ffe20b38bc708c88a	-	ol8_aarch64_u4_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-305.3.1.el8_4.src.rpm	5204dc0c0d08a9b44620385fb81cf6f5b12e1a13b57cc4d6c8f60785bba011d2	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-305.3.1.el8_4.src.rpm	5204dc0c0d08a9b44620385fb81cf6f5b12e1a13b57cc4d6c8f60785bba011d2	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-305.3.1.el8_4.src.rpm	5204dc0c0d08a9b44620385fb81cf6f5b12e1a13b57cc4d6c8f60785bba011d2	-	ol8_x86_64_u4_baseos_patch
	bpftool-4.18.0-305.3.1.el8_4.x86_64.rpm	7c468c4777e1788cdec646767b0f49530fa777a7c7ab3a742a44d291027f53f1	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-305.3.1.el8_4.x86_64.rpm	7c468c4777e1788cdec646767b0f49530fa777a7c7ab3a742a44d291027f53f1	-	ol8_x86_64_u4_baseos_patch
	kernel-4.18.0-305.3.1.el8_4.x86_64.rpm	a9066aee207b5c9e519c81323dcdb880152ac6e6f957c603c57dd770d8ff96c9	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-305.3.1.el8_4.x86_64.rpm	a9066aee207b5c9e519c81323dcdb880152ac6e6f957c603c57dd770d8ff96c9	-	ol8_x86_64_u4_baseos_patch
	kernel-abi-stablelists-4.18.0-305.3.1.el8_4.noarch.rpm	b6b045d42f8e78dc198fcd3be980c7442e15625c66fd57cb91ac49ef3f8e0140	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-305.3.1.el8_4.noarch.rpm	b6b045d42f8e78dc198fcd3be980c7442e15625c66fd57cb91ac49ef3f8e0140	-	ol8_x86_64_u4_baseos_patch
	kernel-core-4.18.0-305.3.1.el8_4.x86_64.rpm	665b534c6c8f1c94c9b5a4de6ed72948bc398ccc36cf1ce385f5e09ae3e402ce	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-305.3.1.el8_4.x86_64.rpm	665b534c6c8f1c94c9b5a4de6ed72948bc398ccc36cf1ce385f5e09ae3e402ce	-	ol8_x86_64_u4_baseos_patch
	kernel-cross-headers-4.18.0-305.3.1.el8_4.x86_64.rpm	2d8470b92f79d3f4437952e057bea2d8deabf8ac9c1850a2f99904efe5e6a313	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-305.3.1.el8_4.x86_64.rpm	2d8470b92f79d3f4437952e057bea2d8deabf8ac9c1850a2f99904efe5e6a313	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-4.18.0-305.3.1.el8_4.x86_64.rpm	ba6ddfbb2ba36da25a43f4a2beb5d0e2601c41a972795cb1de3463e74c1c5361	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-305.3.1.el8_4.x86_64.rpm	ba6ddfbb2ba36da25a43f4a2beb5d0e2601c41a972795cb1de3463e74c1c5361	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-core-4.18.0-305.3.1.el8_4.x86_64.rpm	255f60404f17136f281cbb8631e02b84c9206066326369275c65fae2c7eeed42	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-305.3.1.el8_4.x86_64.rpm	255f60404f17136f281cbb8631e02b84c9206066326369275c65fae2c7eeed42	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-devel-4.18.0-305.3.1.el8_4.x86_64.rpm	fb7aae1da033dc16499866c59dd618c22b2f3b2f4bcddc8afba4a06f27097703	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-305.3.1.el8_4.x86_64.rpm	fb7aae1da033dc16499866c59dd618c22b2f3b2f4bcddc8afba4a06f27097703	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-modules-4.18.0-305.3.1.el8_4.x86_64.rpm	1be1fbd9406b9b141f7bbd29f02c0de56ae4dc68f60d885d06a9796fc5d936c7	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-305.3.1.el8_4.x86_64.rpm	1be1fbd9406b9b141f7bbd29f02c0de56ae4dc68f60d885d06a9796fc5d936c7	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-modules-extra-4.18.0-305.3.1.el8_4.x86_64.rpm	dcc88fdeac5976ab0af41310570286a99bbd632c30a12d9c513894c3a2992b1d	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-305.3.1.el8_4.x86_64.rpm	dcc88fdeac5976ab0af41310570286a99bbd632c30a12d9c513894c3a2992b1d	-	ol8_x86_64_u4_baseos_patch
	kernel-devel-4.18.0-305.3.1.el8_4.x86_64.rpm	a536503579353b79bc53a9af8ee3859dbdfb79a157229328e0b60841c6d5fd0b	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-305.3.1.el8_4.x86_64.rpm	a536503579353b79bc53a9af8ee3859dbdfb79a157229328e0b60841c6d5fd0b	-	ol8_x86_64_u4_baseos_patch
	kernel-doc-4.18.0-305.3.1.el8_4.noarch.rpm	afe6f3dbfa7d6e7d30d5c6b1d935f5c929db0c43d349390e1abe30e53620ffff	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-305.3.1.el8_4.noarch.rpm	afe6f3dbfa7d6e7d30d5c6b1d935f5c929db0c43d349390e1abe30e53620ffff	-	ol8_x86_64_u4_baseos_patch
	kernel-headers-4.18.0-305.3.1.el8_4.x86_64.rpm	402df7c009ce62fc97215910d0036717b9b1a3611b887b2fe749dc2dfdc881c5	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-305.3.1.el8_4.x86_64.rpm	402df7c009ce62fc97215910d0036717b9b1a3611b887b2fe749dc2dfdc881c5	-	ol8_x86_64_u4_baseos_patch
	kernel-modules-4.18.0-305.3.1.el8_4.x86_64.rpm	7b5f86d29d38c972bfef3f6a0b5f8131ca047fce1b75c81076fb41597ea582c7	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-305.3.1.el8_4.x86_64.rpm	7b5f86d29d38c972bfef3f6a0b5f8131ca047fce1b75c81076fb41597ea582c7	-	ol8_x86_64_u4_baseos_patch
	kernel-modules-extra-4.18.0-305.3.1.el8_4.x86_64.rpm	5708d65b04d56591a426ded83d0b3d3eb86826646ae7670e1bd8af91442367a6	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-305.3.1.el8_4.x86_64.rpm	5708d65b04d56591a426ded83d0b3d3eb86826646ae7670e1bd8af91442367a6	-	ol8_x86_64_u4_baseos_patch
	kernel-tools-4.18.0-305.3.1.el8_4.x86_64.rpm	070c495e83a1dd7905d6e5896235035a6b94172b41d5c58101f26fe0250e240c	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-305.3.1.el8_4.x86_64.rpm	070c495e83a1dd7905d6e5896235035a6b94172b41d5c58101f26fe0250e240c	-	ol8_x86_64_u4_baseos_patch
	kernel-tools-libs-4.18.0-305.3.1.el8_4.x86_64.rpm	174354985c8e3dfbaa5007d01afe140b8250e1077d6287ba9767c78391feb881	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-305.3.1.el8_4.x86_64.rpm	174354985c8e3dfbaa5007d01afe140b8250e1077d6287ba9767c78391feb881	-	ol8_x86_64_u4_baseos_patch
	kernel-tools-libs-devel-4.18.0-305.3.1.el8_4.x86_64.rpm	29507235559854994dbd73b483a60dfda36572f7dc949f657a69110044efb6a8	-	ol8_x86_64_codeready_builder
	perf-4.18.0-305.3.1.el8_4.x86_64.rpm	0a6417f122b0e20ef6dac455ec8deb5e8bc4c0e5f97ce2f5a8045dff1790cda9	-	ol8_x86_64_baseos_latest
	perf-4.18.0-305.3.1.el8_4.x86_64.rpm	0a6417f122b0e20ef6dac455ec8deb5e8bc4c0e5f97ce2f5a8045dff1790cda9	-	ol8_x86_64_u4_baseos_patch
	python3-perf-4.18.0-305.3.1.el8_4.x86_64.rpm	2b59aebc2e6c7c5e15481b2059b3341edf717ea90b138635a52dbe2a922d899b	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-305.3.1.el8_4.x86_64.rpm	2b59aebc2e6c7c5e15481b2059b3341edf717ea90b138635a52dbe2a922d899b	-	ol8_x86_64_u4_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team