ELSA-2021-9215

ELSA-2021-9215 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2021-05-06

Description

[4.1.12-124.50.2]
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana) [Orabug: 32669454] {CVE-2021-28964}
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich) [Orabug: 32697855] {CVE-2021-28688}
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson) [Orabug: 32709125] {CVE-2021-29650}
- netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [Orabug: 32709125] {CVE-2021-29650}
- do_epoll_ctl(): clean the failure exits up a bit (Al Viro) [Orabug: 32759496] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Marc Zyngier) [Orabug: 32759496] {CVE-2020-0466}
- HID: core: Sanitize event code and type when mapping input (Marc Zyngier) [Orabug: 32759553] {CVE-2020-0465}

[4.1.12-124.50.1]
- floppy: fix lock_fdc() signal handling (Jiri Kosina) [Orabug: 32624116] {CVE-2021-20261}
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich) [Orabug: 32651478] {CVE-2021-28038}
- n_tty: Fix stall at n_tty_receive_char_special(). (Tetsuo Handa) [Orabug: 32656942] {CVE-2021-20219}
- fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (Eddy Wu) [Orabug: 32695783] {CVE-2020-35508}
- Return EBUSY from BLKRRPART for mounted whole-dev fs (Eric Sandeen) [Orabug: 32696741]
- SecureBoot Digicert 2021 certificates update (Brian Maly) [Orabug: 32734505]

Related CVEs

CVE-2020-0466

CVE-2021-28038

CVE-2020-0465

CVE-2020-35508

CVE-2021-20219

CVE-2021-20261

CVE-2021-28688

CVE-2021-28964

CVE-2021-29650

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.50.2.el6uek.src.rpm	30267d0b53891d28bbf2ee9996981a50	-
	kernel-uek-4.1.12-124.50.2.el6uek.x86_64.rpm	eb85bbf412362dd30042c1206572a1c4	-
	kernel-uek-debug-4.1.12-124.50.2.el6uek.x86_64.rpm	8aa55fae2b551120cb7985786b908f02	-
	kernel-uek-debug-devel-4.1.12-124.50.2.el6uek.x86_64.rpm	87e17a073ca3f88364b453ff0ba3e91c	-
	kernel-uek-devel-4.1.12-124.50.2.el6uek.x86_64.rpm	19469a8954f9ca573189141c142be303	-
	kernel-uek-doc-4.1.12-124.50.2.el6uek.noarch.rpm	086038977c09f8ba9d5123bf44bd0167	-
	kernel-uek-firmware-4.1.12-124.50.2.el6uek.noarch.rpm	fa0dc0d0d098ee5a1c3c9891ed1e8112	-
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.50.2.el7uek.src.rpm	634c52e81a1ff24d737daedd65b6af9b	ELSA-2021-9220
	kernel-uek-4.1.12-124.50.2.el7uek.x86_64.rpm	3d8aaec4b19cd3c8a513e93e1de3fc97	ELSA-2021-9220
	kernel-uek-debug-4.1.12-124.50.2.el7uek.x86_64.rpm	ad4649ad0cdb4e950ec61725ed45e6da	ELSA-2021-9220
	kernel-uek-debug-devel-4.1.12-124.50.2.el7uek.x86_64.rpm	9b4fea696a7b7dfec275f990ac254588	ELSA-2021-9220
	kernel-uek-devel-4.1.12-124.50.2.el7uek.x86_64.rpm	1a226c0fff018754511ab096e6d96369	ELSA-2021-9220
	kernel-uek-doc-4.1.12-124.50.2.el7uek.noarch.rpm	880363cdd41366a7995600ff54b15f38	ELSA-2021-9220
	kernel-uek-firmware-4.1.12-124.50.2.el7uek.noarch.rpm	7966d5a8c802543d01461fce8d645479	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team