ELSA-2021-3801

ELSA-2021-3801 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-10-12

Description

[3.10.0-1160.45.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.45.1]
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]

[3.10.0-1160.44.1]
- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}

[3.10.0-1160.43.1]
- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable 'MFW indication via attention' SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]

Related CVEs

CVE-2021-3653

CVE-2021-3656

CVE-2021-22543

CVE-2021-37576

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-1160.45.1.el7.src.rpm	23efcbd2f32987e503772c14829b30ae5c468af3cb32dbd091507b89615bf0d4	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.45.1.el7.src.rpm	23efcbd2f32987e503772c14829b30ae5c468af3cb32dbd091507b89615bf0d4	ELSA-2025-1281	ol7_x86_64_optional_latest
	kernel-3.10.0-1160.45.1.el7.src.rpm	23efcbd2f32987e503772c14829b30ae5c468af3cb32dbd091507b89615bf0d4	ELSA-2025-1281	ol7_x86_64_u9_patch
	bpftool-3.10.0-1160.45.1.el7.x86_64.rpm	3038df77623e3676bbe81c6cced8426aceccead4eb971fea037743687818d1e9	ELSA-2025-1281	ol7_x86_64_latest
	bpftool-3.10.0-1160.45.1.el7.x86_64.rpm	3038df77623e3676bbe81c6cced8426aceccead4eb971fea037743687818d1e9	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-3.10.0-1160.45.1.el7.x86_64.rpm	190d55a3458df7551ed64fef00173732554f250d79c818ad934d318db7b9fb29	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.45.1.el7.x86_64.rpm	190d55a3458df7551ed64fef00173732554f250d79c818ad934d318db7b9fb29	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-abi-whitelists-3.10.0-1160.45.1.el7.noarch.rpm	bf8ff0f3912570eb964c518c9014920a24520d95a17c5c8e9136c42d5b487ce0	ELSA-2025-1281	ol7_x86_64_latest
	kernel-abi-whitelists-3.10.0-1160.45.1.el7.noarch.rpm	bf8ff0f3912570eb964c518c9014920a24520d95a17c5c8e9136c42d5b487ce0	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-3.10.0-1160.45.1.el7.x86_64.rpm	b0d5dc555c5c5e837f9848ff3bca39bd85f7bef0b3bcd743a759dd9ae0295aaa	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-3.10.0-1160.45.1.el7.x86_64.rpm	b0d5dc555c5c5e837f9848ff3bca39bd85f7bef0b3bcd743a759dd9ae0295aaa	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-devel-3.10.0-1160.45.1.el7.x86_64.rpm	5561371537805318b431bdf89ba27e015b44a8cdd4c949af7b25e1042f275e43	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-devel-3.10.0-1160.45.1.el7.x86_64.rpm	5561371537805318b431bdf89ba27e015b44a8cdd4c949af7b25e1042f275e43	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-devel-3.10.0-1160.45.1.el7.x86_64.rpm	2dad091c0cc20f5adb1bbd69d7621c901aae1e6b9762b4d1f7ba409fabc19d2f	ELSA-2025-1281	ol7_x86_64_latest
	kernel-devel-3.10.0-1160.45.1.el7.x86_64.rpm	2dad091c0cc20f5adb1bbd69d7621c901aae1e6b9762b4d1f7ba409fabc19d2f	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-doc-3.10.0-1160.45.1.el7.noarch.rpm	9caee7a113ce4a0185a6b01d1bab4adb15a65fb9f130ef8693587ef99f41ec97	ELSA-2025-1281	ol7_x86_64_latest
	kernel-doc-3.10.0-1160.45.1.el7.noarch.rpm	9caee7a113ce4a0185a6b01d1bab4adb15a65fb9f130ef8693587ef99f41ec97	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-headers-3.10.0-1160.45.1.el7.x86_64.rpm	61eb6b2d1336986a9be2ef776622591d2d4e266d9d1e6e2b73521b979e00c683	ELSA-2025-1281	exadata_dbserver_20.1.16.0.0_x86_64_base
	kernel-headers-3.10.0-1160.45.1.el7.x86_64.rpm	61eb6b2d1336986a9be2ef776622591d2d4e266d9d1e6e2b73521b979e00c683	ELSA-2025-1281	exadata_dbserver_21.2.6.0.0_x86_64_base
	kernel-headers-3.10.0-1160.45.1.el7.x86_64.rpm	61eb6b2d1336986a9be2ef776622591d2d4e266d9d1e6e2b73521b979e00c683	ELSA-2025-1281	ol7_x86_64_latest
	kernel-headers-3.10.0-1160.45.1.el7.x86_64.rpm	61eb6b2d1336986a9be2ef776622591d2d4e266d9d1e6e2b73521b979e00c683	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-3.10.0-1160.45.1.el7.x86_64.rpm	7bb600e74ed7275860add8539cc5c4929fe24d0a5cc8fb796d9370794f73fd68	ELSA-2025-1281	exadata_dbserver_21.2.6.0.0_x86_64_base
	kernel-tools-3.10.0-1160.45.1.el7.x86_64.rpm	7bb600e74ed7275860add8539cc5c4929fe24d0a5cc8fb796d9370794f73fd68	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-3.10.0-1160.45.1.el7.x86_64.rpm	7bb600e74ed7275860add8539cc5c4929fe24d0a5cc8fb796d9370794f73fd68	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-3.10.0-1160.45.1.el7.x86_64.rpm	8422556fdaf119d38662c8ca1213fd8b94e53c0b2f82a6177fb4ddbb915dff31	ELSA-2025-1281	exadata_dbserver_21.2.6.0.0_x86_64_base
	kernel-tools-libs-3.10.0-1160.45.1.el7.x86_64.rpm	8422556fdaf119d38662c8ca1213fd8b94e53c0b2f82a6177fb4ddbb915dff31	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-libs-3.10.0-1160.45.1.el7.x86_64.rpm	8422556fdaf119d38662c8ca1213fd8b94e53c0b2f82a6177fb4ddbb915dff31	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-devel-3.10.0-1160.45.1.el7.x86_64.rpm	1de678a60f1590eace16d2aa63894a19bcd9be8ff90bf2575c3a1d9851715f17	ELSA-2025-1281	ol7_x86_64_optional_latest
	perf-3.10.0-1160.45.1.el7.x86_64.rpm	50383e7bb6d11a739a25d6fd3154724e9bde1828d79fa2bac6598d91318ce98d	ELSA-2025-20019	ol7_x86_64_latest
	perf-3.10.0-1160.45.1.el7.x86_64.rpm	50383e7bb6d11a739a25d6fd3154724e9bde1828d79fa2bac6598d91318ce98d	ELSA-2025-20019	ol7_x86_64_u9_patch
	python-perf-3.10.0-1160.45.1.el7.x86_64.rpm	0756d8c3c246fb12690d0865ee814a03e0d7af6e13e5905cfd141b468d93986b	ELSA-2025-20019	ol7_x86_64_latest
	python-perf-3.10.0-1160.45.1.el7.x86_64.rpm	0756d8c3c246fb12690d0865ee814a03e0d7af6e13e5905cfd141b468d93986b	ELSA-2025-20019	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team