ELSA-2022-0063

ELSA-2022-0063 - kernel security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2022-01-11

Description

[3.10.0-1160.53.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.53.1]
- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
more consistently (Bob Peterson) [1364234]

[3.10.0-1160.52.1]
- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]

[3.10.0-1160.51.1]
- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]

[3.10.0-1160.50.1]
- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}

Related CVEs

CVE-2020-25704

CVE-2020-36322

CVE-2021-42739

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-3.10.0-1160.53.1.el7.src.rpm	2b58f15b7cf6cccb7b828f9b97323c2fcb230f43c54ff60d8cfa1cb6d652f8dc	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.53.1.el7.src.rpm	2b58f15b7cf6cccb7b828f9b97323c2fcb230f43c54ff60d8cfa1cb6d652f8dc	ELSA-2025-1281	ol7_x86_64_optional_latest
	kernel-3.10.0-1160.53.1.el7.src.rpm	2b58f15b7cf6cccb7b828f9b97323c2fcb230f43c54ff60d8cfa1cb6d652f8dc	ELSA-2025-1281	ol7_x86_64_u9_patch
	bpftool-3.10.0-1160.53.1.el7.x86_64.rpm	da6f3803ed31976235c15f4e8e4a8515024f092d59636e4e3828a449debdfb1f	ELSA-2025-1281	ol7_x86_64_latest
	bpftool-3.10.0-1160.53.1.el7.x86_64.rpm	da6f3803ed31976235c15f4e8e4a8515024f092d59636e4e3828a449debdfb1f	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-3.10.0-1160.53.1.el7.x86_64.rpm	93c542687bf41a20d25b383e16df749ac440f0bb6db1579f8eb360f6ef8cc24a	ELSA-2025-1281	ol7_x86_64_latest
	kernel-3.10.0-1160.53.1.el7.x86_64.rpm	93c542687bf41a20d25b383e16df749ac440f0bb6db1579f8eb360f6ef8cc24a	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-abi-whitelists-3.10.0-1160.53.1.el7.noarch.rpm	9b3a06d8694a0c162341f0fd9d669ac924407d65146e02210d4cbe61218c5a90	ELSA-2025-1281	ol7_x86_64_latest
	kernel-abi-whitelists-3.10.0-1160.53.1.el7.noarch.rpm	9b3a06d8694a0c162341f0fd9d669ac924407d65146e02210d4cbe61218c5a90	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-3.10.0-1160.53.1.el7.x86_64.rpm	bedef20727f6b9643018df05b0989e2666d30de3b5fd2353bb9a186225edb6be	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-3.10.0-1160.53.1.el7.x86_64.rpm	bedef20727f6b9643018df05b0989e2666d30de3b5fd2353bb9a186225edb6be	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-debug-devel-3.10.0-1160.53.1.el7.x86_64.rpm	f3acad23f3a5a07137385a0460d5d15cfc1319eed532125a7f0c55ac2607fc78	ELSA-2025-1281	ol7_x86_64_latest
	kernel-debug-devel-3.10.0-1160.53.1.el7.x86_64.rpm	f3acad23f3a5a07137385a0460d5d15cfc1319eed532125a7f0c55ac2607fc78	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-devel-3.10.0-1160.53.1.el7.x86_64.rpm	d5743f906e518163768a99977f310b0f5afc3d080dff79be668b2b7ce9f430d5	ELSA-2025-1281	ol7_x86_64_latest
	kernel-devel-3.10.0-1160.53.1.el7.x86_64.rpm	d5743f906e518163768a99977f310b0f5afc3d080dff79be668b2b7ce9f430d5	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-doc-3.10.0-1160.53.1.el7.noarch.rpm	58c05dfed039261c9531e4791c7a33501acdad27abde52154b50c1ed60ac89c9	ELSA-2025-1281	ol7_x86_64_latest
	kernel-doc-3.10.0-1160.53.1.el7.noarch.rpm	58c05dfed039261c9531e4791c7a33501acdad27abde52154b50c1ed60ac89c9	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-headers-3.10.0-1160.53.1.el7.x86_64.rpm	b2aae5c2dc4e8992e3a2988b0331b061fee739b38efa82e3d9f5dfc8080a4c53	ELSA-2025-1281	exadata_dbserver_20.1.19.0.0_x86_64_base
	kernel-headers-3.10.0-1160.53.1.el7.x86_64.rpm	b2aae5c2dc4e8992e3a2988b0331b061fee739b38efa82e3d9f5dfc8080a4c53	ELSA-2025-1281	exadata_dbserver_21.2.9.0.0_x86_64_base
	kernel-headers-3.10.0-1160.53.1.el7.x86_64.rpm	b2aae5c2dc4e8992e3a2988b0331b061fee739b38efa82e3d9f5dfc8080a4c53	ELSA-2025-1281	ol7_x86_64_latest
	kernel-headers-3.10.0-1160.53.1.el7.x86_64.rpm	b2aae5c2dc4e8992e3a2988b0331b061fee739b38efa82e3d9f5dfc8080a4c53	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-3.10.0-1160.53.1.el7.x86_64.rpm	b1ab5e1588c29a9b9b5bda8a59fce96a9bbbabd47a85ececa2ff3b16a62d3c03	ELSA-2025-1281	exadata_dbserver_21.2.9.0.0_x86_64_base
	kernel-tools-3.10.0-1160.53.1.el7.x86_64.rpm	b1ab5e1588c29a9b9b5bda8a59fce96a9bbbabd47a85ececa2ff3b16a62d3c03	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-3.10.0-1160.53.1.el7.x86_64.rpm	b1ab5e1588c29a9b9b5bda8a59fce96a9bbbabd47a85ececa2ff3b16a62d3c03	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-3.10.0-1160.53.1.el7.x86_64.rpm	e43bc5c389dba99e42f1d21cb516fb56520c74c29c0635b391903ab918f5dc5c	ELSA-2025-1281	exadata_dbserver_21.2.9.0.0_x86_64_base
	kernel-tools-libs-3.10.0-1160.53.1.el7.x86_64.rpm	e43bc5c389dba99e42f1d21cb516fb56520c74c29c0635b391903ab918f5dc5c	ELSA-2025-1281	ol7_x86_64_latest
	kernel-tools-libs-3.10.0-1160.53.1.el7.x86_64.rpm	e43bc5c389dba99e42f1d21cb516fb56520c74c29c0635b391903ab918f5dc5c	ELSA-2025-1281	ol7_x86_64_u9_patch
	kernel-tools-libs-devel-3.10.0-1160.53.1.el7.x86_64.rpm	50995c97b468a14a717702c33c9a428d3622ff25473998d97c5aee66710b8d65	ELSA-2025-1281	ol7_x86_64_optional_latest
	perf-3.10.0-1160.53.1.el7.x86_64.rpm	382517b228d482d3d32f958740d829ec0173f8c6e1bb3ed13ca1642b8948eb1d	ELSA-2025-20019	ol7_x86_64_latest
	perf-3.10.0-1160.53.1.el7.x86_64.rpm	382517b228d482d3d32f958740d829ec0173f8c6e1bb3ed13ca1642b8948eb1d	ELSA-2025-20019	ol7_x86_64_u9_patch
	python-perf-3.10.0-1160.53.1.el7.x86_64.rpm	cfbf7a8dcd82528bbc6c2c521a59ed7435dd19fea52f9329107dcfa482812578	ELSA-2025-20019	ol7_x86_64_latest
	python-perf-3.10.0-1160.53.1.el7.x86_64.rpm	cfbf7a8dcd82528bbc6c2c521a59ed7435dd19fea52f9329107dcfa482812578	ELSA-2025-20019	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team