ELSA-2021-9220
- ULN >
- Oracle Linux Errata repository >
- ELSA-2021-9220
ELSA-2021-9220 - Unbreakable Enterprise kernel security update
| Type: | SECURITY |
| Impact: | IMPORTANT |
| Release Date: | 2021-05-10 |
Description
[5.4.17-2102.201.3uek]
- locking/qrwlock: Fix ordering in queued_write_lock_slowpath() (Ali Saidi) [Orabug: 32805544]
[5.4.17-2102.201.2uek]
- md/bitmap: wait for external bitmap writes to complete during tear down (Sudhakar Panneerselvam) [Orabug: 32764237]
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang) [Orabug: 32763849]
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet) [Orabug: 32760314]
- Revert 'x86/vmlinux: Use INT3 instead of NOP for linker fill bytes' (John Donnelly) [Orabug: 32576398] {CVE-2021-3411}
- iommu/vt-d: Fix agaw for a supported 48 bit guest address width (Saeed Mirzamohammadi) [Orabug: 32734148]
- LTS tag: v5.4.85 (Jack Vogel)
- x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled (Xiaochen Shen)
- x86/resctrl: Remove unused struct mbm_state::chunks_bw (James Morse)
- membarrier: Explicitly sync remote cores when SYNC_CORE is requested (Andy Lutomirski)
- Revert 'selftests/ftrace: check for do_sys_openat2 in user-memory test' (Kamal Mostafa)
- KVM: mmu: Fix SPTE encoding of MMIO generation upper half (Maciej S. Szmigiero)
- serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access (Alexander Sverdlin)
- ALSA: pcm: oss: Fix potential out-of-bounds shift (Takashi Iwai)
- USB: sisusbvga: Make console support depend on BROKEN (Thomas Gleixner)
- USB: UAS: introduce a quirk to set no_write_same (Oliver Neukum)
- xhci-pci: Allow host runtime PM as default for Intel Alpine Ridge LP (Hans de Goede)
- xhci: Give USB2 ports time to enter U3 in bus suspend (Li Jun)
- ALSA: usb-audio: Fix control 'access overflow' errors from chmap (Takashi Iwai)
- ALSA: usb-audio: Fix potential out-of-bounds shift (Takashi Iwai)
- USB: add RESET_RESUME quirk for Snapscan 1212 (Oliver Neukum)
- USB: dummy-hcd: Fix uninitialized array use in init() (Bui Quang Minh)
- ktest.pl: If size of log is too big to email, email error message (Steven Rostedt (VMware))
- net: stmmac: delete the eee_ctrl_timer after napi disabled (Fugang Duan)
- net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux (Martin Blumenstingl)
- net: ll_temac: Fix potential NULL dereference in temac_probe() (Zhang Changzhong)
- lan743x: fix for potential NULL pointer dereference with bare card (Sergej Bauer)
- tcp: fix cwnd-limited bug for TSO deferral where we send nothing (Neal Cardwell)
- tcp: select sane initial rcvq_space.space for big MSS (Eric Dumazet)
- net: stmmac: free tx skb buffer in stmmac_resume() (Fugang Duan)
- bridge: Fix a deadlock when enabling multicast snooping (Joseph Huang)
- enetc: Fix reporting of h/w packet counters (Claudiu Manoil)
- udp: fix the proto value passed to ip_protocol_deliver_rcu for the segments (Xin Long)
- net: hns3: remove a misused pragma packed (Huazhong Tan)
- vrf: packets with lladdr src needs dst at input with orig_iif when needs strict (Stephen Suryaputra)
- net: bridge: vlan: fix error return code in __vlan_add() (Zhang Changzhong)
- mac80211: mesh: fix mesh_pathtbl_init() error path (Eric Dumazet)
- ipv4: fix error return code in rtm_to_fib_config() (Zhang Changzhong)
- ptrace: Prevent kernel-infoleak in ptrace_get_syscall_info() (Peilin Ye)
- LTS tag: v5.4.84 (Jack Vogel)
- compiler.h: fix barrier_data() on clang (Arvind Sankar)
- mm/zsmalloc.c: drop ZSMALLOC_PGTABLE_MAPPING (Minchan Kim)
- x86/apic/vector: Fix ordering in vector assignment (Thomas Gleixner)
- x86/membarrier: Get rid of a dubious optimization (Andy Lutomirski)
- x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP (Arvind Sankar)
- scsi: be2iscsi: Revert 'Fix a theoretical leak in beiscsi_create_eqs()' (Dan Carpenter)
- proc: use untagged_addr() for pagemap_read addresses (Miles Chen)
- kbuild: avoid static_assert for genksyms (Arnd Bergmann)
- drm/i915/display/dp: Compute the correct slice count for VDSC on DP (Manasi Navare)
- mmc: block: Fixup condition for CMD13 polling for RPMB requests (Bean Huo)
- pinctrl: amd: remove debounce filter setting in IRQ type setting (Coiby Xu)
- Input: i8042 - add Acer laptops to the i8042 reset list (Chris Chiu)
- Input: cm109 - do not stomp on control URB (Dmitry Torokhov)
- ktest.pl: Fix incorrect reboot for grub2bls (Libo Chen)
- can: m_can: m_can_dev_setup(): add support for bosch mcan version 3.3.0 (Pankaj Sharma)
- platform/x86: touchscreen_dmi: Add info for the Irbis TW118 tablet (Hans de Goede)
- platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC (Max Verevkin)
- platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE (Timo Witte)
- platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen (Hans de Goede)
- platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e (Hans de Goede)
- arm64: tegra: Disable the ACONNECT for Jetson TX2 (Jon Hunter)
- soc: fsl: dpio: Get the cpumask through cpumask_of(cpu) (Hao Si)
- spi: spi-nxp-fspi: fix fspi panic by unexpected interrupts (Ran Wang)
- irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend (Xu Qiang)
- ibmvnic: skip tx timeout reset while in resetting (Lijun Pan)
- interconnect: qcom: qcs404: Remove GPU and display RPM IDs (Georgi Djakov)
- scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE (Can Guo)
- ARC: stack unwinding: don't assume non-current task is sleeping (Vineet Gupta)
- arm64: dts: broadcom: clear the warnings caused by empty dma-ranges (Zhen Lei)
- powerpc: Drop -me200 addition to build flags (Michael Ellerman)
- iwlwifi: mvm: fix kernel panic in case of assert during CSA (Sara Sharon)
- iwlwifi: pcie: set LTR to avoid completion timeout (Johannes Berg)
- arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards. (Markus Reichl)
- iwlwifi: pcie: limit memory read spin time (Johannes Berg)
- x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S (Fangrui Song)
- Kbuild: do not emit debug info for assembly with LLVM_IAS=1 (Nick Desaulniers)
[5.4.17-2102.201.1uek]
- IB/mlx5: Reduce max order of memory allocated for xlt update (Praveen Kumar Kannoju) [Orabug: 32751624]
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson) [Orabug: 32709120] {CVE-2021-29650}
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang) [Orabug: 32669468] {CVE-2021-28971}
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana) [Orabug: 32669450] {CVE-2021-28964}
[5.4.17-2102.201.0uek]
- uek-rpm: Update SecureBoot Digicert 2021 certificates (Jack Vogel) [Orabug: 32532663]
- RDMA/rxe: ipc_bench fails on SoftRoCE with shpd (Rao Shoaib) [Orabug: 32716155]
- vhost-vdpa: set v->config_ctx to NULL if eventfd_ctx_fdget() fails (Stefano Garzarella) [Orabug: 32696005] {CVE-2021-29266}
- vhost-vdpa: fix use-after-free of v->config_ctx (Stefano Garzarella) [Orabug: 32696005] {CVE-2021-29266}
- fuse: fix live lock in fuse_iget() (Amir Goldstein) [Orabug: 32669269] {CVE-2021-28950}
- fuse: fix bad inode (Miklos Szeredi) [Orabug: 32669269] {CVE-2021-28950}
- RDMA/core: Fix corrupted SL on passive side (Hakon Bugge) [Orabug: 32662965]
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich) [Orabug: 32651473] {CVE-2021-28038}
- RDMA/rxe: Compute the maximum sges and inline size based on the WQE size (Rao Shoaib) [Orabug: 32648060]
- KVM: kvmclock: Fix vCPUs > 64 can't be online/hotpluged (Wanpeng Li) [Orabug: 32641672]
- xen/netback: avoid race in xenvif_rx_ring_slots_available() (Juergen Gross) [Orabug: 32640116]
- uek-rpm: ol7: aarch64: add CONFIG_ACPI_HOTPLUG_MEMORY (Mihai Carabas) [Orabug: 32638660]
- KVM: SVM: Disable AVIC before setting V_IRQ (Suravee Suthikulpanit) [Orabug: 32603569]
- KVM: Introduce kvm_make_all_cpus_request_except() (Suravee Suthikulpanit) [Orabug: 32603569]
- KVM: X86: correct meaningless kvm_apicv_activated() check (Paolo Bonzini) [Orabug: 32603569]
- KVM: Disable preemption in kvm_get_running_vcpu() (Marc Zyngier) [Orabug: 32603569]
- KVM: Move running VCPU from ARM to common code (Paolo Bonzini) [Orabug: 32603569]
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich) [Orabug: 32697850] {CVE-2021-28688}
- video: hyperv_fb: Fix the mmap() regression for v5.4.y and older (Dexuan Cui) [Orabug: 32651461]
Related CVEs
| CVE-2021-28038 |
| CVE-2021-28688 |
| CVE-2021-28964 |
| CVE-2021-3411 |
| CVE-2021-29266 |
| CVE-2021-28950 |
| CVE-2021-28971 |
| CVE-2021-29650 |
Updated Packages
| Release/Architecture | Filename | sha256 | Superseded By Advisory | Channel Label |
| Oracle Linux 7 (aarch64) | kernel-uek-5.4.17-2102.201.3.el7uek.src.rpm | f07af591ea2fb5df2ac54fd4c99ce209d060ef0cc2c5ec6a4c27637c86748870 | ELSA-2025-20190 | ol7_aarch64_UEKR6 |
| kernel-uek-5.4.17-2102.201.3.el7uek.aarch64.rpm | 227775be38334691e9cbc46466be671608eb5f7a21bd06f17245964157206507 | ELSA-2025-20190 | ol7_aarch64_UEKR6 | |
| kernel-uek-debug-5.4.17-2102.201.3.el7uek.aarch64.rpm | 2b569cd2bcdd803f3fd0f73dcfc121292d151d69207ced7db8ae94b617d31685 | ELSA-2025-20190 | ol7_aarch64_UEKR6 | |
| kernel-uek-debug-devel-5.4.17-2102.201.3.el7uek.aarch64.rpm | ade12d007d61731b87f57fa4ef13b5feea402a766dd7fe326ad577591ca3c0e9 | ELSA-2025-20190 | ol7_aarch64_UEKR6 | |
| kernel-uek-devel-5.4.17-2102.201.3.el7uek.aarch64.rpm | 698cafc16d5694cc52895e3d2f12d7ef52689184a6784b2fd731711c874d1e9b | ELSA-2025-20190 | ol7_aarch64_UEKR6 | |
| kernel-uek-doc-5.4.17-2102.201.3.el7uek.noarch.rpm | 1abbee77ccec7be6b0ebd637add4efc2173403b388cad2c6fb813a44f061dee9 | ELSA-2025-20190 | ol7_aarch64_UEKR6 | |
| kernel-uek-tools-5.4.17-2102.201.3.el7uek.aarch64.rpm | fbe8f78831a3e43a669dc1ade1653f982d5b75e56366654612897dd0da82bb5d | ELSA-2025-20190 | ol7_aarch64_UEKR6 | |
| kernel-uek-tools-libs-5.4.17-2102.201.3.el7uek.aarch64.rpm | febf1b9ef2bdd1bda54107c4e6cd0cc4cc79cbc5df2163fb7597186bf25fb754 | ELSA-2025-20019 | ol7_aarch64_UEKR6 | |
| perf-5.4.17-2102.201.3.el7uek.aarch64.rpm | c1613b0e09b6b45122f3e01519ad341fa6d78a42d0928a9ddf92c446ccb5c024 | ELSA-2025-20019 | ol7_aarch64_UEKR6 | |
| python-perf-5.4.17-2102.201.3.el7uek.aarch64.rpm | 469ec81b2ca1bf0444b6629801da2e8bca684cb7b7504049a206438eb452bb37 | ELSA-2025-20019 | ol7_aarch64_UEKR6 | |
| Oracle Linux 7 (x86_64) | kernel-uek-5.4.17-2102.201.3.el7uek.src.rpm | f07af591ea2fb5df2ac54fd4c99ce209d060ef0cc2c5ec6a4c27637c86748870 | ELSA-2025-20190 | ol7_x86_64_UEKR6 |
| kernel-uek-5.4.17-2102.201.3.el7uek.x86_64.rpm | 9a7a02996e6a24a31af44677e496212300caaa34a554e301bb13eb2c93e8aa27 | ELSA-2025-20190 | ol7_x86_64_UEKR6 | |
| kernel-uek-debug-5.4.17-2102.201.3.el7uek.x86_64.rpm | 9f1193e85fcf5a2f6c5082392ce89dae8cb03282b7213a325c88d35a71d28e50 | ELSA-2025-20190 | ol7_x86_64_UEKR6 | |
| kernel-uek-debug-devel-5.4.17-2102.201.3.el7uek.x86_64.rpm | 8043dd4bd028c0c704a5f0325f7cca536571fedbbe7e841377cebd701238989c | ELSA-2025-20190 | ol7_x86_64_UEKR6 | |
| kernel-uek-devel-5.4.17-2102.201.3.el7uek.x86_64.rpm | ff2e50cb70522f2cf32b676daa295e969606a388c841b2de785db210b04c4693 | ELSA-2025-20190 | ol7_x86_64_UEKR6 | |
| kernel-uek-doc-5.4.17-2102.201.3.el7uek.noarch.rpm | 1abbee77ccec7be6b0ebd637add4efc2173403b388cad2c6fb813a44f061dee9 | ELSA-2025-20190 | ol7_x86_64_UEKR6 | |
| kernel-uek-tools-5.4.17-2102.201.3.el7uek.x86_64.rpm | d457f043df27a0547c8b4b59a5386b0d19462aaec09cfe3670fa3fc7a7e930fb | ELSA-2025-20190 | ol7_x86_64_UEKR6 | |
| Oracle Linux 8 (aarch64) | kernel-uek-5.4.17-2102.201.3.el8uek.src.rpm | ecb7405546b9fcd8b2e455f8722030ff86f62a2713d123d5c68e4fad3c5c1fc6 | - | ol8_aarch64_baseos_latest |
| kernel-uek-5.4.17-2102.201.3.el8uek.src.rpm | ecb7405546b9fcd8b2e455f8722030ff86f62a2713d123d5c68e4fad3c5c1fc6 | - | ol8_aarch64_u3_baseos_patch | |
| kernel-uek-5.4.17-2102.201.3.el8uek.src.rpm | ecb7405546b9fcd8b2e455f8722030ff86f62a2713d123d5c68e4fad3c5c1fc6 | - | ol8_aarch64_u4_baseos_base | |
| kernel-uek-5.4.17-2102.201.3.el8uek.aarch64.rpm | 776c166efcc4b852e298d66c3de3e845a3ff2c7ea07e92d5ed4070497c1c2947 | - | ol8_aarch64_baseos_latest | |
| kernel-uek-5.4.17-2102.201.3.el8uek.aarch64.rpm | 776c166efcc4b852e298d66c3de3e845a3ff2c7ea07e92d5ed4070497c1c2947 | - | ol8_aarch64_u3_baseos_patch | |
| kernel-uek-5.4.17-2102.201.3.el8uek.aarch64.rpm | 776c166efcc4b852e298d66c3de3e845a3ff2c7ea07e92d5ed4070497c1c2947 | - | ol8_aarch64_u4_baseos_base | |
| kernel-uek-debug-5.4.17-2102.201.3.el8uek.aarch64.rpm | 0e3715a4829729a2e3d9553613c975b0b782158bdef29acef714489408611a39 | - | ol8_aarch64_baseos_latest | |
| kernel-uek-debug-5.4.17-2102.201.3.el8uek.aarch64.rpm | 0e3715a4829729a2e3d9553613c975b0b782158bdef29acef714489408611a39 | - | ol8_aarch64_u3_baseos_patch | |
| kernel-uek-debug-5.4.17-2102.201.3.el8uek.aarch64.rpm | 0e3715a4829729a2e3d9553613c975b0b782158bdef29acef714489408611a39 | - | ol8_aarch64_u4_baseos_base | |
| kernel-uek-debug-devel-5.4.17-2102.201.3.el8uek.aarch64.rpm | af2d9acdfc84fca0bf1069d15529ba7b03f77e588bc669910d66bf0237c966dd | - | ol8_aarch64_baseos_latest | |
| kernel-uek-debug-devel-5.4.17-2102.201.3.el8uek.aarch64.rpm | af2d9acdfc84fca0bf1069d15529ba7b03f77e588bc669910d66bf0237c966dd | - | ol8_aarch64_u3_baseos_patch | |
| kernel-uek-debug-devel-5.4.17-2102.201.3.el8uek.aarch64.rpm | af2d9acdfc84fca0bf1069d15529ba7b03f77e588bc669910d66bf0237c966dd | - | ol8_aarch64_u4_baseos_base | |
| kernel-uek-devel-5.4.17-2102.201.3.el8uek.aarch64.rpm | e35eab6741f9b6c0c6ca8dd42b53bd2f9508603ae3396b72139430f3a33b434b | - | ol8_aarch64_baseos_latest | |
| kernel-uek-devel-5.4.17-2102.201.3.el8uek.aarch64.rpm | e35eab6741f9b6c0c6ca8dd42b53bd2f9508603ae3396b72139430f3a33b434b | - | ol8_aarch64_u3_baseos_patch | |
| kernel-uek-devel-5.4.17-2102.201.3.el8uek.aarch64.rpm | e35eab6741f9b6c0c6ca8dd42b53bd2f9508603ae3396b72139430f3a33b434b | - | ol8_aarch64_u4_baseos_base | |
| kernel-uek-doc-5.4.17-2102.201.3.el8uek.noarch.rpm | 892ad490fede6f36d6164640eb3831c892b464b5fffc71b5a208a8e778e7624e | - | ol8_aarch64_baseos_latest | |
| kernel-uek-doc-5.4.17-2102.201.3.el8uek.noarch.rpm | 892ad490fede6f36d6164640eb3831c892b464b5fffc71b5a208a8e778e7624e | - | ol8_aarch64_u3_baseos_patch | |
| kernel-uek-doc-5.4.17-2102.201.3.el8uek.noarch.rpm | 892ad490fede6f36d6164640eb3831c892b464b5fffc71b5a208a8e778e7624e | - | ol8_aarch64_u4_baseos_base | |
| Oracle Linux 8 (x86_64) | kernel-uek-5.4.17-2102.201.3.el8uek.src.rpm | ecb7405546b9fcd8b2e455f8722030ff86f62a2713d123d5c68e4fad3c5c1fc6 | - | ol8_x86_64_UEKR6 |
| kernel-uek-5.4.17-2102.201.3.el8uek.x86_64.rpm | 26962a62de25f49959d896c0b71eee89b199705df2d751af3401e24d20c8a3af | - | ol8_x86_64_UEKR6 | |
| kernel-uek-debug-5.4.17-2102.201.3.el8uek.x86_64.rpm | 55914d5450e026b9890fd930ce954ac67d1b35f1d8ee8191902b0209a00b6164 | - | ol8_x86_64_UEKR6 | |
| kernel-uek-debug-devel-5.4.17-2102.201.3.el8uek.x86_64.rpm | 7b608b53a1dd5b0dbef7aaf2ce988bb2525272e8acb17b6b3efbb9d42f998a80 | - | ol8_x86_64_UEKR6 | |
| kernel-uek-devel-5.4.17-2102.201.3.el8uek.x86_64.rpm | 7e911e3449cbd462ff80cd052a4ee6323143d96da760d5457fb2d62a921aca39 | - | ol8_x86_64_UEKR6 | |
| kernel-uek-doc-5.4.17-2102.201.3.el8uek.noarch.rpm | 892ad490fede6f36d6164640eb3831c892b464b5fffc71b5a208a8e778e7624e | - | ol8_x86_64_UEKR6 | |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team
