ELSA-2021-4056

ELSA-2021-4056 - kernel security, bug fix, and enhancement update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-11-03

Description

[4.18.0-305.25.1_4.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-305.25.1_4]
- scsi: ibmvfc: Reinit target retries (Steve Best) [1993892 1965010]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Steve Best) [1993892 1965010]
- scsi: ibmvfc: Handle move login failure (Steve Best) [1993892 1965010]
- scsi: ibmvfc: Fix invalid state machine BUG_ON() (Steve Best) [1993892 1965010]
- tpm, tpm_tis: Reserve locality in tpm_tis_resume() (Jerry Snitselaar) [1998219 1920812]
- tpm, tpm_tis: Extend locality handling to TPM2 in tpm_tis_gen_interrupt() (Jerry Snitselaar) [1998219 1920812]
- tpm, tpm_tis: Decorate tpm_tis_gen_interrupt() with request_locality() (Jerry Snitselaar) [1998219 1920812]
- tpm, tpm_tis: Decorate tpm_get_timeouts() with request_locality() (Jerry Snitselaar) [1998219 1920812]
- tpm_tis: Clean up locality release (Jerry Snitselaar) [1998219 1920812]
- tpm_tis: Fix check_locality for correct locality acquisition (Jerry Snitselaar) [1998219 1920812]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010331 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010331 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010331 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010331 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010331 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010331 2001497]
- net/sched: store the last executed chain also for clsact egress (Davide Caratti) [1992230 1980537]

[4.18.0-305.24.1_4]
- lockd: Fix invalid lockowner cast after vfs_test_lock (Benjamin Coddington) [2010820 1986138]
- e1000e: Do not take care about recovery NVM checksum (Ken Cox) [2002335 1984558]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Bill O'Donnell) [2011919 1917220]
- xfs: remove the unused return value from xfs_log_unmount_write (Bill O'Donnell) [2011919 1917220]
- powerpc: use stop_machine for partition migration (Frantisek Hrbata) [1993952 1979798]

[4.18.0-305.23.1_4]
- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- xfs: drop unnecessary setfilesize helper (Brian Foster) [2007413 1942348]
- xfs: drop unused ioend private merge and setfilesize code (Brian Foster) [2007413 1942348]
- xfs: open code ioend needs workqueue helper (Brian Foster) [2007413 1942348]
- xfs: drop submit side trans alloc for append ioends (Brian Foster) [2007413 1942348]

[4.18.0-305.22.1_4]
- [s390] s390/ap: Fix hanging ioctl caused by wrong msg counter (Claudio Imbrenda) [2002635 1984762]
- cpuidle: pseries: Do not cap the CEDE0 latency in fixup_cede0_latency() (Diego Domingos) [1997431 1952809]
- cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards (Diego Domingos) [1997431 1952809]
- EDAC/amd64: Fix PCI component registration (Aristeu Rozanski) [1982182 1918583]
- EDAC/mce_amd: Use struct cpuinfo_x86.cpu_die_id for AMD NodeId (Aristeu Rozanski) [1982182 1918583]
- x86/CPU/AMD: Remove amd_get_nb_id() (Aristeu Rozanski) [1982182 1918583]
- EDAC/mce_amd: Make fam_ops static global (Aristeu Rozanski) [1982182 1918583]
- x86/MCE/AMD: Allow Reserved types to be overwritten in smca_banks[] (Aristeu Rozanski) [1982182 1918583]
- x86/MCE/AMD: Do not use rdmsr_safe_on_cpu() in smca_configure() (Aristeu Rozanski) [1982182 1918583]
- EDAC/amd64: Get rid of the ECC disabled long message (Aristeu Rozanski) [1982182 1918583]
- EDAC/amd64: Check for memory before fully initializing an instance (Aristeu Rozanski) [1982182 1918583]
- EDAC/amd64: Use cached data when checking for ECC (Aristeu Rozanski) [1982182 1918583]
- x86/MCE: Make the number of MCA banks a per-CPU variable (Aristeu Rozanski) [1982182 1918583]
- x86/MCE/AMD: Don't cache block addresses on SMCA systems (Aristeu Rozanski) [1982182 1918583]
- x86/MCE: Make mce_banks a per-CPU array (Aristeu Rozanski) [1982182 1918583]
- x86/MCE: Make struct mce_banks[] static (Aristeu Rozanski) [1982182 1918583]
- x86/MCE/AMD: Don't report L1 BTB MCA errors on some family 17h models (Aristeu Rozanski) [1982182 1918583]
- EDAC/mce_amd: Decode MCA_STATUS in bit definition order (Aristeu Rozanski) [1982182 1918583]
- EDAC/mce_amd: Decode MCA_STATUS[Scrub] bit (Aristeu Rozanski) [1982182 1918583]
- EDAC, mce_amd: Match error descriptions to latest documentation (Aristeu Rozanski) [1982182 1918583]
- x86/MCE/AMD: Carve out the MC4_MISC thresholding quirk (Aristeu Rozanski) [1982182 1918583]
- x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models (Aristeu Rozanski) [1982182 1918583]
- net: Fix skb->csum update in inet_proto_csum_replace16(). (Balazs Nemeth) [2005980 1975193]
- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1982040 1931846] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1982040 1931846] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1982040 1931846] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1982040 1931846] {CVE-2020-36385}

[4.18.0-305.21.1_4]
- HID: make arrays usage and value to be the same (Benjamin Tissoires) [1974941 1974942] {CVE-2021-0512}
- y2038: remove CONFIG_64BIT_TIME (Waiman Long) [2003569 1965360]

[4.18.0-305.20.1_4]
- net/mlx5: E-Switch, Allow setting GUID for host PF vport (Alaa Hleihel) [1986837 1967488]
- net/mlx5: E-Switch, Read PF mac address (Alaa Hleihel) [1986837 1967488]
- ice: fix Tx queue iteration for Tx timestamp enablement (Ken Cox) [2000128 1999743]
- ice: restart periodic outputs around time changes (Ken Cox) [1997572 1992750]
- ice: Fix perout start time rounding (Ken Cox) [1997572 1992750]
- ice: add support for auxiliary input/output pins (Jonathan Toppins) [1998221 1956913]
- ice: enable transmit timestamps for E810 devices (Jonathan Toppins) [1998220 1944818]
- ice: enable receive hardware timestamping (Jonathan Toppins) [1998220 1944818]
- ice: report the PTP clock index in ethtool .get_ts_info (Jonathan Toppins) [1998220 1944818]
- ice: register 1588 PTP clock device object for E810 devices (Jonathan Toppins) [1998220 1944818]
- ice: add low level PTP clock access functions (Jonathan Toppins) [1998220 1944818]
- ice: add support for set/get of driver-stored firmware parameters (Jonathan Toppins) [1998220 1944818]
- ice: process 1588 PTP capabilities during initialization (Jonathan Toppins) [1998220 1944818]
- ice: add support for sideband messages (Jonathan Toppins) [1998220 1944818]
- ice: Prevent probing virtual functions (Ken Cox) [1997539 1952810]
- vfio/pci/nvlink2: Do not attempt NPU2 setup on POWER8NVL NPU (Gustavo Walbon) [2000602 1891589]
- powerpc/powernv/npu: Do not attempt NPU2 setup on POWER8NVL NPU (Gustavo Walbon) [2000602 1891589]

Related CVEs

CVE-2020-36385

CVE-2021-3656

CVE-2021-0512

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-4.18.0-305.25.1.el8_4.src.rpm	021805bd333d58fede64598ef1dee0c86d03c27186fdfb809b2f85193b5deb40	-	ol8_aarch64_baseos_latest
	kernel-4.18.0-305.25.1.el8_4.src.rpm	021805bd333d58fede64598ef1dee0c86d03c27186fdfb809b2f85193b5deb40	-	ol8_aarch64_codeready_builder
	kernel-4.18.0-305.25.1.el8_4.src.rpm	021805bd333d58fede64598ef1dee0c86d03c27186fdfb809b2f85193b5deb40	-	ol8_aarch64_u4_baseos_patch
	bpftool-4.18.0-305.25.1.el8_4.aarch64.rpm	0abd2010d7f18b641fb8b6aace9ea4437430a1889dd21dc51c2f1c2533770925	-	ol8_aarch64_baseos_latest
	bpftool-4.18.0-305.25.1.el8_4.aarch64.rpm	0abd2010d7f18b641fb8b6aace9ea4437430a1889dd21dc51c2f1c2533770925	-	ol8_aarch64_u4_baseos_patch
	kernel-cross-headers-4.18.0-305.25.1.el8_4.aarch64.rpm	cc35ad404049bad18cdfbd2abed1c168a80d7e7b27c73d4bfb697f6d7783b059	-	ol8_aarch64_baseos_latest
	kernel-cross-headers-4.18.0-305.25.1.el8_4.aarch64.rpm	cc35ad404049bad18cdfbd2abed1c168a80d7e7b27c73d4bfb697f6d7783b059	-	ol8_aarch64_u4_baseos_patch
	kernel-headers-4.18.0-305.25.1.el8_4.aarch64.rpm	fb533b1d8f126e930bb51ee7034404a07a73815e90c8a4b6421e611336c4486d	-	ol8_aarch64_baseos_latest
	kernel-headers-4.18.0-305.25.1.el8_4.aarch64.rpm	fb533b1d8f126e930bb51ee7034404a07a73815e90c8a4b6421e611336c4486d	-	ol8_aarch64_u4_baseos_patch
	kernel-tools-4.18.0-305.25.1.el8_4.aarch64.rpm	c95a3f1adbad47eb0038991259ee01d11f1d6c4e3fa610535297d3d1cf1c8803	-	ol8_aarch64_baseos_latest
	kernel-tools-4.18.0-305.25.1.el8_4.aarch64.rpm	c95a3f1adbad47eb0038991259ee01d11f1d6c4e3fa610535297d3d1cf1c8803	-	ol8_aarch64_u4_baseos_patch
	kernel-tools-libs-4.18.0-305.25.1.el8_4.aarch64.rpm	6f74bc3ada6627ea072e25add83fbadd94295feeb0abf700b781463cd7341930	-	ol8_aarch64_baseos_latest
	kernel-tools-libs-4.18.0-305.25.1.el8_4.aarch64.rpm	6f74bc3ada6627ea072e25add83fbadd94295feeb0abf700b781463cd7341930	-	ol8_aarch64_u4_baseos_patch
	kernel-tools-libs-devel-4.18.0-305.25.1.el8_4.aarch64.rpm	dd8da2fed47fb19d8515aa33a7bdf7147e7435654b6e2aa81a95ab089aad1a0d	-	ol8_aarch64_codeready_builder
	perf-4.18.0-305.25.1.el8_4.aarch64.rpm	52be763fdc51570075a7e5339ea6844ead1f50e4af3090f6b434a4e804a48329	-	ol8_aarch64_baseos_latest
	perf-4.18.0-305.25.1.el8_4.aarch64.rpm	52be763fdc51570075a7e5339ea6844ead1f50e4af3090f6b434a4e804a48329	-	ol8_aarch64_u4_baseos_patch
	python3-perf-4.18.0-305.25.1.el8_4.aarch64.rpm	edbd333bdbabcf48236c23e6789af7960b929c5d2a279dd1fed4307b63ab3d04	-	ol8_aarch64_baseos_latest
	python3-perf-4.18.0-305.25.1.el8_4.aarch64.rpm	edbd333bdbabcf48236c23e6789af7960b929c5d2a279dd1fed4307b63ab3d04	-	ol8_aarch64_u4_baseos_patch
Oracle Linux 8 (x86_64)	kernel-4.18.0-305.25.1.el8_4.src.rpm	021805bd333d58fede64598ef1dee0c86d03c27186fdfb809b2f85193b5deb40	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-305.25.1.el8_4.src.rpm	021805bd333d58fede64598ef1dee0c86d03c27186fdfb809b2f85193b5deb40	-	ol8_x86_64_codeready_builder
	kernel-4.18.0-305.25.1.el8_4.src.rpm	021805bd333d58fede64598ef1dee0c86d03c27186fdfb809b2f85193b5deb40	-	ol8_x86_64_u4_baseos_patch
	bpftool-4.18.0-305.25.1.el8_4.x86_64.rpm	79498152e3ddf66a3b065928c59cfa5cc2dd7eaef55a68a56b4e471d10bcc4cb	-	ol8_x86_64_baseos_latest
	bpftool-4.18.0-305.25.1.el8_4.x86_64.rpm	79498152e3ddf66a3b065928c59cfa5cc2dd7eaef55a68a56b4e471d10bcc4cb	-	ol8_x86_64_u4_baseos_patch
	kernel-4.18.0-305.25.1.el8_4.x86_64.rpm	122d64a6c3ea7adc33472756fabdc53ec483b3cd830ab68bb44435a6b1a1f265	-	ol8_x86_64_baseos_latest
	kernel-4.18.0-305.25.1.el8_4.x86_64.rpm	122d64a6c3ea7adc33472756fabdc53ec483b3cd830ab68bb44435a6b1a1f265	-	ol8_x86_64_u4_baseos_patch
	kernel-abi-stablelists-4.18.0-305.25.1.el8_4.noarch.rpm	f790476afa79930d4b83a7e55a13afddaa394add5a5efe550ee8d354179c16ba	-	ol8_x86_64_baseos_latest
	kernel-abi-stablelists-4.18.0-305.25.1.el8_4.noarch.rpm	f790476afa79930d4b83a7e55a13afddaa394add5a5efe550ee8d354179c16ba	-	ol8_x86_64_u4_baseos_patch
	kernel-core-4.18.0-305.25.1.el8_4.x86_64.rpm	b51604d62fb46caac256c4a780bd7557ac1b319ad05d4a85222e541b3ed880f3	-	ol8_x86_64_baseos_latest
	kernel-core-4.18.0-305.25.1.el8_4.x86_64.rpm	b51604d62fb46caac256c4a780bd7557ac1b319ad05d4a85222e541b3ed880f3	-	ol8_x86_64_u4_baseos_patch
	kernel-cross-headers-4.18.0-305.25.1.el8_4.x86_64.rpm	2f234a7a22a2c99407529c08c36d2dd361b072a7ec4c72351ca3f38b1924f741	-	ol8_x86_64_baseos_latest
	kernel-cross-headers-4.18.0-305.25.1.el8_4.x86_64.rpm	2f234a7a22a2c99407529c08c36d2dd361b072a7ec4c72351ca3f38b1924f741	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-4.18.0-305.25.1.el8_4.x86_64.rpm	6b022f3b65cb58759e45e61f03ec79596e4871413cfed57e582983f397b492ca	-	ol8_x86_64_baseos_latest
	kernel-debug-4.18.0-305.25.1.el8_4.x86_64.rpm	6b022f3b65cb58759e45e61f03ec79596e4871413cfed57e582983f397b492ca	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-core-4.18.0-305.25.1.el8_4.x86_64.rpm	2e47930c34b2e34a7d852fca778aa283340223372d19d548025fb7a9237cb429	-	ol8_x86_64_baseos_latest
	kernel-debug-core-4.18.0-305.25.1.el8_4.x86_64.rpm	2e47930c34b2e34a7d852fca778aa283340223372d19d548025fb7a9237cb429	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-devel-4.18.0-305.25.1.el8_4.x86_64.rpm	9d1f0a52dfc46c999c45f6ed028ecab65c3c9301cd604a7e001886f0541acfb6	-	ol8_x86_64_baseos_latest
	kernel-debug-devel-4.18.0-305.25.1.el8_4.x86_64.rpm	9d1f0a52dfc46c999c45f6ed028ecab65c3c9301cd604a7e001886f0541acfb6	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-modules-4.18.0-305.25.1.el8_4.x86_64.rpm	fad6cd9cb266431eb8b6898051c05317525878d7923f44930c8a527bfa010fe2	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-4.18.0-305.25.1.el8_4.x86_64.rpm	fad6cd9cb266431eb8b6898051c05317525878d7923f44930c8a527bfa010fe2	-	ol8_x86_64_u4_baseos_patch
	kernel-debug-modules-extra-4.18.0-305.25.1.el8_4.x86_64.rpm	bbd839668662bdb6ce8d8c4904f385804dd6977d651972d67b676899696a9085	-	ol8_x86_64_baseos_latest
	kernel-debug-modules-extra-4.18.0-305.25.1.el8_4.x86_64.rpm	bbd839668662bdb6ce8d8c4904f385804dd6977d651972d67b676899696a9085	-	ol8_x86_64_u4_baseos_patch
	kernel-devel-4.18.0-305.25.1.el8_4.x86_64.rpm	0adf31c1ca00e630bacc98866320944fe051929cc42d3384a4050972f7d53f8f	-	ol8_x86_64_baseos_latest
	kernel-devel-4.18.0-305.25.1.el8_4.x86_64.rpm	0adf31c1ca00e630bacc98866320944fe051929cc42d3384a4050972f7d53f8f	-	ol8_x86_64_u4_baseos_patch
	kernel-doc-4.18.0-305.25.1.el8_4.noarch.rpm	628cf32e827d691eb7d19dde470ab678823ec7d7264a09646262f0a7638fa618	-	ol8_x86_64_baseos_latest
	kernel-doc-4.18.0-305.25.1.el8_4.noarch.rpm	628cf32e827d691eb7d19dde470ab678823ec7d7264a09646262f0a7638fa618	-	ol8_x86_64_u4_baseos_patch
	kernel-headers-4.18.0-305.25.1.el8_4.x86_64.rpm	49c9b8e6d64d449c6e352838623f25e586f07a03537337ca04068948bcb97942	-	ol8_x86_64_baseos_latest
	kernel-headers-4.18.0-305.25.1.el8_4.x86_64.rpm	49c9b8e6d64d449c6e352838623f25e586f07a03537337ca04068948bcb97942	-	ol8_x86_64_u4_baseos_patch
	kernel-modules-4.18.0-305.25.1.el8_4.x86_64.rpm	9be350a461cd36ae86c1a4af70e6f137b1ead37fa0f789853cc254ed0c096802	-	ol8_x86_64_baseos_latest
	kernel-modules-4.18.0-305.25.1.el8_4.x86_64.rpm	9be350a461cd36ae86c1a4af70e6f137b1ead37fa0f789853cc254ed0c096802	-	ol8_x86_64_u4_baseos_patch
	kernel-modules-extra-4.18.0-305.25.1.el8_4.x86_64.rpm	5a84bdbc21ebf85d5cd09cd13beedf15321a40232321bcc312dc0b8820c877e6	-	ol8_x86_64_baseos_latest
	kernel-modules-extra-4.18.0-305.25.1.el8_4.x86_64.rpm	5a84bdbc21ebf85d5cd09cd13beedf15321a40232321bcc312dc0b8820c877e6	-	ol8_x86_64_u4_baseos_patch
	kernel-tools-4.18.0-305.25.1.el8_4.x86_64.rpm	2ffcb86144732c907fdd7b4a08ca28a9ebdd0e2682276e5477e491db5bfb2f2c	-	ol8_x86_64_baseos_latest
	kernel-tools-4.18.0-305.25.1.el8_4.x86_64.rpm	2ffcb86144732c907fdd7b4a08ca28a9ebdd0e2682276e5477e491db5bfb2f2c	-	ol8_x86_64_u4_baseos_patch
	kernel-tools-libs-4.18.0-305.25.1.el8_4.x86_64.rpm	c63c8008764f4115081044520b9e46a4b86b98e75bb3e5bc5009f4697937149a	-	ol8_x86_64_baseos_latest
	kernel-tools-libs-4.18.0-305.25.1.el8_4.x86_64.rpm	c63c8008764f4115081044520b9e46a4b86b98e75bb3e5bc5009f4697937149a	-	ol8_x86_64_u4_baseos_patch
	kernel-tools-libs-devel-4.18.0-305.25.1.el8_4.x86_64.rpm	d84056194ce04146080a05fb4bdd02bf8a35b6f0b9a12e0c75270b5b0efd70c3	-	ol8_x86_64_codeready_builder
	perf-4.18.0-305.25.1.el8_4.x86_64.rpm	74b2209c676c4b7c0482cf7815e2803870de6281140fd49d230e7972022b4210	-	ol8_x86_64_baseos_latest
	perf-4.18.0-305.25.1.el8_4.x86_64.rpm	74b2209c676c4b7c0482cf7815e2803870de6281140fd49d230e7972022b4210	-	ol8_x86_64_u4_baseos_patch
	python3-perf-4.18.0-305.25.1.el8_4.x86_64.rpm	cbc148ff7e6bae820cf11887f5860f3fa02b6a6bec323af5400f066c37932899	-	ol8_x86_64_baseos_latest
	python3-perf-4.18.0-305.25.1.el8_4.x86_64.rpm	cbc148ff7e6bae820cf11887f5860f3fa02b6a6bec323af5400f066c37932899	-	ol8_x86_64_u4_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team