ELSA-2021-9420

ELSA-2021-9420 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-08-16

Description

[5.4.17-2102.204.4.3]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (Maxim Levitsky) [Orabug: 33205365] {CVE-2021-3656} {CVE-2021-3656}
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (Maxim Levitsky) [Orabug: 33205443] {CVE-2021-3653} {CVE-2021-3653}

Related CVEs

CVE-2021-3656

CVE-2021-3653

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	kernel-uek-5.4.17-2102.204.4.3.el7uek.src.rpm	c825af0759bf24e861271dac07cebeab8843df526093998acd5811a0c4571649	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-5.4.17-2102.204.4.3.el7uek.aarch64.rpm	03e5eea7cc39f861cd9c220a06b694bf93359e7529092be6a2dc5c4413debf47	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-debug-5.4.17-2102.204.4.3.el7uek.aarch64.rpm	432ccf7a4a37970b1d0923289afeb6b9f6b9f6405c1f85bd71d50e80c94d52a2	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-debug-devel-5.4.17-2102.204.4.3.el7uek.aarch64.rpm	fc903e6038f476ceb5dd33d03406c8161041c804b4f2b0fefea5243a6475a109	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-devel-5.4.17-2102.204.4.3.el7uek.aarch64.rpm	ea6ce00a7afcb2e1e7b0eb71c8f18cc7f100ed160b039edf4c0a65e39d2dee97	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-doc-5.4.17-2102.204.4.3.el7uek.noarch.rpm	b13ce5b72340e8221ede7c5df9e81548ab2ce024dfab43973f3606b745dba54a	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-tools-5.4.17-2102.204.4.3.el7uek.aarch64.rpm	302d5a4cddf22e44ad1df8337f8fc39f57891765c89fc2582558319243e6e057	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-tools-libs-5.4.17-2102.204.4.3.el7uek.aarch64.rpm	2dc5bc8afaadf4dda932c1c176475525d5625055e9794b0c64f40b4348ee089d	ELSA-2025-20019	ol7_aarch64_UEKR6
	perf-5.4.17-2102.204.4.3.el7uek.aarch64.rpm	0474ec90a4defcc8e456e85a12850cc9bd3f84929df427889ac754ed2d7e62e0	ELSA-2025-20019	ol7_aarch64_UEKR6
	python-perf-5.4.17-2102.204.4.3.el7uek.aarch64.rpm	36ca81219852c15b2f477a4237d0b410d28849bbd1d36d3aacee1bf1d9def92c	ELSA-2025-20019	ol7_aarch64_UEKR6
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2102.204.4.3.el7uek.src.rpm	c825af0759bf24e861271dac07cebeab8843df526093998acd5811a0c4571649	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-5.4.17-2102.204.4.3.el7uek.x86_64.rpm	37aafbc3880a4f2f2bcd150570ce69e3b76015d8358239467a63b9bc61e1dc86	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2102.204.4.3.el7uek.x86_64.rpm	ae272aea3ddb5e17f1966070925182a9291293f207a22dbf834d2f818756d5ae	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2102.204.4.3.el7uek.x86_64.rpm	b8a9576ad5100befd32a9f8b69b2cf37c063c4c7417ab85745977c13d9653bb4	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2102.204.4.3.el7uek.x86_64.rpm	49848164f420031864ef2d52baea5a30977ad15efa73981ec263a2f9fdd470fb	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2102.204.4.3.el7uek.noarch.rpm	b13ce5b72340e8221ede7c5df9e81548ab2ce024dfab43973f3606b745dba54a	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-tools-5.4.17-2102.204.4.3.el7uek.x86_64.rpm	5f5ddc08f3f143f2fe5669edb09072cfb7742c23b4f8dcfab8e33a1f8d0aa98e	ELSA-2025-20190	ol7_x86_64_UEKR6
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2102.204.4.3.el8uek.src.rpm	705bf2b7ed9f245b77b3f81aff1a169236e712c5fcbf69432c53b322735c39d5	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2102.204.4.3.el8uek.src.rpm	705bf2b7ed9f245b77b3f81aff1a169236e712c5fcbf69432c53b322735c39d5	-	ol8_aarch64_u4_baseos_patch
	kernel-uek-5.4.17-2102.204.4.3.el8uek.aarch64.rpm	c089c3215ebe2c026526dde10076a24f504216994f66813c2882453aee6c1764	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2102.204.4.3.el8uek.aarch64.rpm	c089c3215ebe2c026526dde10076a24f504216994f66813c2882453aee6c1764	-	ol8_aarch64_u4_baseos_patch
	kernel-uek-debug-5.4.17-2102.204.4.3.el8uek.aarch64.rpm	8e3c316ae1ebc2b6e21e0f02d96a1e7a9880f8eb3a9c6be8a6df99535469e1f3	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-5.4.17-2102.204.4.3.el8uek.aarch64.rpm	8e3c316ae1ebc2b6e21e0f02d96a1e7a9880f8eb3a9c6be8a6df99535469e1f3	-	ol8_aarch64_u4_baseos_patch
	kernel-uek-debug-devel-5.4.17-2102.204.4.3.el8uek.aarch64.rpm	f6d6e54902faede1e6b51a59fa83fa7000f6391bb6a93f797d42ca72cf322c71	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-devel-5.4.17-2102.204.4.3.el8uek.aarch64.rpm	f6d6e54902faede1e6b51a59fa83fa7000f6391bb6a93f797d42ca72cf322c71	-	ol8_aarch64_u4_baseos_patch
	kernel-uek-devel-5.4.17-2102.204.4.3.el8uek.aarch64.rpm	35452fb414af76f6b1b15a6b811994823fb21e0f5aa76b65b008dd284804ab08	-	ol8_aarch64_baseos_latest
	kernel-uek-devel-5.4.17-2102.204.4.3.el8uek.aarch64.rpm	35452fb414af76f6b1b15a6b811994823fb21e0f5aa76b65b008dd284804ab08	-	ol8_aarch64_u4_baseos_patch
	kernel-uek-doc-5.4.17-2102.204.4.3.el8uek.noarch.rpm	fdeedba46afe04379c99f4c5f7ceec7c6d929ea02f0cc5abf8a8cfdec04cb116	-	ol8_aarch64_baseos_latest
	kernel-uek-doc-5.4.17-2102.204.4.3.el8uek.noarch.rpm	fdeedba46afe04379c99f4c5f7ceec7c6d929ea02f0cc5abf8a8cfdec04cb116	-	ol8_aarch64_u4_baseos_patch
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2102.204.4.3.el8uek.src.rpm	705bf2b7ed9f245b77b3f81aff1a169236e712c5fcbf69432c53b322735c39d5	-	ol8_x86_64_UEKR6
	kernel-uek-5.4.17-2102.204.4.3.el8uek.x86_64.rpm	d5db91c92a4a50ceba7ffd40773bf42d9c766dd108fd593c4700bea933ed6aa7	-	ol8_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2102.204.4.3.el8uek.x86_64.rpm	a2d9c8bf8b982793f81d86c93995f736355fa28b8c818b546d471ee420e4a10a	-	ol8_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2102.204.4.3.el8uek.x86_64.rpm	0ddaa4496dd74479a2517fa8a83cad00aa55e16d32d2983f4e09bd78235210d5	-	ol8_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2102.204.4.3.el8uek.x86_64.rpm	b34f9e53dc89684c4a93689e338d5a7636968be6991e8de0f31e712fc40e393f	-	ol8_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2102.204.4.3.el8uek.noarch.rpm	fdeedba46afe04379c99f4c5f7ceec7c6d929ea02f0cc5abf8a8cfdec04cb116	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team