ELSA-2022-1550

ELSA-2022-1550 - kernel security and bug fix update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2022-04-27

Description

[4.18.0-348.23.1_5.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5

[4.18.0-348.23.1_5]
- gfs2: dequeue iopen holder in gfs2_inode_lookup error (Bob Peterson) [2069750 2061665]

[4.18.0-348.22.1_5]
- scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (Dick Kennedy) [2058193 2027558]
- cifs: check all path components in resolved dfs target (Ronnie Sahlberg) [2056329 2030880]
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032073 2032074] {CVE-2021-4028}

[4.18.0-348.21.1_5]
- netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2061446 2009786]
- selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2061446 2009786]
- netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2061446 2009786]
- netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056867 2056728] {CVE-2022-25636}
- netfilter: nftables_offload: KASAN slab-out-of-bounds Read in nft_flow_rule_create (Florian Westphal) [2056867 2056728] {CVE-2022-25636}

Related CVEs

CVE-2022-25636

CVE-2021-4028

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	kernel-4.18.0-348.23.1.el8_5.src.rpm	46b91ca4079a463832082c592d5f6841	-
	bpftool-4.18.0-348.23.1.el8_5.aarch64.rpm	a6d0a39a5fa881872690518d594abf03	-
	kernel-cross-headers-4.18.0-348.23.1.el8_5.aarch64.rpm	df6436ea3c15999015a1bd7ec87164db	-
	kernel-headers-4.18.0-348.23.1.el8_5.aarch64.rpm	2830181aaeadbaea2334242a8828e717	-
	kernel-tools-4.18.0-348.23.1.el8_5.aarch64.rpm	60adba13855f2fa70078b825fdecdb2c	-
	kernel-tools-libs-4.18.0-348.23.1.el8_5.aarch64.rpm	1c174aec43ca30a270cbb9ddd39f2d42	-
	kernel-tools-libs-devel-4.18.0-348.23.1.el8_5.aarch64.rpm	e6432543487d9e5cec30f643aba004fe	-
	perf-4.18.0-348.23.1.el8_5.aarch64.rpm	12affe29dbc7531ba7fed2b71c371380	-
	python3-perf-4.18.0-348.23.1.el8_5.aarch64.rpm	976fc176e52a7c5b1fafd650722ae57b	-
Oracle Linux 8 (x86_64)	kernel-4.18.0-348.23.1.el8_5.src.rpm	46b91ca4079a463832082c592d5f6841	-
	bpftool-4.18.0-348.23.1.el8_5.x86_64.rpm	452712f2a471601de1698ac938118257	-
	kernel-4.18.0-348.23.1.el8_5.x86_64.rpm	1f7d4daf878358ec4905765e5702b584	-
	kernel-abi-stablelists-4.18.0-348.23.1.el8_5.noarch.rpm	2be9a14fef54abbfd667614930bf078e	-
	kernel-core-4.18.0-348.23.1.el8_5.x86_64.rpm	09e1637d3a47c3a455b18170fbc4473e	-
	kernel-cross-headers-4.18.0-348.23.1.el8_5.x86_64.rpm	fd28aa99bfdf231e903928ecfe1b37a5	-
	kernel-debug-4.18.0-348.23.1.el8_5.x86_64.rpm	72afb5895f6861c765ef7cb74be7a35c	-
	kernel-debug-core-4.18.0-348.23.1.el8_5.x86_64.rpm	206257515c3de964518bedeb41aa5cf1	-
	kernel-debug-devel-4.18.0-348.23.1.el8_5.x86_64.rpm	7033571609d832df54c4226c3055a44b	-
	kernel-debug-modules-4.18.0-348.23.1.el8_5.x86_64.rpm	3f96d719b3e326ae492815e036028525	-
	kernel-debug-modules-extra-4.18.0-348.23.1.el8_5.x86_64.rpm	42173dceccb3af60f5dc43376536a571	-
	kernel-devel-4.18.0-348.23.1.el8_5.x86_64.rpm	514bcf02560502cc65342402d1bced27	-
	kernel-doc-4.18.0-348.23.1.el8_5.noarch.rpm	f0b40acb12b70697182223d6e98905a7	-
	kernel-headers-4.18.0-348.23.1.el8_5.x86_64.rpm	05f922c12283dd3d4002895cbc27fa12	-
	kernel-modules-4.18.0-348.23.1.el8_5.x86_64.rpm	f2c9f2dcfab9e9206f1e5432c8272993	-
	kernel-modules-extra-4.18.0-348.23.1.el8_5.x86_64.rpm	87666667d7a6c87c046166a45953b79e	-
	kernel-tools-4.18.0-348.23.1.el8_5.x86_64.rpm	036bd4ef5f05dd6b84bbc07f559b2da7	-
	kernel-tools-libs-4.18.0-348.23.1.el8_5.x86_64.rpm	d802c3e1e4beb81017749b52490c66fd	-
	kernel-tools-libs-devel-4.18.0-348.23.1.el8_5.x86_64.rpm	20f07cdc6684bc103b7b28fab09b3ed1	-
	perf-4.18.0-348.23.1.el8_5.x86_64.rpm	4601b20dac5d40d867d2a6e998d6177e	-
	python3-perf-4.18.0-348.23.1.el8_5.x86_64.rpm	0c5a2103fb80afff0a2d0e3dab0a2745	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team