ELSA-2021-2725

ELSA-2021-2725 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-07-21

Description

[3.10.0-1160.36.2.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.36.2]
- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]

[3.10.0-1160.36.1]
- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)

[3.10.0-1160.35.1]
- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]

[3.10.0-1160.34.1]
- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]

[3.10.0-1160.33.1]
- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}

[3.10.0-1160.32.1]
- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for ->numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p->numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]

Related CVEs

CVE-2021-33034

CVE-2021-33033

CVE-2020-11668

CVE-2019-20934

CVE-2021-33909

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-1160.36.2.el7.src.rpm	349db3b0ee7f8e387dd6c7b918fb9f0bb6b06959a66f1f16fdfd5f46cc418401	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.36.2.el7.src.rpm	349db3b0ee7f8e387dd6c7b918fb9f0bb6b06959a66f1f16fdfd5f46cc418401	ELSA-2025-1281	ol7_x86_64_optional_latest
	kernel-3.10.0-1160.36.2.el7.src.rpm	349db3b0ee7f8e387dd6c7b918fb9f0bb6b06959a66f1f16fdfd5f46cc418401	ELSA-2025-1281	ol7_x86_64_u9_patch
	bpftool-3.10.0-1160.36.2.el7.x86_64.rpm	9aa018dd37d21bd2c98cdf84798ed075f22086e55be83707759818d9dcbff436	ELSA-2025-1281	ol7_x86_64_latest
	bpftool-3.10.0-1160.36.2.el7.x86_64.rpm	9aa018dd37d21bd2c98cdf84798ed075f22086e55be83707759818d9dcbff436	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-3.10.0-1160.36.2.el7.x86_64.rpm	cead80aaf8c9eb643dc8e81cf4410d9a54429c3d9d79f2c58f744cb54da21107	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.36.2.el7.x86_64.rpm	cead80aaf8c9eb643dc8e81cf4410d9a54429c3d9d79f2c58f744cb54da21107	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-abi-whitelists-3.10.0-1160.36.2.el7.noarch.rpm	056742df7ff019a49f2bb2bca1be6c8277d6854408e994d18f5c12e05f315fdd	ELSA-2025-1281	ol7_x86_64_latest
	kernel-abi-whitelists-3.10.0-1160.36.2.el7.noarch.rpm	056742df7ff019a49f2bb2bca1be6c8277d6854408e994d18f5c12e05f315fdd	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-3.10.0-1160.36.2.el7.x86_64.rpm	4e660afbb126a55d8ed757a7c3b0355eb99aef01dc9a350632cece426fa50957	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-3.10.0-1160.36.2.el7.x86_64.rpm	4e660afbb126a55d8ed757a7c3b0355eb99aef01dc9a350632cece426fa50957	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-devel-3.10.0-1160.36.2.el7.x86_64.rpm	a40550a5e5403b8d471116baec81e5a7abb482258e79a5146d36dec0a29ec517	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-devel-3.10.0-1160.36.2.el7.x86_64.rpm	a40550a5e5403b8d471116baec81e5a7abb482258e79a5146d36dec0a29ec517	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-devel-3.10.0-1160.36.2.el7.x86_64.rpm	68475cbf9bf06e5d21f13bf63f92edfa40f24089d5f0b5bba185d06dce7198fb	ELSA-2025-1281	ol7_x86_64_latest
	kernel-devel-3.10.0-1160.36.2.el7.x86_64.rpm	68475cbf9bf06e5d21f13bf63f92edfa40f24089d5f0b5bba185d06dce7198fb	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-doc-3.10.0-1160.36.2.el7.noarch.rpm	81a1fac87702a9d3fa9376b37086765256a28741469fb447de233e6c0ef425d8	ELSA-2025-1281	ol7_x86_64_latest
	kernel-doc-3.10.0-1160.36.2.el7.noarch.rpm	81a1fac87702a9d3fa9376b37086765256a28741469fb447de233e6c0ef425d8	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm	8831c729b2ef40ae39ceb4389e2e01276860a3be70830784f978422c3f41e54d	ELSA-2025-1281	exadata_dbserver_20.1.13.0.0_x86_64_base
	kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm	8831c729b2ef40ae39ceb4389e2e01276860a3be70830784f978422c3f41e54d	ELSA-2025-1281	exadata_dbserver_20.1.14.0.0_x86_64_base
	kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm	8831c729b2ef40ae39ceb4389e2e01276860a3be70830784f978422c3f41e54d	ELSA-2025-1281	exadata_dbserver_21.2.3.0.0_x86_64_base
	kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm	8831c729b2ef40ae39ceb4389e2e01276860a3be70830784f978422c3f41e54d	ELSA-2025-1281	exadata_dbserver_21.2.4.0.0_x86_64_base
	kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm	8831c729b2ef40ae39ceb4389e2e01276860a3be70830784f978422c3f41e54d	ELSA-2025-1281	ol7_x86_64_latest
	kernel-headers-3.10.0-1160.36.2.el7.x86_64.rpm	8831c729b2ef40ae39ceb4389e2e01276860a3be70830784f978422c3f41e54d	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-3.10.0-1160.36.2.el7.x86_64.rpm	6b4f1c85c7bb5348fd4c9e6eb8d0b996a647726d156a18301c02c7563992e193	ELSA-2025-1281	exadata_dbserver_21.2.3.0.0_x86_64_base
	kernel-tools-3.10.0-1160.36.2.el7.x86_64.rpm	6b4f1c85c7bb5348fd4c9e6eb8d0b996a647726d156a18301c02c7563992e193	ELSA-2025-1281	exadata_dbserver_21.2.4.0.0_x86_64_base
	kernel-tools-3.10.0-1160.36.2.el7.x86_64.rpm	6b4f1c85c7bb5348fd4c9e6eb8d0b996a647726d156a18301c02c7563992e193	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-3.10.0-1160.36.2.el7.x86_64.rpm	6b4f1c85c7bb5348fd4c9e6eb8d0b996a647726d156a18301c02c7563992e193	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-3.10.0-1160.36.2.el7.x86_64.rpm	6e45d20bb0c97d7e9c5a0e17ddf25ed122844aba068b2fae1a46a18663bb6d62	ELSA-2025-1281	exadata_dbserver_21.2.3.0.0_x86_64_base
	kernel-tools-libs-3.10.0-1160.36.2.el7.x86_64.rpm	6e45d20bb0c97d7e9c5a0e17ddf25ed122844aba068b2fae1a46a18663bb6d62	ELSA-2025-1281	exadata_dbserver_21.2.4.0.0_x86_64_base
	kernel-tools-libs-3.10.0-1160.36.2.el7.x86_64.rpm	6e45d20bb0c97d7e9c5a0e17ddf25ed122844aba068b2fae1a46a18663bb6d62	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-libs-3.10.0-1160.36.2.el7.x86_64.rpm	6e45d20bb0c97d7e9c5a0e17ddf25ed122844aba068b2fae1a46a18663bb6d62	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-devel-3.10.0-1160.36.2.el7.x86_64.rpm	f1b1ca0e336fd9468639cb256b99e9fc402bf75f6b8a3f41e44a9f2a18b5be67	ELSA-2025-1281	ol7_x86_64_optional_latest
	perf-3.10.0-1160.36.2.el7.x86_64.rpm	ce91a33dbff096664bc0444856cc1fc1d8662314c94522479dcc59c50cf97d58	ELSA-2025-20019	ol7_x86_64_latest
	perf-3.10.0-1160.36.2.el7.x86_64.rpm	ce91a33dbff096664bc0444856cc1fc1d8662314c94522479dcc59c50cf97d58	ELSA-2025-20019	ol7_x86_64_u9_patch
	python-perf-3.10.0-1160.36.2.el7.x86_64.rpm	47b385e503018c0b9f3bf2da54ea66f7602f730c388e7ee2965ab2ac769a8b73	ELSA-2025-20019	ol7_x86_64_latest
	python-perf-3.10.0-1160.36.2.el7.x86_64.rpm	47b385e503018c0b9f3bf2da54ea66f7602f730c388e7ee2965ab2ac769a8b73	ELSA-2025-20019	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team