ELSA-2021-3327

ELSA-2021-3327 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-08-31

Description

[3.10.0-1160.41.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.41.1]
- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]

[3.10.0-1160.40.1]
- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]

[3.10.0-1160.39.1]
- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert 'be2net: disable bh with spin_lock in be_process_mcc' (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]

[3.10.0-1160.38.1]
- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]

[3.10.0-1160.37.1]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]

Related CVEs

CVE-2021-29650

CVE-2021-32399

CVE-2020-27777

CVE-2021-29154

CVE-2021-22555

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-1160.41.1.el7.src.rpm	ee8694a6708c2d9a667ddcf2b78a7316f10e2282dc7c8be342e05972886ca212	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.41.1.el7.src.rpm	ee8694a6708c2d9a667ddcf2b78a7316f10e2282dc7c8be342e05972886ca212	ELSA-2025-1281	ol7_x86_64_optional_latest
	kernel-3.10.0-1160.41.1.el7.src.rpm	ee8694a6708c2d9a667ddcf2b78a7316f10e2282dc7c8be342e05972886ca212	ELSA-2025-1281	ol7_x86_64_u9_patch
	bpftool-3.10.0-1160.41.1.el7.x86_64.rpm	e0bd8db5e49ab977c1cc2be8b4fc314cb49e343e0c2a26ee044a26b6552b15c6	ELSA-2025-1281	ol7_x86_64_latest
	bpftool-3.10.0-1160.41.1.el7.x86_64.rpm	e0bd8db5e49ab977c1cc2be8b4fc314cb49e343e0c2a26ee044a26b6552b15c6	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-3.10.0-1160.41.1.el7.x86_64.rpm	ad4315a92eb39505e95749602430a4c78bf3cb61dab48fee145cf2f3feb332f6	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.41.1.el7.x86_64.rpm	ad4315a92eb39505e95749602430a4c78bf3cb61dab48fee145cf2f3feb332f6	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-abi-whitelists-3.10.0-1160.41.1.el7.noarch.rpm	4e73d1ee32c6b31a6a6ed6c86df5264e19a250f05e8f0cf705d4c520bdf48d61	ELSA-2025-1281	ol7_x86_64_latest
	kernel-abi-whitelists-3.10.0-1160.41.1.el7.noarch.rpm	4e73d1ee32c6b31a6a6ed6c86df5264e19a250f05e8f0cf705d4c520bdf48d61	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-3.10.0-1160.41.1.el7.x86_64.rpm	34bd3d38de09003dfc2e5e86ab60a9c4562187ce86174430461f4e504c5c6b10	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-3.10.0-1160.41.1.el7.x86_64.rpm	34bd3d38de09003dfc2e5e86ab60a9c4562187ce86174430461f4e504c5c6b10	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-devel-3.10.0-1160.41.1.el7.x86_64.rpm	629883676f1df08850a7671e38bfec0544666456da7e381a572a1b4087e42aca	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-devel-3.10.0-1160.41.1.el7.x86_64.rpm	629883676f1df08850a7671e38bfec0544666456da7e381a572a1b4087e42aca	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-devel-3.10.0-1160.41.1.el7.x86_64.rpm	0ced82f0db94e1b17492c0ff1c96930041a1d14aef203307bf063475bdc2aaf6	ELSA-2025-1281	ol7_x86_64_latest
	kernel-devel-3.10.0-1160.41.1.el7.x86_64.rpm	0ced82f0db94e1b17492c0ff1c96930041a1d14aef203307bf063475bdc2aaf6	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-doc-3.10.0-1160.41.1.el7.noarch.rpm	39538cdacac43d98fcd9b39f3832a98b6d5ace717c8d43877e4fb8fd2ead8b42	ELSA-2025-1281	ol7_x86_64_latest
	kernel-doc-3.10.0-1160.41.1.el7.noarch.rpm	39538cdacac43d98fcd9b39f3832a98b6d5ace717c8d43877e4fb8fd2ead8b42	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-headers-3.10.0-1160.41.1.el7.x86_64.rpm	aa6cfa839affb7036a05787ec33bdd7e74855de85cfeed77774d0dadaf344a4f	ELSA-2025-1281	ol7_x86_64_latest
	kernel-headers-3.10.0-1160.41.1.el7.x86_64.rpm	aa6cfa839affb7036a05787ec33bdd7e74855de85cfeed77774d0dadaf344a4f	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-3.10.0-1160.41.1.el7.x86_64.rpm	8993029bd1fc630666c491b4211083cb89b78cfe42e7ff711e185d70e41a1957	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-3.10.0-1160.41.1.el7.x86_64.rpm	8993029bd1fc630666c491b4211083cb89b78cfe42e7ff711e185d70e41a1957	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-3.10.0-1160.41.1.el7.x86_64.rpm	7c5eaa74b0fc3dedeb98ccb04bc14bb3230219b859e0bce85389528950946eb8	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-libs-3.10.0-1160.41.1.el7.x86_64.rpm	7c5eaa74b0fc3dedeb98ccb04bc14bb3230219b859e0bce85389528950946eb8	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-devel-3.10.0-1160.41.1.el7.x86_64.rpm	f66a16e1882cc0e5e996bacb05cce3832a505602fedd88b26f8c780a5d7d0b3e	ELSA-2025-1281	ol7_x86_64_optional_latest
	perf-3.10.0-1160.41.1.el7.x86_64.rpm	c99ff3b235bbd1654a5a7dfd3dee3bd610edad8940aa3cc77bb79d286b3c639d	ELSA-2025-20019	ol7_x86_64_latest
	perf-3.10.0-1160.41.1.el7.x86_64.rpm	c99ff3b235bbd1654a5a7dfd3dee3bd610edad8940aa3cc77bb79d286b3c639d	ELSA-2025-20019	ol7_x86_64_u9_patch
	python-perf-3.10.0-1160.41.1.el7.x86_64.rpm	565b76c862bfb9660906a0772e1afe432cceb0ddfd4d0ad81b47053a5dbce5a3	ELSA-2025-20019	ol7_x86_64_latest
	python-perf-3.10.0-1160.41.1.el7.x86_64.rpm	565b76c862bfb9660906a0772e1afe432cceb0ddfd4d0ad81b47053a5dbce5a3	ELSA-2025-20019	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team