ELSA-2021-9475

ELSA-2021-9475 - Unbreakable Enterprise kernel-container security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-10-11

Description

[5.4.17-2102.206.1]
- Revert 'scsi: core: Cap scsi_host cmd_per_lun at can_queue' (Jack Vogel)
[Orabug: 33403144]

[5.4.17-2102.206.0]
- Revert 'uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo' (Jack Vogel) [Orabug: 33245043]
- integrity: Load mokx variables into the blacklist keyring (Eric Snowberg) [Orabug: 33418496]
- perf/x86/amd: Don't touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu) [Orabug: 33359395]
- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32 (Dongli Zhang) [Orabug: 33352679]
- Revert 'uek-rpm: mark /etc/ld.so.conf.d/ files as %config' (aloktiw) [Orabug: 33311489]
- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje) [Orabug: 33134286]
- IB/core: Shifting initialization of device->cache_lock (Anand Khoje) [Orabug: 33134286]
- IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Anand Khoje) [Orabug: 33134286]
- IB/core: Shuffle locks in ib_port_data to save memory (Anand Khoje) [Orabug: 33134286]
- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje) [Orabug: 33134286]
- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo) [Orabug: 33281078] {CVE-2021-3739}
- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana) [Orabug: 33349276]
- net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang) [Orabug: 33284937] {CVE-2021-3743}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o) [Orabug: 33327177] {CVE-2021-40490}
- xfs: remove unused variable (Wengang Wang) [Orabug: 33313442]
- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn) [Orabug: 33306518]
- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva) [Orabug: 33296812]
- KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan) [Orabug: 33209458] {CVE-2021-38198}
- usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu) [Orabug: 33174795] {CVE-2021-37159}
- hso: fix bailout in error case of probe (Oliver Neukum) [Orabug: 33174795] {CVE-2021-37159}

Related CVEs

CVE-2021-37159

CVE-2021-38198

CVE-2021-3743

CVE-2021-40490

CVE-2021-3739

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-uek-container-5.4.17-2102.206.1.el7.src.rpm	b1367439ae0f9bed2446fd03859b00395fec21c8d16b2ae13c336743fcf7f1d0	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-container-5.4.17-2102.206.1.el7.x86_64.rpm	57f52957f15da3792de92d5601f051b1259827f1f2fc68839da8770b3fd01d2c	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-container-debug-5.4.17-2102.206.1.el7.x86_64.rpm	0fddbe341eec0c04e6efa1f45a4b625bfe46f7c40631bac0c94b75c315007921	ELSA-2025-20190	ol7_x86_64_UEKR6
Oracle Linux 8 (x86_64)	kernel-uek-container-5.4.17-2102.206.1.el8.src.rpm	4036f20cf649abe6ec5e5ffb318f328c54646a79760461f2dcceccdc431dd446	-	ol8_x86_64_UEKR6
	kernel-uek-container-5.4.17-2102.206.1.el8.x86_64.rpm	c73512bb0d89c7c4b0030dcf5bf04fb96c8a52c7bd671e0cacfac0d9e9c62b23	-	ol8_x86_64_UEKR6
	kernel-uek-container-debug-5.4.17-2102.206.1.el8.x86_64.rpm	5897c7ec67d1f3d1b6aa459e872425832aa4a2cdde1d4c3e3b50a19b38f52d57	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team