ELSA-2021-9474

ELSA-2021-9474 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2021-10-11

Description

[5.4.17-2102.206.1]
- Revert 'scsi: core: Cap scsi_host cmd_per_lun at can_queue' (Jack Vogel) [Orabug: 33403144]

[5.4.17-2102.206.0]
- Revert 'uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo' (Jack Vogel) [Orabug: 33245043]
- integrity: Load mokx variables into the blacklist keyring (Eric Snowberg) [Orabug: 33418496]
- perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu) [Orabug: 33359395]
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (Dongli Zhang) [Orabug: 33352679]
- Revert 'uek-rpm: mark /etc/ld.so.conf.d/ files as %config' (aloktiw) [Orabug: 33311489]
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje) [Orabug: 33134286]
- IB/core: Shifting initialization of device->cache_lock (Anand Khoje) [Orabug: 33134286]
- IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Anand Khoje) [Orabug: 33134286]
- IB/core: Shuffle locks in ib_port_data to save memory (Anand Khoje) [Orabug: 33134286]
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje) [Orabug: 33134286]
- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo) [Orabug: 33281078] {CVE-2021-3739}
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana) [Orabug: 33349276]
- net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang) [Orabug: 33284937] {CVE-2021-3743}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o) [Orabug: 33327177] {CVE-2021-40490}
- xfs: remove unused variable (Wengang Wang) [Orabug: 33313442]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306518]
- uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo (Somasundaram Krishnasamy) [Orabug: 33245043]
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan) [Orabug: 33209458] {CVE-2021-38198}
- usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu) [Orabug: 33174795] {CVE-2021-37159}
- hso: fix bailout in error case of probe (Oliver Neukum) [Orabug: 33174795] {CVE-2021-37159}

Related CVEs

CVE-2021-40490

CVE-2021-3739

CVE-2021-37159

CVE-2021-38198

CVE-2021-3743

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	kernel-uek-5.4.17-2102.206.1.el7uek.src.rpm	3485f682629d915a88320818fa8745ad	-
	kernel-uek-5.4.17-2102.206.1.el7uek.aarch64.rpm	fa852f0741e2ba5530999d7caa5e3af0	-
	kernel-uek-debug-5.4.17-2102.206.1.el7uek.aarch64.rpm	c3f0508cbcddf3ef3d02ec0fdf7eaad3	-
	kernel-uek-debug-devel-5.4.17-2102.206.1.el7uek.aarch64.rpm	1c9d6f6aff9d87187850f164a97eb753	-
	kernel-uek-devel-5.4.17-2102.206.1.el7uek.aarch64.rpm	ff3bc0a82b224be82ae00482c4f02f5c	-
	kernel-uek-doc-5.4.17-2102.206.1.el7uek.noarch.rpm	87877ec86ee4cb62a254a7d6d1bb64f7	-
	kernel-uek-tools-5.4.17-2102.206.1.el7uek.aarch64.rpm	8008eb4382979435123f3852ac4ade8d	-
	kernel-uek-tools-libs-5.4.17-2102.206.1.el7uek.aarch64.rpm	bc01dcc78fb61bb5c50c391f9d2e5a7e	-
	perf-5.4.17-2102.206.1.el7uek.aarch64.rpm	f2231e824bce614ee548ca92c64d9342	-
	python-perf-5.4.17-2102.206.1.el7uek.aarch64.rpm	09d3c2f5ee6f09762ac2070045611048	-
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2102.206.1.el7uek.src.rpm	3485f682629d915a88320818fa8745ad	-
	kernel-uek-5.4.17-2102.206.1.el7uek.x86_64.rpm	dadb122d60167e7685600d820c6ace79	-
	kernel-uek-debug-5.4.17-2102.206.1.el7uek.x86_64.rpm	d381200bfa787f9750a52ae67281e9b2	-
	kernel-uek-debug-devel-5.4.17-2102.206.1.el7uek.x86_64.rpm	a9740ed134ffe4a1fb47c6b5c2b3def3	-
	kernel-uek-devel-5.4.17-2102.206.1.el7uek.x86_64.rpm	645ddd23c4a6572696b7e9666c4511e3	-
	kernel-uek-doc-5.4.17-2102.206.1.el7uek.noarch.rpm	87877ec86ee4cb62a254a7d6d1bb64f7	-
	kernel-uek-tools-5.4.17-2102.206.1.el7uek.x86_64.rpm	e4eeef222c7343109f09176b8a420635	-
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2102.206.1.el8uek.src.rpm	dccf9222990c8099d7f8a3dfbe516652	-
	kernel-uek-5.4.17-2102.206.1.el8uek.aarch64.rpm	8640ff486317fe8f68763340b1793b5f	-
	kernel-uek-debug-5.4.17-2102.206.1.el8uek.aarch64.rpm	f87a5d185ee5db646dd800ec1a0bce4e	-
	kernel-uek-debug-devel-5.4.17-2102.206.1.el8uek.aarch64.rpm	15b4ab182e8f5ec48bf57d69f1fe0a62	-
	kernel-uek-devel-5.4.17-2102.206.1.el8uek.aarch64.rpm	1140a77570ec55ea5ec7d053e69cf50d	-
	kernel-uek-doc-5.4.17-2102.206.1.el8uek.noarch.rpm	0aef5319e39600662933b06afbd62e90	-
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2102.206.1.el8uek.src.rpm	dccf9222990c8099d7f8a3dfbe516652	-
	kernel-uek-5.4.17-2102.206.1.el8uek.x86_64.rpm	7c112f77f411ee027d95b8e178611986	-
	kernel-uek-debug-5.4.17-2102.206.1.el8uek.x86_64.rpm	a863ae3caaf845112f1619ddcf09c7ca	-
	kernel-uek-debug-devel-5.4.17-2102.206.1.el8uek.x86_64.rpm	31b1ac0e9d1c928297a52961f465a27f	-
	kernel-uek-devel-5.4.17-2102.206.1.el8uek.x86_64.rpm	9cf504a9322e1cc085b454c56a1e3dc0	-
	kernel-uek-doc-5.4.17-2102.206.1.el8uek.noarch.rpm	0aef5319e39600662933b06afbd62e90	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team