ELSA-2022-1198

ELSA-2022-1198 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2022-04-06

Description


[3.10.0-1160.62.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.62.1]
- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)

[3.10.0-1160.61.1]
- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]

[3.10.0-1160.60.1]
- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}


Related CVEs


CVE-2021-4028
CVE-2021-4083

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 7 (x86_64) kernel-3.10.0-1160.62.1.el7.src.rpmbc1b0e3489b4deb66c3ee6a0795f0c3579cae394dc4a15f43f29400fa188f827ELSA-2025-1281ol7_x86_64_latest
kernel-3.10.0-1160.62.1.el7.src.rpmbc1b0e3489b4deb66c3ee6a0795f0c3579cae394dc4a15f43f29400fa188f827ELSA-2025-1281ol7_x86_64_optional_latest
kernel-3.10.0-1160.62.1.el7.src.rpmbc1b0e3489b4deb66c3ee6a0795f0c3579cae394dc4a15f43f29400fa188f827ELSA-2025-1281ol7_x86_64_u9_patch
bpftool-3.10.0-1160.62.1.el7.x86_64.rpmfd0b2ad4e15f8557b26df5e8203852983f75cda505906d2eac8fa10debbba06fELSA-2025-1281ol7_x86_64_latest
bpftool-3.10.0-1160.62.1.el7.x86_64.rpmfd0b2ad4e15f8557b26df5e8203852983f75cda505906d2eac8fa10debbba06fELSA-2025-1281ol7_x86_64_u9_patch
kernel-3.10.0-1160.62.1.el7.x86_64.rpm015404f6cb4285368bc5da121df2759d21ec5bde444988b27b17d744b2a3fb64ELSA-2025-1281ol7_x86_64_latest
kernel-3.10.0-1160.62.1.el7.x86_64.rpm015404f6cb4285368bc5da121df2759d21ec5bde444988b27b17d744b2a3fb64ELSA-2025-1281ol7_x86_64_u9_patch
kernel-abi-whitelists-3.10.0-1160.62.1.el7.noarch.rpmbf7d1a4eb7e0a422a9d241b715d2562b574aad6e80263671d4e8a1870359429dELSA-2025-1281ol7_x86_64_latest
kernel-abi-whitelists-3.10.0-1160.62.1.el7.noarch.rpmbf7d1a4eb7e0a422a9d241b715d2562b574aad6e80263671d4e8a1870359429dELSA-2025-1281ol7_x86_64_u9_patch
kernel-debug-3.10.0-1160.62.1.el7.x86_64.rpme01315b45cb2842f38096118f8e86c990666541bbc543f8330797a00d8c8b361ELSA-2025-1281ol7_x86_64_latest
kernel-debug-3.10.0-1160.62.1.el7.x86_64.rpme01315b45cb2842f38096118f8e86c990666541bbc543f8330797a00d8c8b361ELSA-2025-1281ol7_x86_64_u9_patch
kernel-debug-devel-3.10.0-1160.62.1.el7.x86_64.rpm05e4a2376abede675ed55118d696b6d00dcefa83a8de268dfbd9388a0d8fce8eELSA-2025-1281ol7_x86_64_latest
kernel-debug-devel-3.10.0-1160.62.1.el7.x86_64.rpm05e4a2376abede675ed55118d696b6d00dcefa83a8de268dfbd9388a0d8fce8eELSA-2025-1281ol7_x86_64_u9_patch
kernel-devel-3.10.0-1160.62.1.el7.x86_64.rpm5e2764eaa12e9f2770886ae7331dedcf099ecec43f37e90fbefd752fb2f4da0dELSA-2025-1281ol7_x86_64_latest
kernel-devel-3.10.0-1160.62.1.el7.x86_64.rpm5e2764eaa12e9f2770886ae7331dedcf099ecec43f37e90fbefd752fb2f4da0dELSA-2025-1281ol7_x86_64_u9_patch
kernel-doc-3.10.0-1160.62.1.el7.noarch.rpm08ede631147fc62323cec4672bfeeb87def8afd4abeb15673d16d096ee978485ELSA-2025-1281ol7_x86_64_latest
kernel-doc-3.10.0-1160.62.1.el7.noarch.rpm08ede631147fc62323cec4672bfeeb87def8afd4abeb15673d16d096ee978485ELSA-2025-1281ol7_x86_64_u9_patch
kernel-headers-3.10.0-1160.62.1.el7.x86_64.rpm088cd697abe38a3d5758420b657963907f99dd3fe9dbd1c33bab50f7fe3d7b42ELSA-2025-1281exadata_dbserver_20.1.21.0.0_x86_64_base
kernel-headers-3.10.0-1160.62.1.el7.x86_64.rpm088cd697abe38a3d5758420b657963907f99dd3fe9dbd1c33bab50f7fe3d7b42ELSA-2025-1281exadata_dbserver_20.1.22.0.0_x86_64_base
kernel-headers-3.10.0-1160.62.1.el7.x86_64.rpm088cd697abe38a3d5758420b657963907f99dd3fe9dbd1c33bab50f7fe3d7b42ELSA-2025-1281exadata_dbserver_21.2.11.0.0_x86_64_base
kernel-headers-3.10.0-1160.62.1.el7.x86_64.rpm088cd697abe38a3d5758420b657963907f99dd3fe9dbd1c33bab50f7fe3d7b42ELSA-2025-1281exadata_dbserver_21.2.12.0.0_x86_64_base
kernel-headers-3.10.0-1160.62.1.el7.x86_64.rpm088cd697abe38a3d5758420b657963907f99dd3fe9dbd1c33bab50f7fe3d7b42ELSA-2025-1281exadata_dbserver_22.1.0.0.0_x86_64_base
kernel-headers-3.10.0-1160.62.1.el7.x86_64.rpm088cd697abe38a3d5758420b657963907f99dd3fe9dbd1c33bab50f7fe3d7b42ELSA-2025-1281ol7_x86_64_latest
kernel-headers-3.10.0-1160.62.1.el7.x86_64.rpm088cd697abe38a3d5758420b657963907f99dd3fe9dbd1c33bab50f7fe3d7b42ELSA-2025-1281ol7_x86_64_u9_patch
kernel-tools-3.10.0-1160.62.1.el7.x86_64.rpmdf97148fb02c3c2af491bdc9c411d275dbf4a94607a37ad2146e41acd18234adELSA-2025-1281exadata_dbserver_21.2.12.0.0_x86_64_base
kernel-tools-3.10.0-1160.62.1.el7.x86_64.rpmdf97148fb02c3c2af491bdc9c411d275dbf4a94607a37ad2146e41acd18234adELSA-2025-1281exadata_dbserver_22.1.0.0.0_x86_64_base
kernel-tools-3.10.0-1160.62.1.el7.x86_64.rpmdf97148fb02c3c2af491bdc9c411d275dbf4a94607a37ad2146e41acd18234adELSA-2025-1281ol7_x86_64_latest
kernel-tools-3.10.0-1160.62.1.el7.x86_64.rpmdf97148fb02c3c2af491bdc9c411d275dbf4a94607a37ad2146e41acd18234adELSA-2025-1281ol7_x86_64_u9_patch
kernel-tools-libs-3.10.0-1160.62.1.el7.x86_64.rpm507030c2d8938d290516632060b485fd661d8f09226cafb221a23bcad24ee115ELSA-2025-1281exadata_dbserver_21.2.12.0.0_x86_64_base
kernel-tools-libs-3.10.0-1160.62.1.el7.x86_64.rpm507030c2d8938d290516632060b485fd661d8f09226cafb221a23bcad24ee115ELSA-2025-1281exadata_dbserver_22.1.0.0.0_x86_64_base
kernel-tools-libs-3.10.0-1160.62.1.el7.x86_64.rpm507030c2d8938d290516632060b485fd661d8f09226cafb221a23bcad24ee115ELSA-2025-1281ol7_x86_64_latest
kernel-tools-libs-3.10.0-1160.62.1.el7.x86_64.rpm507030c2d8938d290516632060b485fd661d8f09226cafb221a23bcad24ee115ELSA-2025-1281ol7_x86_64_u9_patch
kernel-tools-libs-devel-3.10.0-1160.62.1.el7.x86_64.rpm0d5ae5907867ca5c4d330c390471c9e0ff633a500ff1d27df71eb147134284d9ELSA-2025-1281ol7_x86_64_optional_latest
perf-3.10.0-1160.62.1.el7.x86_64.rpme013e8c62320f9e62ddaa506bba36e528253076bac8ff7d1572e1d393ca394c1ELSA-2025-20019ol7_x86_64_latest
perf-3.10.0-1160.62.1.el7.x86_64.rpme013e8c62320f9e62ddaa506bba36e528253076bac8ff7d1572e1d393ca394c1ELSA-2025-20019ol7_x86_64_u9_patch
python-perf-3.10.0-1160.62.1.el7.x86_64.rpm6155921699ad43283f0f024635f75cc748be778e8a989f108994c305ea634f7fELSA-2025-20019ol7_x86_64_latest
python-perf-3.10.0-1160.62.1.el7.x86_64.rpm6155921699ad43283f0f024635f75cc748be778e8a989f108994c305ea634f7fELSA-2025-20019ol7_x86_64_u9_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete