ELSA-2021-9006

ELSA-2021-9006 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-01-12

Description

[5.4.17-2036.102.0.2uek]
- xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orabug: 32260252] {CVE-2020-29569}
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568}
- xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park) [Orabug: 32253409] {CVE-2020-29568}

[5.4.17-2036.102.0.1uek]
- target: fix XCOPY NAA identifier lookup (David Disseldorp) [Orabug: 32248035] {CVE-2020-28374}

[5.4.17-2036.102.0uek]
- futex: Fix inode life-time issue (Peter Zijlstra) [Orabug: 32233515] {CVE-2020-14381}
- perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa) [Orabug: 32233352] {CVE-2020-14351}
- intel_idle: Customize IceLake server support (Chen Yu) [Orabug: 32218858]
- dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam) [Orabug: 32210418]
- vhost scsi: fix lun reset completion handling (Mike Christie) [Orabug: 32167069]
- vhost scsi: Add support for LUN resets. (Mike Christie) [Orabug: 32167069]
- vhost scsi: add lun parser helper (Mike Christie) [Orabug: 32167069]
- vhost scsi: fix cmd completion race (Mike Christie) [Orabug: 32167069]
- vhost scsi: alloc cmds per vq instead of session (Mike Christie) [Orabug: 32167069]
- vhost: Create accessors for virtqueues private_data (Eugenio Perez) [Orabug: 32167069]
- vhost: add helper to check if a vq has been setup (Mike Christie) [Orabug: 32167069]
- scsi: sd: Allow user to configure command retries (Mike Christie) [Orabug: 32167069]
- scsi: core: Add limitless cmd retry support (Mike Christie) [Orabug: 32167069]
- scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S) [Orabug: 32242279]
- scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S) [Orabug: 32242279]
- scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S) [Orabug: 32242279]
- scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S) [Orabug: 32242279]
- scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S) [Orabug: 32242279]
- scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S) [Orabug: 32242279]
- scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S) [Orabug: 32242279]
- scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S) [Orabug: 32242279]
- scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Get device objects using sas_address & portID (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Update hba_port's sas_address & phy_mask (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy) [Orabug: 32242279]
- scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S) [Orabug: 32242279]
- icmp: randomize the global rate limiter (Eric Dumazet) [Orabug: 32227958] {CVE-2020-25705}
- perf/x86/intel/uncore: Add box_offsets for free-running counters (Kan Liang) [Orabug: 32020885]
- perf/x86/intel/uncore: Factor out __snr_uncore_mmio_init_box (Kan Liang) [Orabug: 32020885]
- perf/x86/intel/uncore: Add Ice Lake server uncore support (Kan Liang) [Orabug: 32020885]

Related CVEs

CVE-2020-14351

CVE-2020-14381

CVE-2020-29568

CVE-2020-29569

CVE-2020-25705

CVE-2020-28374

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	kernel-uek-5.4.17-2036.102.0.2.el7uek.src.rpm	ffe70f3d59ccedc2c7df12a3c2269d3675c610e088af4e09b3cb531ed968a2e2	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-5.4.17-2036.102.0.2.el7uek.aarch64.rpm	305a3f3308132ac12f05ac3f7ae7c3a6e8d2500d1e35e314b3eab46debc0a789	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-debug-5.4.17-2036.102.0.2.el7uek.aarch64.rpm	cb5d12a85b872c8c8d696ec75f548e5491cf41af16b67e15f612dea7e4ec7029	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-debug-devel-5.4.17-2036.102.0.2.el7uek.aarch64.rpm	15d245cd5133cc6e923e25464be40395e0136c3acf744fc61e9a419a736b689e	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-devel-5.4.17-2036.102.0.2.el7uek.aarch64.rpm	036a55f14bcd315e795fdcfcc720be65465106530ce19e189a628fc2568fdf65	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-doc-5.4.17-2036.102.0.2.el7uek.noarch.rpm	9c44eb4aec15e70545f02289cc2f70c699b3ba5d50cc25f42ff592f5632635d7	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-tools-5.4.17-2036.102.0.2.el7uek.aarch64.rpm	b5a5eb827f8e225ee5319a0d67a0a663377afcd3d9b26aca7e3428fb92e78df2	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-tools-libs-5.4.17-2036.102.0.2.el7uek.aarch64.rpm	87e3666d1c2ef25cd4c77a45057cc0d2d015c0604772131647735c47d34f2e26	ELSA-2025-20019	ol7_aarch64_UEKR6
	perf-5.4.17-2036.102.0.2.el7uek.aarch64.rpm	57c20f5d0210eced6d046b43211dd45cba2cca319931d09591bfaff4db6054bc	ELSA-2025-20019	ol7_aarch64_UEKR6
	python-perf-5.4.17-2036.102.0.2.el7uek.aarch64.rpm	714884f449c8ed3ca22ab51f873f8df056399bdf28893d808569d2b19696004d	ELSA-2025-20019	ol7_aarch64_UEKR6
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2036.102.0.2.el7uek.src.rpm	ffe70f3d59ccedc2c7df12a3c2269d3675c610e088af4e09b3cb531ed968a2e2	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-5.4.17-2036.102.0.2.el7uek.x86_64.rpm	857ebf8664e26436f1bbd7eb508703fba4abcfe83f6f80744f52fe59be736605	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2036.102.0.2.el7uek.x86_64.rpm	58ff056224b9115aebfc1314b7a30c3a72cad42ef4ccdbede89fe5e20c637586	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2036.102.0.2.el7uek.x86_64.rpm	de4b6de48da8225dfc2e7d14f1bc536563c23bd204de698958f37b738d355029	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2036.102.0.2.el7uek.x86_64.rpm	68cba099aef27e9ff272504faedeaacbf84c2a5182bedd5efc59ec91c4e7038b	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2036.102.0.2.el7uek.noarch.rpm	9c44eb4aec15e70545f02289cc2f70c699b3ba5d50cc25f42ff592f5632635d7	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-tools-5.4.17-2036.102.0.2.el7uek.x86_64.rpm	b5e5aa6e2bcdde79b2d1edb94ed5c6c4de07b6178f8a607fbcba41f22c969192	ELSA-2025-20190	ol7_x86_64_UEKR6
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2036.102.0.2.el8uek.src.rpm	12e9ff852c002ffd8866280b597295ee344c491d307896e441925ab7e21d62dc	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2036.102.0.2.el8uek.src.rpm	12e9ff852c002ffd8866280b597295ee344c491d307896e441925ab7e21d62dc	-	ol8_aarch64_u3_baseos_patch
	kernel-uek-5.4.17-2036.102.0.2.el8uek.aarch64.rpm	5b6e4cd2938f89a6e6535d3e6a50ac20f48f9b1557b21bc3f8cc1855b6f6e707	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2036.102.0.2.el8uek.aarch64.rpm	5b6e4cd2938f89a6e6535d3e6a50ac20f48f9b1557b21bc3f8cc1855b6f6e707	-	ol8_aarch64_u3_baseos_patch
	kernel-uek-debug-5.4.17-2036.102.0.2.el8uek.aarch64.rpm	030249445efcbea5d0591f08333c9f883cb7db9a57c7ccaaec0880ebd7657d54	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-5.4.17-2036.102.0.2.el8uek.aarch64.rpm	030249445efcbea5d0591f08333c9f883cb7db9a57c7ccaaec0880ebd7657d54	-	ol8_aarch64_u3_baseos_patch
	kernel-uek-debug-devel-5.4.17-2036.102.0.2.el8uek.aarch64.rpm	cb5c9a465f852e24d0e84015e647566f557c583089653d442afe5b01e740c15f	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-devel-5.4.17-2036.102.0.2.el8uek.aarch64.rpm	cb5c9a465f852e24d0e84015e647566f557c583089653d442afe5b01e740c15f	-	ol8_aarch64_u3_baseos_patch
	kernel-uek-devel-5.4.17-2036.102.0.2.el8uek.aarch64.rpm	20928b5d9a06df75819420593d293ea72212215d79cfb1e77956e493ce23089d	-	ol8_aarch64_baseos_latest
	kernel-uek-devel-5.4.17-2036.102.0.2.el8uek.aarch64.rpm	20928b5d9a06df75819420593d293ea72212215d79cfb1e77956e493ce23089d	-	ol8_aarch64_u3_baseos_patch
	kernel-uek-doc-5.4.17-2036.102.0.2.el8uek.noarch.rpm	05480ad50d1ee3a9fce053c220524f16dc73b03dd37fa0f12db886a02923ef18	-	ol8_aarch64_baseos_latest
	kernel-uek-doc-5.4.17-2036.102.0.2.el8uek.noarch.rpm	05480ad50d1ee3a9fce053c220524f16dc73b03dd37fa0f12db886a02923ef18	-	ol8_aarch64_u3_baseos_patch
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2036.102.0.2.el8uek.src.rpm	12e9ff852c002ffd8866280b597295ee344c491d307896e441925ab7e21d62dc	-	ol8_x86_64_UEKR6
	kernel-uek-5.4.17-2036.102.0.2.el8uek.src.rpm	12e9ff852c002ffd8866280b597295ee344c491d307896e441925ab7e21d62dc	-	ol8_x86_64_baseos_latest
	kernel-uek-5.4.17-2036.102.0.2.el8uek.src.rpm	12e9ff852c002ffd8866280b597295ee344c491d307896e441925ab7e21d62dc	-	ol8_x86_64_u3_baseos_patch
	kernel-uek-5.4.17-2036.102.0.2.el8uek.x86_64.rpm	9e2de0b26d39fe00639e65c25dd27db91f3287a371cd52ef2a06b2320e0ef58f	-	ol8_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2036.102.0.2.el8uek.x86_64.rpm	41f79a0cf62c0ba8824b15c36deff0e085c259a25c819e78f2327335930815a1	-	ol8_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2036.102.0.2.el8uek.x86_64.rpm	27e1f3a3e2e22056e5b3dbec5eec93dced3ff39acc807247d0c29f46628b41d3	-	ol8_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2036.102.0.2.el8uek.x86_64.rpm	5394f9a8aef3067e961af9674010e6ec35bac2b76d51db7c01d1504c295357ce	-	ol8_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2036.102.0.2.el8uek.noarch.rpm	05480ad50d1ee3a9fce053c220524f16dc73b03dd37fa0f12db886a02923ef18	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team