ELSA-2022-1550

ELSA-2022-1550 - kernel security and bug fix update

Type:SECURITY
Impact:IMPORTANT
Release Date:2022-04-27

Description


[4.18.0-348.23.1_5.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-348.23.1_5]
- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]

[4.18.0-348.22.1_5]
- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}

[4.18.0-348.21.1_5]
- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}


Related CVEs


CVE-2021-4028
CVE-2022-25636

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-4.18.0-348.23.1.el8_5.src.rpm76d3387b4cedef12578735f3505864c261ea6b683952f4a1af4812583bf1309c-ol8_aarch64_baseos_latest
kernel-4.18.0-348.23.1.el8_5.src.rpm76d3387b4cedef12578735f3505864c261ea6b683952f4a1af4812583bf1309c-ol8_aarch64_codeready_builder
kernel-4.18.0-348.23.1.el8_5.src.rpm76d3387b4cedef12578735f3505864c261ea6b683952f4a1af4812583bf1309c-ol8_aarch64_u5_baseos_patch
bpftool-4.18.0-348.23.1.el8_5.aarch64.rpm17e063349cab250fffc5180509e61fcf244cb6ca250c194003dde041e37de451-ol8_aarch64_baseos_latest
bpftool-4.18.0-348.23.1.el8_5.aarch64.rpm17e063349cab250fffc5180509e61fcf244cb6ca250c194003dde041e37de451-ol8_aarch64_u5_baseos_patch
kernel-cross-headers-4.18.0-348.23.1.el8_5.aarch64.rpm5f3352ad4585becc312504aeb56f572e5798230d51c360bbb2f4c6b13afd3b01-ol8_aarch64_baseos_latest
kernel-cross-headers-4.18.0-348.23.1.el8_5.aarch64.rpm5f3352ad4585becc312504aeb56f572e5798230d51c360bbb2f4c6b13afd3b01-ol8_aarch64_u5_baseos_patch
kernel-headers-4.18.0-348.23.1.el8_5.aarch64.rpm06f5ab61708623befdb6d93affa57962f069996911c6c8680fe8a558fc7dad57-ol8_aarch64_baseos_latest
kernel-headers-4.18.0-348.23.1.el8_5.aarch64.rpm06f5ab61708623befdb6d93affa57962f069996911c6c8680fe8a558fc7dad57-ol8_aarch64_u5_baseos_patch
kernel-tools-4.18.0-348.23.1.el8_5.aarch64.rpm39073350088105c75c794114dedc875fa98f28a45a1d73077d0d5bdf8dd1d7c2-ol8_aarch64_baseos_latest
kernel-tools-4.18.0-348.23.1.el8_5.aarch64.rpm39073350088105c75c794114dedc875fa98f28a45a1d73077d0d5bdf8dd1d7c2-ol8_aarch64_u5_baseos_patch
kernel-tools-libs-4.18.0-348.23.1.el8_5.aarch64.rpmf26a643a292dcf11bfafeb164dd1bf27e9910b15524a42c5ac3bb57c49c8f578-ol8_aarch64_baseos_latest
kernel-tools-libs-4.18.0-348.23.1.el8_5.aarch64.rpmf26a643a292dcf11bfafeb164dd1bf27e9910b15524a42c5ac3bb57c49c8f578-ol8_aarch64_u5_baseos_patch
kernel-tools-libs-devel-4.18.0-348.23.1.el8_5.aarch64.rpmaaccfaa231357445b78f3a033e8965cf3346f7f740ddb48931e57ceec87137f5-ol8_aarch64_codeready_builder
perf-4.18.0-348.23.1.el8_5.aarch64.rpm3d4b50f6f2c1e38402a57b7bc3eaefd3799d39af107627f0fbd5efdc60011176-ol8_aarch64_baseos_latest
perf-4.18.0-348.23.1.el8_5.aarch64.rpm3d4b50f6f2c1e38402a57b7bc3eaefd3799d39af107627f0fbd5efdc60011176-ol8_aarch64_u5_baseos_patch
python3-perf-4.18.0-348.23.1.el8_5.aarch64.rpmed05cee578ae1928c78a25631a5d7ad2bc24a03b71fa2731385d4a8cfe703dab-ol8_aarch64_baseos_latest
python3-perf-4.18.0-348.23.1.el8_5.aarch64.rpmed05cee578ae1928c78a25631a5d7ad2bc24a03b71fa2731385d4a8cfe703dab-ol8_aarch64_u5_baseos_patch
Oracle Linux 8 (x86_64) kernel-4.18.0-348.23.1.el8_5.src.rpm76d3387b4cedef12578735f3505864c261ea6b683952f4a1af4812583bf1309c-ol8_x86_64_baseos_latest
kernel-4.18.0-348.23.1.el8_5.src.rpm76d3387b4cedef12578735f3505864c261ea6b683952f4a1af4812583bf1309c-ol8_x86_64_codeready_builder
kernel-4.18.0-348.23.1.el8_5.src.rpm76d3387b4cedef12578735f3505864c261ea6b683952f4a1af4812583bf1309c-ol8_x86_64_u5_baseos_patch
bpftool-4.18.0-348.23.1.el8_5.x86_64.rpmfb00051a31e45af88c2d8ea60869bf3ef3b532b6809285e0b15e2e1771d9c153-ol8_x86_64_baseos_latest
bpftool-4.18.0-348.23.1.el8_5.x86_64.rpmfb00051a31e45af88c2d8ea60869bf3ef3b532b6809285e0b15e2e1771d9c153-ol8_x86_64_u5_baseos_patch
kernel-4.18.0-348.23.1.el8_5.x86_64.rpm4d30ac1a6e5e4ed182b75a17df58e19f14d9a0df0ed7e1301a57f589d6576c48-ol8_x86_64_baseos_latest
kernel-4.18.0-348.23.1.el8_5.x86_64.rpm4d30ac1a6e5e4ed182b75a17df58e19f14d9a0df0ed7e1301a57f589d6576c48-ol8_x86_64_u5_baseos_patch
kernel-abi-stablelists-4.18.0-348.23.1.el8_5.noarch.rpm3cfc2ebd63bda38c783947a2c54d512019fea6ef4c3239c315c504185b35cae9-ol8_x86_64_baseos_latest
kernel-abi-stablelists-4.18.0-348.23.1.el8_5.noarch.rpm3cfc2ebd63bda38c783947a2c54d512019fea6ef4c3239c315c504185b35cae9-ol8_x86_64_u5_baseos_patch
kernel-core-4.18.0-348.23.1.el8_5.x86_64.rpmd79a16f419c975818d1e9bbb4006d89ccb04f6d505f799e2d2149782867974dd-ol8_x86_64_baseos_latest
kernel-core-4.18.0-348.23.1.el8_5.x86_64.rpmd79a16f419c975818d1e9bbb4006d89ccb04f6d505f799e2d2149782867974dd-ol8_x86_64_u5_baseos_patch
kernel-cross-headers-4.18.0-348.23.1.el8_5.x86_64.rpma1948d16be8cca7b5275a658e124735442354d2d04a61279b7871162c84754f6-ol8_x86_64_baseos_latest
kernel-cross-headers-4.18.0-348.23.1.el8_5.x86_64.rpma1948d16be8cca7b5275a658e124735442354d2d04a61279b7871162c84754f6-ol8_x86_64_u5_baseos_patch
kernel-debug-4.18.0-348.23.1.el8_5.x86_64.rpm8c53043476126c3eeb8a019cb0554f3dd243a7ffd14d43c34722130884430950-ol8_x86_64_baseos_latest
kernel-debug-4.18.0-348.23.1.el8_5.x86_64.rpm8c53043476126c3eeb8a019cb0554f3dd243a7ffd14d43c34722130884430950-ol8_x86_64_u5_baseos_patch
kernel-debug-core-4.18.0-348.23.1.el8_5.x86_64.rpm7fe508d270ac2e198d727df7fd51c0403fde49c693e6d79163bc43fd8d847b8c-ol8_x86_64_baseos_latest
kernel-debug-core-4.18.0-348.23.1.el8_5.x86_64.rpm7fe508d270ac2e198d727df7fd51c0403fde49c693e6d79163bc43fd8d847b8c-ol8_x86_64_u5_baseos_patch
kernel-debug-devel-4.18.0-348.23.1.el8_5.x86_64.rpm732937dc8aecf6a9444ac7385811c42cdcf8c36652fd25d153f8b3efc04f05f9-ol8_x86_64_baseos_latest
kernel-debug-devel-4.18.0-348.23.1.el8_5.x86_64.rpm732937dc8aecf6a9444ac7385811c42cdcf8c36652fd25d153f8b3efc04f05f9-ol8_x86_64_u5_baseos_patch
kernel-debug-modules-4.18.0-348.23.1.el8_5.x86_64.rpm47dc5e48e71cbae8823b37d4b318c5db2a6146e5292db4711ae6d535d6893f0f-ol8_x86_64_baseos_latest
kernel-debug-modules-4.18.0-348.23.1.el8_5.x86_64.rpm47dc5e48e71cbae8823b37d4b318c5db2a6146e5292db4711ae6d535d6893f0f-ol8_x86_64_u5_baseos_patch
kernel-debug-modules-extra-4.18.0-348.23.1.el8_5.x86_64.rpm70f65d12fba0efccc01fbbeb0193975b190476960f372ca83e038ab3c04d050d-ol8_x86_64_baseos_latest
kernel-debug-modules-extra-4.18.0-348.23.1.el8_5.x86_64.rpm70f65d12fba0efccc01fbbeb0193975b190476960f372ca83e038ab3c04d050d-ol8_x86_64_u5_baseos_patch
kernel-devel-4.18.0-348.23.1.el8_5.x86_64.rpmbc832008dfc630ee0eb53251ec6843c4b6b97b1c1ace76aa8848c5362c88dfe2-ol8_x86_64_baseos_latest
kernel-devel-4.18.0-348.23.1.el8_5.x86_64.rpmbc832008dfc630ee0eb53251ec6843c4b6b97b1c1ace76aa8848c5362c88dfe2-ol8_x86_64_u5_baseos_patch
kernel-doc-4.18.0-348.23.1.el8_5.noarch.rpmc1e1c25197fe0eae24cda1e9c08b800e371de9b0b03fb13e3bcf79a4507a07d8-ol8_x86_64_baseos_latest
kernel-doc-4.18.0-348.23.1.el8_5.noarch.rpmc1e1c25197fe0eae24cda1e9c08b800e371de9b0b03fb13e3bcf79a4507a07d8-ol8_x86_64_u5_baseos_patch
kernel-headers-4.18.0-348.23.1.el8_5.x86_64.rpme98719daa22939eef1f7b08b4b2259c0b2e2a27e03a690dad0a6c0a1c6b748b1-ol8_x86_64_baseos_latest
kernel-headers-4.18.0-348.23.1.el8_5.x86_64.rpme98719daa22939eef1f7b08b4b2259c0b2e2a27e03a690dad0a6c0a1c6b748b1-ol8_x86_64_u5_baseos_patch
kernel-modules-4.18.0-348.23.1.el8_5.x86_64.rpma8d948a121bd8df753f4f0228d8f6a9ddbec4cfce1a2159e3b262700b82046a5-ol8_x86_64_baseos_latest
kernel-modules-4.18.0-348.23.1.el8_5.x86_64.rpma8d948a121bd8df753f4f0228d8f6a9ddbec4cfce1a2159e3b262700b82046a5-ol8_x86_64_u5_baseos_patch
kernel-modules-extra-4.18.0-348.23.1.el8_5.x86_64.rpmf99f51ea01347ffec3801f12c8694526033721c55cd1db4abbd78ef70bd840ca-ol8_x86_64_baseos_latest
kernel-modules-extra-4.18.0-348.23.1.el8_5.x86_64.rpmf99f51ea01347ffec3801f12c8694526033721c55cd1db4abbd78ef70bd840ca-ol8_x86_64_u5_baseos_patch
kernel-tools-4.18.0-348.23.1.el8_5.x86_64.rpm91bab64bcd66fd66e1a37f3a48dff308f829a07b35454b4a09b40ad20b8bb707-ol8_x86_64_baseos_latest
kernel-tools-4.18.0-348.23.1.el8_5.x86_64.rpm91bab64bcd66fd66e1a37f3a48dff308f829a07b35454b4a09b40ad20b8bb707-ol8_x86_64_u5_baseos_patch
kernel-tools-libs-4.18.0-348.23.1.el8_5.x86_64.rpmcf4dca7c361ee63f0b39df98f96538f39a5e25ff61d4818431d57a3e2cb6cd29-ol8_x86_64_baseos_latest
kernel-tools-libs-4.18.0-348.23.1.el8_5.x86_64.rpmcf4dca7c361ee63f0b39df98f96538f39a5e25ff61d4818431d57a3e2cb6cd29-ol8_x86_64_u5_baseos_patch
kernel-tools-libs-devel-4.18.0-348.23.1.el8_5.x86_64.rpm470925e037c6201bf92a6a09212fc145e52aa1e0b413c0f65c216110dc809801-ol8_x86_64_codeready_builder
perf-4.18.0-348.23.1.el8_5.x86_64.rpm10f548524012f814c2547fa822a3fc830dfe0d4c84ea443e14193ebb15d89017-ol8_x86_64_baseos_latest
perf-4.18.0-348.23.1.el8_5.x86_64.rpm10f548524012f814c2547fa822a3fc830dfe0d4c84ea443e14193ebb15d89017-ol8_x86_64_u5_baseos_patch
python3-perf-4.18.0-348.23.1.el8_5.x86_64.rpmfc328240d9521ca2f674d107e2fa6b6d651ba0ac66a80e9f2fe2b65679e74b33-ol8_x86_64_baseos_latest
python3-perf-4.18.0-348.23.1.el8_5.x86_64.rpmfc328240d9521ca2f674d107e2fa6b6d651ba0ac66a80e9f2fe2b65679e74b33-ol8_x86_64_u5_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete