ELSA-2021-5227

ELSA-2021-5227 - kernel security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2021-12-22

Description

[4.18.0-348.7.1_5.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-348.7.1_5]
- sched: Fix CPU hotplug / tighten is_per_cpu_kthread() (Waiman Long) [2026450 2024869]
- sched: Prepare to use balance_push in ttwu() (Waiman Long) [2026450 2024869]
- sched: Don't run cpu-online with balance_push() enabled (Waiman Long) [2026450 2024869]
- workqueue: Tag bound workers with KTHREAD_IS_PER_CPU (Waiman Long) [2026450 2024869]
- workqueue: Use cpu_possible_mask instead of cpu_active_mask to break affinity (Waiman Long) [2026450 2024869]
- sched: Fix hotplug vs CPU bandwidth control (Waiman Long) [2026450 2024869]
- workqueue: Manually break affinity on hotplug (Waiman Long) [2026450 2024869]
- sched/hotplug: Consolidate task migration on CPU unplug (Waiman Long) [2026450 2024869]
- sched/core: Wait for tasks being pushed away on hotplug (Waiman Long) [2026450 2024869]

[4.18.0-348.6.1_5]
- x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically (Prarit Bhargava) [2024678 2021219]

[4.18.0-348.5.1_5]
- blk-mq: still set q->make_request_fn for blk-mq (Ming Lei) [2016384 1999728]

[4.18.0-348.4.1_5]
- [RHEL8.6 BZ 1849234] cifs: report error instead of invalid when revalidating a dentry fails (Ronnie Sahlberg) [2017177 1849234]
- kthread: Fix PF_KTHREAD vs to_kthread() race (Waiman Long) [2010333 2001497]
- sched/fair: Ignore percpu threads for imbalance pulls (Waiman Long) [2010333 2001497]
- kthread: Extract KTHREAD_IS_PER_CPU (Waiman Long) [2010333 2001497]
- sched: Optimize finish_lock_switch() (Waiman Long) [2010333 2001497]
- sched/hotplug: Ensure only per-cpu kthreads run during hotplug (Waiman Long) [2010333 2001497]
- sched: Fix balance_callback() (Waiman Long) [2010333 2001497]

[4.18.0-348.3.1_5]
- net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2021165 2016005]
- ovl: fix missing negative dentry check in ovl_rename() (Miklos Szeredi) [2016378 2010887 2013318] {CVE-2021-20321}

Related CVEs

CVE-2021-20321

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	kernel-4.18.0-348.7.1.el8_5.src.rpm	3875af33629522007370a361e77247cb	-
	bpftool-4.18.0-348.7.1.el8_5.aarch64.rpm	40b958634e0760a7cd1a4862364e2454	-
	kernel-cross-headers-4.18.0-348.7.1.el8_5.aarch64.rpm	02f87c3684056d73aeb4260225ebad55	-
	kernel-headers-4.18.0-348.7.1.el8_5.aarch64.rpm	0ed653cbfebd483cb69de5c1a1e3aa2d	-
	kernel-tools-4.18.0-348.7.1.el8_5.aarch64.rpm	df73e156370410ab280d9373beea92f5	-
	kernel-tools-libs-4.18.0-348.7.1.el8_5.aarch64.rpm	382c3835305733ec0701564936aa79ea	-
	kernel-tools-libs-devel-4.18.0-348.7.1.el8_5.aarch64.rpm	37923ac60ecf8ff42fe21373d5c66008	-
	perf-4.18.0-348.7.1.el8_5.aarch64.rpm	11527d3aa9334ce4ceeb19d03ced004d	-
	python3-perf-4.18.0-348.7.1.el8_5.aarch64.rpm	a20085aee2eaaf94b87e0e9f593326bd	-
Oracle Linux 8 (x86_64)	kernel-4.18.0-348.7.1.el8_5.src.rpm	3875af33629522007370a361e77247cb	-
	bpftool-4.18.0-348.7.1.el8_5.x86_64.rpm	5fff096dd9b24c1d465f4813e2850997	-
	kernel-4.18.0-348.7.1.el8_5.x86_64.rpm	83ec5fc2bd37c2d57347e54c94d3700d	-
	kernel-abi-stablelists-4.18.0-348.7.1.el8_5.noarch.rpm	beee5d65a846c8ff551c6f05cc0a8858	-
	kernel-core-4.18.0-348.7.1.el8_5.x86_64.rpm	1db581bfe8b4eb4cb03064dd79e58e0e	-
	kernel-cross-headers-4.18.0-348.7.1.el8_5.x86_64.rpm	13ea6e4512dcedabf13107029e90fe9a	-
	kernel-debug-4.18.0-348.7.1.el8_5.x86_64.rpm	796470a50e883059ca072ccebb23d1b5	-
	kernel-debug-core-4.18.0-348.7.1.el8_5.x86_64.rpm	74677862717f8ee380bdd6113ccf0b2a	-
	kernel-debug-devel-4.18.0-348.7.1.el8_5.x86_64.rpm	4c934944f389e2b154acb5c03a0862a1	-
	kernel-debug-modules-4.18.0-348.7.1.el8_5.x86_64.rpm	f6f5a65230a6cfd6ec90801ed60fddf1	-
	kernel-debug-modules-extra-4.18.0-348.7.1.el8_5.x86_64.rpm	bb3d584bee3e314f02afee9db4c0b79d	-
	kernel-devel-4.18.0-348.7.1.el8_5.x86_64.rpm	27d262aa3c769be20750652e82153130	-
	kernel-doc-4.18.0-348.7.1.el8_5.noarch.rpm	925443f6bedb6e90cf21ab60505e77ef	-
	kernel-headers-4.18.0-348.7.1.el8_5.x86_64.rpm	6408188077e096846d6df09deebfbae3	-
	kernel-modules-4.18.0-348.7.1.el8_5.x86_64.rpm	3e600c7f9112d4033bc156303972bf91	-
	kernel-modules-extra-4.18.0-348.7.1.el8_5.x86_64.rpm	2ec836dff7981208e359662108b627ba	-
	kernel-tools-4.18.0-348.7.1.el8_5.x86_64.rpm	da585ca9d28c46b8c11cd40177b5a7fd	-
	kernel-tools-libs-4.18.0-348.7.1.el8_5.x86_64.rpm	84307ad1e182bdd9aee5b278f96b2fc1	-
	kernel-tools-libs-devel-4.18.0-348.7.1.el8_5.x86_64.rpm	5202ae22730b714a39acf89df0da533c	-
	perf-4.18.0-348.7.1.el8_5.x86_64.rpm	89374359af5779fa95ffcce61cb3d31a	-
	python3-perf-4.18.0-348.7.1.el8_5.x86_64.rpm	bced0df818800301048795c0af9a8ae4	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team