ELSA-2021-9442

ELSA-2021-9442 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-09-08

Description

[4.1.12-124.54.6]
- xen-netback: do not kfree_skb() when irq is disabled (Dongli Zhang) [Orabug: 33282046]

[4.1.12-124.54.5]
- l2tp: fix race between l2tp_session_delete() and l2tp_tunnel_closeall() (Guillaume Nault) [Orabug: 33113975] {CVE-2020-0429}
- l2tp: ensure sessions are freed after their PPPOL2TP socket (Guillaume Nault) [Orabug: 33113975] {CVE-2020-0429}
- l2tp: Refactor the codes with existing macros instead of literal number (Gao Feng) [Orabug: 33113975] {CVE-2020-0429}
- l2tp: fix duplicate session creation (Guillaume Nault) [Orabug: 33113975] {CVE-2020-0429}
- l2tp: ensure session can't get removed during pppol2tp_session_ioctl() (Guillaume Nault) [Orabug: 33113975] {CVE-2020-0429}
- l2tp: fix race in l2tp_recv_common() (Guillaume Nault) [Orabug: 33113975] {CVE-2020-0429}
- net: l2tp: Make l2tp_ip6 namespace aware (Shmulik Ladkani) [Orabug: 33113975] {CVE-2020-0429}
- l2tp: Correctly return -EBADF from pppol2tp_getname. (phil.turnbull@oracle.com) [Orabug: 33113975] {CVE-2020-0429}

[4.1.12-124.54.4]
- USB: mon: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai) [Orabug: 33113260] {CVE-2019-9456}
- usb: usbmon: Read text within supplied buffer size (Pete Zaitcev) [Orabug: 33113260] {CVE-2019-9456}

[4.1.12-124.54.3]
- uek-rpm: mark /etc/ld.so.conf.d/ files as %config (Stephen Brennan) [Orabug: 32060376]
- config: remove CONFIG_VGACON_SOFT_SCROLLBACK from kernel configs (Brian Maly) [Orabug: 33047770] {CVE-2020-28097} {CVE-2020-28097}
- vgacon: remove software scrollback support (Linus Torvalds) [Orabug: 33047770] {CVE-2020-28097}
- can: bcm: delay release of struct bcm_op after synchronize_rcu() (Thadeu Lima de Souza Cascardo) [Orabug: 33114649] {CVE-2021-3609}
- iommu/vt-d: Use plain writeq() for dmar_writeq() where available (David Woodhouse) [Orabug: 33199774]

[4.1.12-124.54.2]
- qla2xxx: update version to 9.00.00.00.42.0-k1-v6 (Quinn Tran) [Orabug: 33196002]
- qla2xxx: add heartbeat check (Quinn Tran) [Orabug: 33196002]

[4.1.12-124.54.1]
- can: bcm: fix infoleak in struct bcm_msg_head (Norbert Slusarek) [Orabug: 33030701] {CVE-2021-34693}
- CIFS: 511c54a2f691 adds a check for session expiry (Aruna Ramakrishna) [Orabug: 33063858]
- CIFS: Reconnect expired SMB sessions (Pavel Shilovsky) [Orabug: 33063858]
- media: v4l: event: Add subscription to list before calling 'add' operation (Sakari Ailus) [Orabug: 33113344] {CVE-2019-9458}
- media: v4l: event: Prevent freeing event subscriptions while accessed (Sakari Ailus) [Orabug: 33113344] {CVE-2019-9458}
- chardev: Avoid potential use-after-free in 'chrdev_open()' (Will Deacon) [Orabug: 33113412] {CVE-2020-0305}
- kobject: Export kobject_get_unless_zero() (Jan Kara) [Orabug: 33113412] {CVE-2020-0305}
- cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE (Sergey Matyukevich) [Orabug: 33114443] {CVE-2020-27068}

Related CVEs

CVE-2021-34693

CVE-2020-28097

CVE-2019-9456

CVE-2020-0429

CVE-2019-9458

CVE-2020-0305

CVE-2021-3609

CVE-2020-27068

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.54.6.el6uek.src.rpm	53dac5424473faccdcc0681ac8f4d3f91e066d0b87d60cf2207ece1ca0b58456	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-4.1.12-124.54.6.el6uek.x86_64.rpm	aa14425b71bd12fcf296d0721aa4e277364aff2bb55996b411e33a54b43f0560	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-debug-4.1.12-124.54.6.el6uek.x86_64.rpm	81a4bee79fa51c27d5739688c4dd58897aa97098b8a993be0d3b928c72052992	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-debug-devel-4.1.12-124.54.6.el6uek.x86_64.rpm	c5a5f2ac58e972822a94120d7ffb3c987a53f618265bb698c8339fff47368886	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-devel-4.1.12-124.54.6.el6uek.x86_64.rpm	926b64599df95f352024dc327913a5d306668b2e0599a2d9b10de653644a7325	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-doc-4.1.12-124.54.6.el6uek.noarch.rpm	aaf205cb41e7e9566716b6e9dbcd0d51197f683749a794d6e00c966d62dddece	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-firmware-4.1.12-124.54.6.el6uek.noarch.rpm	6bd91b2258fe064386a476592c10acde685d7f41b14d45a263b50bc4b126f497	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.54.6.el7uek.src.rpm	2ce0222873bf03f0d9f80efa564fcc2e36efb02dace9017bf86e346e4ac155ee	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-4.1.12-124.54.6.el7uek.x86_64.rpm	04e874126303cb5a0ecbbc5ff12ba9600fef6c069b0821ea829ed773399acfa5	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-debug-4.1.12-124.54.6.el7uek.x86_64.rpm	f743b4277a28981538f7598d79cee1a37c7106da4f59cbf5511ed46114fac647	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-debug-devel-4.1.12-124.54.6.el7uek.x86_64.rpm	fdb4eefdf40d147a3884f039767e6dddc8eb0ef333d5eda87f43d70a14cc86b5	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-devel-4.1.12-124.54.6.el7uek.x86_64.rpm	1e3e681f82dba768c7d4547e7d25922fb06a18dfc0f0a1b9fa6ba0f28ceb59a7	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-doc-4.1.12-124.54.6.el7uek.noarch.rpm	d09c11c4ecbb73f6f37f533facbc802a178585c5faea631eeb198ff1abdefa5c	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-firmware-4.1.12-124.54.6.el7uek.noarch.rpm	180a8ef6accc8cd0ea7f15eb30ebca0fe8f1fd18f7d2393c9cdbcc60f6adb7ba	ELSA-2025-20007	ol7_x86_64_UEKR4

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team