Stay Connected:

ELSA-2022-6003

ELSA-2022-6003 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:MODERATE
Release Date:2022-08-10

Description


[5.14.0-70.22.1.0.1_0.OL9]
[lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499}

[5.14.0-70.22.1_0.OL9]
[Update Oracle Linux certificates (Kevin Lyons)
[Disable signing for aarch64 (Ilya Okomin)
[Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
[Update x509.genkey [Orabug: 24817676]
[Conflict with shim-ia32 and shim-x64 < 15.3-1.0.4
[Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]

[5.14.0-70.22.1_0]
[PCI: vmd: Revert 2565e5b69c44 ('PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled by IOMMU.') (Myron Stowe) [2109974 2084146]
[PCI: vmd: Assign VMD IRQ domain before enumeration (Myron Stowe) [2109974 2084146]
[rhel config: Set DMAR_UNITS_SUPPORTED (Jerry Snitselaar) [2105326 2094984]
[iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2105326 2094984]

[5.14.0-70.21.1_0]
[ibmvnic: fix race between xmit and reset (Gustavo Walbon) [2103085 2061556]
[scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2098251 2095440]
[scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2098251 2095440]

[5.14.0-70.20.1_0]
[block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ming Lei) [2106024 2066297] {CVE-2022-0494}
[ahci: Add a generic 'controller2' RAID id (Tomas Henzl) [2099740 2078880]
[ahci: remove duplicated PCI device IDs (Tomas Henzl) [2099740 2042790]
[gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2097306 2082193]
[gfs2: buffered write prefaulting (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Variable rename (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2097306 2082193]
[iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2097306 2082193]
[iomap: iomap_write_failed fix (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2097306 2082193]
[gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2097306 2082193]
[fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Make use of list_is_first (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2097306 2082193]
[gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2097306 2082193]
[gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2097306 2082193]
[gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2097306 2082193]

[5.14.0-70.19.1_0]
[KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2100903 2074832]
[powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092248 2055566]
[powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092248 2055566]
[powerpc/64s/hash: Make hash faults work in NMI context (Desnes A. Nunes do Rosario) [2092253 2062762]

[5.14.0-70.18.1_0]
[NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) [2101858 2086367]
[NFSv4 only print the label when its queried (Benjamin Coddington) [2101854 2057327]
[crypto: fips - make proc files report fips module name and version (Simo Sorce) [2093384 2080499]
[net: sched: fix use-after-free in tc_new_tfilter() (Ivan Vecera) [2071707 2090410] {CVE-2022-1055}


Related CVEs


CVE-2022-1055
CVE-2022-0494

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-70.22.1.0.1.el9_0.src.rpmeeeda0c5f76f0fde5ab4bbd7c0b78a30e875904cac5ee2f0bfa74e4dac79e2d1-ol9_aarch64_appstream
kernel-5.14.0-70.22.1.0.1.el9_0.src.rpmeeeda0c5f76f0fde5ab4bbd7c0b78a30e875904cac5ee2f0bfa74e4dac79e2d1-ol9_aarch64_baseos_latest
kernel-5.14.0-70.22.1.0.1.el9_0.src.rpmeeeda0c5f76f0fde5ab4bbd7c0b78a30e875904cac5ee2f0bfa74e4dac79e2d1-ol9_aarch64_codeready_builder
kernel-5.14.0-70.22.1.0.1.el9_0.src.rpmeeeda0c5f76f0fde5ab4bbd7c0b78a30e875904cac5ee2f0bfa74e4dac79e2d1-ol9_aarch64_u0_baseos_patch
bpftool-5.14.0-70.22.1.0.1.el9_0.aarch64.rpma6b260dfde2f05fb2a94b6761b718abcd509470638a471185c69c7a45d0004df-ol9_aarch64_baseos_latest
bpftool-5.14.0-70.22.1.0.1.el9_0.aarch64.rpma6b260dfde2f05fb2a94b6761b718abcd509470638a471185c69c7a45d0004df-ol9_aarch64_u0_baseos_patch
kernel-cross-headers-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm0e5834749f00b1d82295eda756e997a853333bdc753a65a053cd52e880db3980-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-70.22.1.0.1.el9_0.aarch64.rpmcfed51e2c8002ee4aa20ae8742b760e360aa3662695d37426d1b94cb51d8cfe4-ol9_aarch64_appstream
kernel-tools-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm0786b1fc6a86a28c787418deca1f8b1cd8c4bad8c770e6b4d0756f3b2289a45c-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm0786b1fc6a86a28c787418deca1f8b1cd8c4bad8c770e6b4d0756f3b2289a45c-ol9_aarch64_u0_baseos_patch
kernel-tools-libs-5.14.0-70.22.1.0.1.el9_0.aarch64.rpmf727765eee4aae24f019f5fcd125d6ec9706a2bc59eb6fd1a8d79f0783dac0ef-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-70.22.1.0.1.el9_0.aarch64.rpmf727765eee4aae24f019f5fcd125d6ec9706a2bc59eb6fd1a8d79f0783dac0ef-ol9_aarch64_u0_baseos_patch
kernel-tools-libs-devel-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm9e30a9fca61cf4df5c3bdd2cb554a4d438893f6ba77342f4838251355f252147-ol9_aarch64_codeready_builder
perf-5.14.0-70.22.1.0.1.el9_0.aarch64.rpmd980dac44cf839662ce717d883bc9d4ea79af33430175f43bf504d33a32d5397-ol9_aarch64_appstream
python3-perf-5.14.0-70.22.1.0.1.el9_0.aarch64.rpma868fb3534201c812002872cd043872a01ef502ef2f0307644a98fdccff6aae0-ol9_aarch64_baseos_latest
python3-perf-5.14.0-70.22.1.0.1.el9_0.aarch64.rpma868fb3534201c812002872cd043872a01ef502ef2f0307644a98fdccff6aae0-ol9_aarch64_u0_baseos_patch
Oracle Linux 9 (x86_64) kernel-5.14.0-70.22.1.0.1.el9_0.src.rpmeeeda0c5f76f0fde5ab4bbd7c0b78a30e875904cac5ee2f0bfa74e4dac79e2d1-ol9_x86_64_appstream
kernel-5.14.0-70.22.1.0.1.el9_0.src.rpmeeeda0c5f76f0fde5ab4bbd7c0b78a30e875904cac5ee2f0bfa74e4dac79e2d1-ol9_x86_64_baseos_latest
kernel-5.14.0-70.22.1.0.1.el9_0.src.rpmeeeda0c5f76f0fde5ab4bbd7c0b78a30e875904cac5ee2f0bfa74e4dac79e2d1-ol9_x86_64_codeready_builder
kernel-5.14.0-70.22.1.0.1.el9_0.src.rpmeeeda0c5f76f0fde5ab4bbd7c0b78a30e875904cac5ee2f0bfa74e4dac79e2d1-ol9_x86_64_u0_baseos_patch
bpftool-5.14.0-70.22.1.0.1.el9_0.x86_64.rpma6611c508cfa018716e0de6a008ac2233cc7388cb958da17f378bd11c9837609-ol9_x86_64_baseos_latest
bpftool-5.14.0-70.22.1.0.1.el9_0.x86_64.rpma6611c508cfa018716e0de6a008ac2233cc7388cb958da17f378bd11c9837609-ol9_x86_64_u0_baseos_patch
kernel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmcf6d834d387847c6836ffb180e9bcee85a1417da64029378df68cc30f60b09bf-ol9_x86_64_baseos_latest
kernel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmcf6d834d387847c6836ffb180e9bcee85a1417da64029378df68cc30f60b09bf-ol9_x86_64_u0_baseos_patch
kernel-abi-stablelists-5.14.0-70.22.1.0.1.el9_0.noarch.rpm8d7b29edd386a76e885e3bfd5dc18ce11ab3ffbd3120b1aee2e2012f812cf021-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-70.22.1.0.1.el9_0.noarch.rpm8d7b29edd386a76e885e3bfd5dc18ce11ab3ffbd3120b1aee2e2012f812cf021-ol9_x86_64_u0_baseos_patch
kernel-core-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm09023ffc9469d3af240abd90857cb87fe6298f5195a57bc6724ce6edcdf072bb-ol9_x86_64_baseos_latest
