Stay Connected:

ELSA-2022-6003

ELSA-2022-6003 - kernel security, bug fix, and enhancement update

Type:SECURITY
Severity:MODERATE
Release Date:2022-08-10

Description


[5.14.0-70.22.1.0.1_0.OL9]
[lockdown: also lock down previous kgdb use (Daniel Thompson) [Orabug: 34290418] {CVE-2022-21499}

[5.14.0-70.22.1_0.OL9]
[Update Oracle Linux certificates (Kevin Lyons)
[Disable signing for aarch64 (Ilya Okomin)
[Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
[Update x509.genkey [Orabug: 24817676]
[Conflict with shim-ia32 and shim-x64 < 15.3-1.0.4
[Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]

[5.14.0-70.22.1_0]
[PCI: vmd: Revert 2565e5b69c44 ('PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled by IOMMU.') (Myron Stowe) [2109974 2084146]
[PCI: vmd: Assign VMD IRQ domain before enumeration (Myron Stowe) [2109974 2084146]
[rhel config: Set DMAR_UNITS_SUPPORTED (Jerry Snitselaar) [2105326 2094984]
[iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2105326 2094984]

[5.14.0-70.21.1_0]
[ibmvnic: fix race between xmit and reset (Gustavo Walbon) [2103085 2061556]
[scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2098251 2095440]
[scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2098251 2095440]

[5.14.0-70.20.1_0]
[block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ming Lei) [2106024 2066297] {CVE-2022-0494}
[ahci: Add a generic 'controller2' RAID id (Tomas Henzl) [2099740 2078880]
[ahci: remove duplicated PCI device IDs (Tomas Henzl) [2099740 2042790]
[gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2097306 2082193]
[gfs2: buffered write prefaulting (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Variable rename (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2097306 2082193]
[iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2097306 2082193]
[iomap: iomap_write_failed fix (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2097306 2082193]
[gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2097306 2082193]
[fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Make use of list_is_first (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2097306 2082193]
[gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2097306 2082193]
[gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2097306 2082193]
[gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2097306 2082193]
[gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2097306 2082193]

[5.14.0-70.19.1_0]
[KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2100903 2074832]
[powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092248 2055566]
[powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092248 2055566]
[powerpc/64s/hash: Make hash faults work in NMI context (Desnes A. Nunes do Rosario) [2092253 2062762]

[5.14.0-70.18.1_0]
[NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) [2101858 2086367]
[NFSv4 only print the label when its queried (Benjamin Coddington) [2101854 2057327]
[crypto: fips - make proc files report fips module name and version (Simo Sorce) [2093384 2080499]
[net: sched: fix use-after-free in tc_new_tfilter() (Ivan Vecera) [2071707 2090410] {CVE-2022-1055}


Related CVEs


CVE-2022-0494
CVE-2022-1055

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 9 (aarch64) kernel-5.14.0-70.22.1.0.1.el9_0.src.rpm2cfa9a0132311dbb15bc80a7229225c1-
bpftool-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm8c480c0d0a8ee3071ddeda27e716f1ac-
kernel-cross-headers-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm22041f676d23001b1884f21fa73f4c4c-
kernel-headers-5.14.0-70.22.1.0.1.el9_0.aarch64.rpmc74373bcb754238456f19bef0dc47844-
kernel-tools-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm19d520921b4382b4210df6e0b2f8c4bd-
kernel-tools-libs-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm4c571884478568a19de002de39cd3ed0-
kernel-tools-libs-devel-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm85ef746e2854084c1bfe016a09d12c15-
perf-5.14.0-70.22.1.0.1.el9_0.aarch64.rpm1c9c43857f1c6fd3111cc966cf47622e-
python3-perf-5.14.0-70.22.1.0.1.el9_0.aarch64.rpmfcd7a74a1f8c4f2b09f0139a8b6505bb-
Oracle Linux 9 (x86_64) kernel-5.14.0-70.22.1.0.1.el9_0.src.rpm2cfa9a0132311dbb15bc80a7229225c1-
bpftool-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm29aa9eee81de671db67a52169d044a11-
kernel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm04c8dec913bf491e4ff7fe2f4c645115-
kernel-abi-stablelists-5.14.0-70.22.1.0.1.el9_0.noarch.rpm112017781ba314095953d6db473200d6-
kernel-core-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm356780480e072b38d52b6afd7a210f99-
kernel-cross-headers-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm626f17650e92845d429d7d377433a011-
kernel-debug-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm4f989592ea7dd351f49fff9301d57c1a-
kernel-debug-core-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmef965c76396ed56c24ea0dafa8508195-
kernel-debug-devel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmbc0bce2c6aff31c18c3bb36abdef7dce-
kernel-debug-devel-matched-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm2d1d81be454fd35bf483064d5ab1cde0-
kernel-debug-modules-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm8da610ccf36b1242a6bf925fafc5f009-
kernel-debug-modules-extra-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm3e75bb9a5b2a6eda40a9f8832fb87b03-
kernel-devel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm60922b28e8beacff56202dd15d3c3e88-
kernel-devel-matched-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmece296d0ae7db52838b95b169d7e4d56-
kernel-doc-5.14.0-70.22.1.0.1.el9_0.noarch.rpmc1a5d441612eb9f98b54fe4765253180-
kernel-headers-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm6be46837b04bc809d46f00604c63c08d-
kernel-modules-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmff0e1acec0ad89dfb06343745e34dfa1-
kernel-modules-extra-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmd0fd3dfbd2dcd89f86d0a081ef0209f1-
kernel-tools-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm561d696d2f9ead5f3e04dd0230279346-
kernel-tools-libs-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm24f4019774c2c6fdd260c5a506542ca1-
kernel-tools-libs-devel-5.14.0-70.22.1.0.1.el9_0.x86_64.rpmcd3717d9964c931cfe452edc789d30d2-
perf-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm6b3e245c8b697086537c41316198d761-
python3-perf-5.14.0-70.22.1.0.1.el9_0.x86_64.rpm7b253c3fec6da5bfb58e6e3c47cc5362-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights