ELSA-2021-4777

ELSA-2021-4777 - kernel security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-11-24

Description

[3.10.0-1160.49.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.49.1]
- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]

[3.10.0-1160.48.1]
- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]

[3.10.0-1160.47.1]
- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]

[3.10.0-1160.46.1]
- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]

Related CVEs

CVE-2020-36385

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-1160.49.1.el7.src.rpm	53a2d0eb42dc474907c46af3f04ba504d0de73c9f146af944336dcd7bea6a52d	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.49.1.el7.src.rpm	53a2d0eb42dc474907c46af3f04ba504d0de73c9f146af944336dcd7bea6a52d	ELSA-2025-1281	ol7_x86_64_optional_latest
	kernel-3.10.0-1160.49.1.el7.src.rpm	53a2d0eb42dc474907c46af3f04ba504d0de73c9f146af944336dcd7bea6a52d	ELSA-2025-1281	ol7_x86_64_u9_patch
	bpftool-3.10.0-1160.49.1.el7.x86_64.rpm	b02f5be2865a1787eab65c63138ccf502efd8eba31815a4235b3e76be844d2f5	ELSA-2025-1281	ol7_x86_64_latest
	bpftool-3.10.0-1160.49.1.el7.x86_64.rpm	b02f5be2865a1787eab65c63138ccf502efd8eba31815a4235b3e76be844d2f5	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-3.10.0-1160.49.1.el7.x86_64.rpm	45f732bd6fb351fff26d0b757babf7b869ac0eb19fb4c325855d056f84103745	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.49.1.el7.x86_64.rpm	45f732bd6fb351fff26d0b757babf7b869ac0eb19fb4c325855d056f84103745	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-abi-whitelists-3.10.0-1160.49.1.el7.noarch.rpm	fcefbe2187e506295a8a424fe34cb20cfa0224bf76ded48afa8386309f0f4f18	ELSA-2025-1281	ol7_x86_64_latest
	kernel-abi-whitelists-3.10.0-1160.49.1.el7.noarch.rpm	fcefbe2187e506295a8a424fe34cb20cfa0224bf76ded48afa8386309f0f4f18	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-3.10.0-1160.49.1.el7.x86_64.rpm	59b556426ea32ef96cb071d279941257974eb8125d57ea204d93644f9b2f5541	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-3.10.0-1160.49.1.el7.x86_64.rpm	59b556426ea32ef96cb071d279941257974eb8125d57ea204d93644f9b2f5541	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-devel-3.10.0-1160.49.1.el7.x86_64.rpm	d7b5823edadc76eb10ef7fb50fe21c76a1f61c18c03cedc0c872c234185384f4	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-devel-3.10.0-1160.49.1.el7.x86_64.rpm	d7b5823edadc76eb10ef7fb50fe21c76a1f61c18c03cedc0c872c234185384f4	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-devel-3.10.0-1160.49.1.el7.x86_64.rpm	a3b3c58538b7f0416ae038525207c7ef79b33f7a8a9b998d808222d9c2c5795f	ELSA-2025-1281	ol7_x86_64_latest
	kernel-devel-3.10.0-1160.49.1.el7.x86_64.rpm	a3b3c58538b7f0416ae038525207c7ef79b33f7a8a9b998d808222d9c2c5795f	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-doc-3.10.0-1160.49.1.el7.noarch.rpm	3abca5cdb2b51fd594197e4a9380aa4ad6d11891bef3c90a414e077c30173311	ELSA-2025-1281	ol7_x86_64_latest
	kernel-doc-3.10.0-1160.49.1.el7.noarch.rpm	3abca5cdb2b51fd594197e4a9380aa4ad6d11891bef3c90a414e077c30173311	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-headers-3.10.0-1160.49.1.el7.x86_64.rpm	57681cfa41b92a8e860f89dd5388b3d046a823fea54eafc2336a630172715167	ELSA-2025-1281	exadata_dbserver_20.1.17.0.0_x86_64_base
	kernel-headers-3.10.0-1160.49.1.el7.x86_64.rpm	57681cfa41b92a8e860f89dd5388b3d046a823fea54eafc2336a630172715167	ELSA-2025-1281	exadata_dbserver_20.1.18.0.0_x86_64_base
	kernel-headers-3.10.0-1160.49.1.el7.x86_64.rpm	57681cfa41b92a8e860f89dd5388b3d046a823fea54eafc2336a630172715167	ELSA-2025-1281	exadata_dbserver_21.2.7.0.0_x86_64_base
	kernel-headers-3.10.0-1160.49.1.el7.x86_64.rpm	57681cfa41b92a8e860f89dd5388b3d046a823fea54eafc2336a630172715167	ELSA-2025-1281	exadata_dbserver_21.2.8.0.0_x86_64_base
	kernel-headers-3.10.0-1160.49.1.el7.x86_64.rpm	57681cfa41b92a8e860f89dd5388b3d046a823fea54eafc2336a630172715167	ELSA-2025-1281	ol7_x86_64_latest
	kernel-headers-3.10.0-1160.49.1.el7.x86_64.rpm	57681cfa41b92a8e860f89dd5388b3d046a823fea54eafc2336a630172715167	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-3.10.0-1160.49.1.el7.x86_64.rpm	84460bedc8058b880c94e1d37125b66f697bba0ee14ffdb6854e08a027527a5e	ELSA-2025-1281	exadata_dbserver_21.2.7.0.0_x86_64_base
	kernel-tools-3.10.0-1160.49.1.el7.x86_64.rpm	84460bedc8058b880c94e1d37125b66f697bba0ee14ffdb6854e08a027527a5e	ELSA-2025-1281	exadata_dbserver_21.2.8.0.0_x86_64_base
	kernel-tools-3.10.0-1160.49.1.el7.x86_64.rpm	84460bedc8058b880c94e1d37125b66f697bba0ee14ffdb6854e08a027527a5e	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-3.10.0-1160.49.1.el7.x86_64.rpm	84460bedc8058b880c94e1d37125b66f697bba0ee14ffdb6854e08a027527a5e	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-3.10.0-1160.49.1.el7.x86_64.rpm	996642fd2ed927dbb5d8551a89f546d59b4bd1669a2823a54149b46a8a3574eb	ELSA-2025-1281	exadata_dbserver_21.2.7.0.0_x86_64_base
	kernel-tools-libs-3.10.0-1160.49.1.el7.x86_64.rpm	996642fd2ed927dbb5d8551a89f546d59b4bd1669a2823a54149b46a8a3574eb	ELSA-2025-1281	exadata_dbserver_21.2.8.0.0_x86_64_base
	kernel-tools-libs-3.10.0-1160.49.1.el7.x86_64.rpm	996642fd2ed927dbb5d8551a89f546d59b4bd1669a2823a54149b46a8a3574eb	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-libs-3.10.0-1160.49.1.el7.x86_64.rpm	996642fd2ed927dbb5d8551a89f546d59b4bd1669a2823a54149b46a8a3574eb	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-devel-3.10.0-1160.49.1.el7.x86_64.rpm	11dc915a8208cb3e697eb906c0f192ed53fdea3f003789aea0873375ff46f9a5	ELSA-2025-1281	ol7_x86_64_optional_latest
	perf-3.10.0-1160.49.1.el7.x86_64.rpm	96aff30ec3f54edba3feca11e2988d6b1ab78c2d9f5e1488bc9b12369f2975a9	ELSA-2025-20019	ol7_x86_64_latest
	perf-3.10.0-1160.49.1.el7.x86_64.rpm	96aff30ec3f54edba3feca11e2988d6b1ab78c2d9f5e1488bc9b12369f2975a9	ELSA-2025-20019	ol7_x86_64_u9_patch
	python-perf-3.10.0-1160.49.1.el7.x86_64.rpm	059fe9ceb909b865de8dfb8675f61441e75a05ff4248ee03867959adbc742e87	ELSA-2025-20019	ol7_x86_64_latest
	python-perf-3.10.0-1160.49.1.el7.x86_64.rpm	059fe9ceb909b865de8dfb8675f61441e75a05ff4248ee03867959adbc742e87	ELSA-2025-20019	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team