kernel-core-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm09023ffc9469d3af240abd90857cb87fe6298f5195a57bc6724ce6edcdf072bb-ol9_x86_64_u0_baseos_patch
kernel-cross-headers-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm9d10be58dc3a452b6c4393806295fddf728b4ac0c9276f5f019108127035eacb-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm9ca8b66a1fbfb555e5fdec9e966753231c8657b076b5cd11baa79359c57efeb0-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm9ca8b66a1fbfb555e5fdec9e966753231c8657b076b5cd11baa79359c57efeb0-ol9_x86_64_u0_baseos_patch
kernel-debug-core-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmee9a302cab3320a02f6353645130b8c358ba5471f7b86d4fd18861b9924c39a3-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmee9a302cab3320a02f6353645130b8c358ba5471f7b86d4fd18861b9924c39a3-ol9_x86_64_u0_baseos_patch
kernel-debug-devel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpme49dc3120b000e1cd5a9f1e0ce61d369d052b08629436c55abfe90924852bd0d-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm9f246df6e9c67488f9519f900a29f068596f0a3020faea753ad79726639eb629-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm988f81edfe71d1c12977cdd423d606966d24f4d330947291e9c5e72351765681-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm988f81edfe71d1c12977cdd423d606966d24f4d330947291e9c5e72351765681-ol9_x86_64_u0_baseos_patch
kernel-debug-modules-extra-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm807806ff464cc01b792822547e69f4bb7c9b6502032147c2a93e1953d64515b1-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm807806ff464cc01b792822547e69f4bb7c9b6502032147c2a93e1953d64515b1-ol9_x86_64_u0_baseos_patch
kernel-devel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm2b261a75c594dd37a0889607e4d8c938076fbc7c1a3aa136e5e0c76dc263a2ea-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm6900f9b19e1853acc6ddfcd15df19e62544ad8bf62fa448c62ebc7eb62e21fdb-ol9_x86_64_appstream
kernel-doc-5.14.0-70.22.1.0.1.el9_0.noarch.rpmfa2f53c94427ce3d5d66d3d8736bf2e84f0ead40be14872ca757c0acc40e2d68-ol9_x86_64_appstream
kernel-headers-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm1f3395099a60d76abadd09d25d746576d7bc8a556eac3cbbe4799a979ecac3ce-ol9_x86_64_appstream
kernel-modules-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm9a2c3bb30597b890b9c7eb1c623d8300843fdc078de8aae541c9f7a572ec2b5b-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm9a2c3bb30597b890b9c7eb1c623d8300843fdc078de8aae541c9f7a572ec2b5b-ol9_x86_64_u0_baseos_patch
kernel-modules-extra-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm074be6b7092e43cc807c003a8990fe3688b7009478c30e8a2fc9fb9a83b7fd52-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm074be6b7092e43cc807c003a8990fe3688b7009478c30e8a2fc9fb9a83b7fd52-ol9_x86_64_u0_baseos_patch
kernel-tools-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm306db8b41ee45c72b0ab982d9cdd3cd67a7aad50f0edfc0b0c37a9338cdccc66-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm306db8b41ee45c72b0ab982d9cdd3cd67a7aad50f0edfc0b0c37a9338cdccc66-ol9_x86_64_u0_baseos_patch
kernel-tools-libs-5.14.0-70.22.1.0.1.el9_0.x86_64.rpma99e9592467f3ecc9c0f945de9e99deeec8b6788ca9df56e76544d483813eaaf-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-70.22.1.0.1.el9_0.x86_64.rpma99e9592467f3ecc9c0f945de9e99deeec8b6788ca9df56e76544d483813eaaf-ol9_x86_64_u0_baseos_patch
kernel-tools-libs-devel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm8a64d3383ce82a141be9448fbc5c0858391ffae0bb7e0cacc9b51d5b46edc090-ol9_x86_64_codeready_builder
perf-5.14.0-70.22.1.0.1.el9_0.x86_64.rpme3b22c4ad61bb87b744443e561538d87ef78e0940fa99210a7699db407056f26-ol9_x86_64_appstream
python3-perf-5.14.0-70.22.1.0.1.el9_0.x86_64.rpme4776b2753914d8aabc14726e0678da01fa35a0d6c6c0eb8057f7201eaff7c39-ol9_x86_64_baseos_latest
python3-perf-5.14.0-70.22.1.0.1.el9_0.x86_64.rpme4776b2753914d8aabc14726e0678da01fa35a0d6c6c0eb8057f7201eaff7c39-ol9_x86_64_u0_baseos_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights