ELSA-2021-9222

ELSA-2021-9222 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-05-10

Description

[4.14.35-2047.503.1]
- bpf, x86: Validate computation of branch displacements for x86-64 (Piotr Krysiuk) [Orabug: 32759961] {CVE-2021-29154}
- uek-rpm: Add Amazon Elastic Network Adapter module to nano rpm. (Somasundaram Krishnasamy) [Orabug: 32781585]
- ext4: handle error of ext4_setup_system_zone() on remount (Jan Kara) [Orabug: 32656590] {CVE-2021-3428}

[4.14.35-2047.503.0]
- tcp: do not mess with cloned skbs in tcp_add_backlog() (Eric Dumazet) [Orabug: 32660047]
- iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (Suravee Suthikulpanit) [Orabug: 32640437]
- iommu/amd: Increase interrupt remapping table limit to 512 entries (Suravee Suthikulpanit) [Orabug: 32640437]
- rds: ib: move statistics counting from caller to callee in rds_ib_recv_refill (Hakon Bugge) [Orabug: 32702021]
- uek-rpm: Enable IRQ time accounting option for UEK5 (Saeed Mirzamohammadi) [Orabug: 32733985]
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana) [Orabug: 32669453] {CVE-2021-28964}
- perf/x86/intel: Fix a crash caused by zero PEBS status (Kan Liang) [Orabug: 32669472] {CVE-2021-28971}
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich) [Orabug: 32697854] {CVE-2021-28688}
- ocfs2: fix deadlock between setattr and dio_end_io_write (Wengang Wang) [Orabug: 32545320]
- rds: Add code to debug rds_tcp loopback hang (Rao Shoaib) [Orabug: 32422982]
- bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk) [Orabug: 32656764] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk) [Orabug: 32656764] {CVE-2020-27170} {CVE-2020-27171}
- bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk) [Orabug: 32656764] {CVE-2020-27170} {CVE-2020-27171}
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson) [Orabug: 32709123] {CVE-2021-29650}
- netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [Orabug: 32709123] {CVE-2021-29650}

Related CVEs

CVE-2020-27171

CVE-2021-28971

CVE-2021-29650

CVE-2021-28688

CVE-2021-3428

CVE-2021-28964

CVE-2021-29154

CVE-2020-27170

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	kernel-uek-4.14.35-2047.503.1.el7uek.src.rpm	c4f0e52a8ee7f8cd780f4524020a7942f9c79c1acfc025995ccdad7c0e1ed92f	ELSA-2025-20190	ol7_aarch64_developer_UEKR5
	kernel-uek-4.14.35-2047.503.1.el7uek.src.rpm	c4f0e52a8ee7f8cd780f4524020a7942f9c79c1acfc025995ccdad7c0e1ed92f	ELSA-2025-20190	ol7_aarch64_latest
	kernel-uek-4.14.35-2047.503.1.el7uek.src.rpm	c4f0e52a8ee7f8cd780f4524020a7942f9c79c1acfc025995ccdad7c0e1ed92f	ELSA-2025-20190	ol7_aarch64_u9_patch
	kernel-uek-4.14.35-2047.503.1.el7uek.aarch64.rpm	12d5cd9bb6e7331ed30fea25bc5040b88fa873bd94082d4913251340fc8bea3f	ELSA-2025-20190	ol7_aarch64_developer_UEKR5
	kernel-uek-4.14.35-2047.503.1.el7uek.aarch64.rpm	12d5cd9bb6e7331ed30fea25bc5040b88fa873bd94082d4913251340fc8bea3f	ELSA-2025-20190	ol7_aarch64_latest
	kernel-uek-4.14.35-2047.503.1.el7uek.aarch64.rpm	12d5cd9bb6e7331ed30fea25bc5040b88fa873bd94082d4913251340fc8bea3f	ELSA-2025-20190	ol7_aarch64_u9_patch
	kernel-uek-debug-4.14.35-2047.503.1.el7uek.aarch64.rpm	23697b98e36dad100421423f9b6ed7f271d22869c35ee3e7243b3f472f13956d	ELSA-2025-20190	ol7_aarch64_developer_UEKR5
	kernel-uek-debug-4.14.35-2047.503.1.el7uek.aarch64.rpm	23697b98e36dad100421423f9b6ed7f271d22869c35ee3e7243b3f472f13956d	ELSA-2025-20190	ol7_aarch64_latest
	kernel-uek-debug-4.14.35-2047.503.1.el7uek.aarch64.rpm	23697b98e36dad100421423f9b6ed7f271d22869c35ee3e7243b3f472f13956d	ELSA-2025-20190	ol7_aarch64_u9_patch
	kernel-uek-debug-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	db26ca4339c8d58608e349099b7f6999c1cd78a126c1818c5cc72510d1f71d32	ELSA-2025-20190	ol7_aarch64_developer_UEKR5
	kernel-uek-debug-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	db26ca4339c8d58608e349099b7f6999c1cd78a126c1818c5cc72510d1f71d32	ELSA-2025-20190	ol7_aarch64_latest
	kernel-uek-debug-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	db26ca4339c8d58608e349099b7f6999c1cd78a126c1818c5cc72510d1f71d32	ELSA-2025-20190	ol7_aarch64_u9_patch
	kernel-uek-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	9850d9710ecc20984d81dccc5ecfeaa4db68c826677377c9b358a9d1b605cc7f	ELSA-2025-20190	ol7_aarch64_developer_UEKR5
	kernel-uek-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	9850d9710ecc20984d81dccc5ecfeaa4db68c826677377c9b358a9d1b605cc7f	ELSA-2025-20190	ol7_aarch64_latest
	kernel-uek-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	9850d9710ecc20984d81dccc5ecfeaa4db68c826677377c9b358a9d1b605cc7f	ELSA-2025-20190	ol7_aarch64_u9_patch
	kernel-uek-headers-4.14.35-2047.503.1.el7uek.aarch64.rpm	d4245c2185c073f7a0f3908f0db9c6e23271e0bb2a61c45de12466c9759d36cc	ELBA-2025-20014	ol7_aarch64_developer_UEKR5
	kernel-uek-headers-4.14.35-2047.503.1.el7uek.aarch64.rpm	d4245c2185c073f7a0f3908f0db9c6e23271e0bb2a61c45de12466c9759d36cc	ELBA-2025-20014	ol7_aarch64_latest
	kernel-uek-headers-4.14.35-2047.503.1.el7uek.aarch64.rpm	d4245c2185c073f7a0f3908f0db9c6e23271e0bb2a61c45de12466c9759d36cc	ELBA-2025-20014	ol7_aarch64_u9_patch
	kernel-uek-tools-4.14.35-2047.503.1.el7uek.aarch64.rpm	8167cefcbb02c5273859166abf21b5f5d0674fc44d3f50f7f4b8f641668a3a54	ELSA-2025-20190	ol7_aarch64_developer_UEKR5
	kernel-uek-tools-4.14.35-2047.503.1.el7uek.aarch64.rpm	8167cefcbb02c5273859166abf21b5f5d0674fc44d3f50f7f4b8f641668a3a54	ELSA-2025-20190	ol7_aarch64_latest
	kernel-uek-tools-4.14.35-2047.503.1.el7uek.aarch64.rpm	8167cefcbb02c5273859166abf21b5f5d0674fc44d3f50f7f4b8f641668a3a54	ELSA-2025-20190	ol7_aarch64_u9_patch
	kernel-uek-tools-libs-4.14.35-2047.503.1.el7uek.aarch64.rpm	4a369f08efda53c853b0e9e457c3e6dfea832f69078e15bd0034377d6f2748d8	ELSA-2025-20019	ol7_aarch64_developer_UEKR5
	kernel-uek-tools-libs-4.14.35-2047.503.1.el7uek.aarch64.rpm	4a369f08efda53c853b0e9e457c3e6dfea832f69078e15bd0034377d6f2748d8	ELSA-2025-20019	ol7_aarch64_latest
	kernel-uek-tools-libs-4.14.35-2047.503.1.el7uek.aarch64.rpm	4a369f08efda53c853b0e9e457c3e6dfea832f69078e15bd0034377d6f2748d8	ELSA-2025-20019	ol7_aarch64_u9_patch
	kernel-uek-tools-libs-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	e4baeedb5303b86c58e3837a37edfa893b88b1cb8190943b1a715f8814cf4a0e	ELBA-2025-20014	ol7_aarch64_developer_UEKR5
	kernel-uek-tools-libs-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	e4baeedb5303b86c58e3837a37edfa893b88b1cb8190943b1a715f8814cf4a0e	ELBA-2025-20014	ol7_aarch64_latest
	kernel-uek-tools-libs-devel-4.14.35-2047.503.1.el7uek.aarch64.rpm	e4baeedb5303b86c58e3837a37edfa893b88b1cb8190943b1a715f8814cf4a0e	ELBA-2025-20014	ol7_aarch64_u9_patch
	perf-4.14.35-2047.503.1.el7uek.aarch64.rpm	7c080e2d98d19828a41ff112aab6838244e094286a8317defccd2a98779332d3	ELSA-2025-20019	ol7_aarch64_latest
	perf-4.14.35-2047.503.1.el7uek.aarch64.rpm	7c080e2d98d19828a41ff112aab6838244e094286a8317defccd2a98779332d3	ELSA-2025-20019	ol7_aarch64_u9_patch
	python-perf-4.14.35-2047.503.1.el7uek.aarch64.rpm	b1951aef3d95b9c9673fd79397c34ff30f17a386eabbd7cd7dc414cefdf07bb2	ELSA-2025-20019	ol7_aarch64_latest
	python-perf-4.14.35-2047.503.1.el7uek.aarch64.rpm	b1951aef3d95b9c9673fd79397c34ff30f17a386eabbd7cd7dc414cefdf07bb2	ELSA-2025-20019	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	kernel-uek-4.14.35-2047.503.1.el7uek.src.rpm	c4f0e52a8ee7f8cd780f4524020a7942f9c79c1acfc025995ccdad7c0e1ed92f	ELSA-2025-20190	ol7_x86_64_UEKR5
	kernel-uek-4.14.35-2047.503.1.el7uek.src.rpm	c4f0e52a8ee7f8cd780f4524020a7942f9c79c1acfc025995ccdad7c0e1ed92f	ELSA-2025-20190	ol7_x86_64_developer_UEKR5
	kernel-uek-4.14.35-2047.503.1.el7uek.x86_64.rpm	5c5a8ccb80296a300553cec62c699da712de19626746050b082612777c6f54a4	ELSA-2025-20190	ol7_x86_64_UEKR5
	kernel-uek-4.14.35-2047.503.1.el7uek.x86_64.rpm	5c5a8ccb80296a300553cec62c699da712de19626746050b082612777c6f54a4	ELSA-2025-20190	ol7_x86_64_developer_UEKR5
	kernel-uek-debug-4.14.35-2047.503.1.el7uek.x86_64.rpm	335a9848f9f046370476fdfee86e42e8da4352ef056e173724fea0f7784d1d22	ELSA-2025-20190	ol7_x86_64_UEKR5
	kernel-uek-debug-4.14.35-2047.503.1.el7uek.x86_64.rpm	335a9848f9f046370476fdfee86e42e8da4352ef056e173724fea0f7784d1d22	ELSA-2025-20190	ol7_x86_64_developer_UEKR5
	kernel-uek-debug-devel-4.14.35-2047.503.1.el7uek.x86_64.rpm	54a9fc93e832015802888a1e92f284d38fdaf30b9ec6b7883891c261fa7b520b	ELSA-2025-20190	ol7_x86_64_UEKR5
	kernel-uek-debug-devel-4.14.35-2047.503.1.el7uek.x86_64.rpm	54a9fc93e832015802888a1e92f284d38fdaf30b9ec6b7883891c261fa7b520b	ELSA-2025-20190	ol7_x86_64_developer_UEKR5
	kernel-uek-devel-4.14.35-2047.503.1.el7uek.x86_64.rpm	34332f0d49bd2a77e29c88935e4ccf176f77ac5e1c29c03dedca715134fdc377	ELSA-2025-20190	ol7_x86_64_UEKR5
	kernel-uek-devel-4.14.35-2047.503.1.el7uek.x86_64.rpm	34332f0d49bd2a77e29c88935e4ccf176f77ac5e1c29c03dedca715134fdc377	ELSA-2025-20190	ol7_x86_64_developer_UEKR5
	kernel-uek-doc-4.14.35-2047.503.1.el7uek.noarch.rpm	f6cb6e72df7a2a6096e1ed4f07e420b8ea45d8fe99b59ecf6bc86e1363b0a5d3	ELSA-2025-20190	ol7_x86_64_UEKR5
	kernel-uek-doc-4.14.35-2047.503.1.el7uek.noarch.rpm	f6cb6e72df7a2a6096e1ed4f07e420b8ea45d8fe99b59ecf6bc86e1363b0a5d3	ELSA-2025-20190	ol7_x86_64_developer_UEKR5
	kernel-uek-tools-4.14.35-2047.503.1.el7uek.x86_64.rpm	376906c103c1860244c26aa0cd5d4eab26590ae510805ae236ebeb11cd27fb71	ELSA-2025-20190	ol7_x86_64_UEKR5
	kernel-uek-tools-4.14.35-2047.503.1.el7uek.x86_64.rpm	376906c103c1860244c26aa0cd5d4eab26590ae510805ae236ebeb11cd27fb71	ELSA-2025-20190	ol7_x86_64_developer_UEKR5

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team