ELSA-2024-12814

ELSA-2024-12814 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-11-11

Description

[4.14.35-2047.542.2]
- fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna) [Orabug: 37156524]
- lib/math: move int_pow() from pwm_bl.c for wider use (Andy Shevchenko) [Orabug: 37156524]

[4.14.35-2047.542.1]
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (Dongli Zhang) [Orabug: 37132827]
- net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev) [Orabug: 37104452]
- RDMA/cma: Always set static rate to 0 for RoCE (Mark Zhang) [Orabug: 37100216]
- net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev) [Orabug: 37099360]
- LTS version v4.14.352 (Yifei Liu)
- filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36874759] {CVE-2024-41012} {CVE-2024-41020}
- jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891668] {CVE-2024-41017}
- ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891656] {CVE-2024-41015}
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)
- ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)
- filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874759] {CVE-2024-41012} {CVE-2024-41020}
- hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896970] {CVE-2024-41059}
- selftests/vDSO: fix clang build errors and warnings (John Hubbard)
- spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-Konig)
- fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896995] {CVE-2024-41063}
- net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)
- net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)
- s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897034] {CVE-2024-41068}
- Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897313] {CVE-2024-41072}
- mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)
- fs/file: fix the check in find_next_fd() (Yuntao Wang)
- kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)
- kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)
- ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897361] {CVE-2024-41081}
- Input: silead - Always support 10 fingers (Hans de Goede)
- Input: silead - add support for capactive home button found on some x86 tablets (Hans de Goede)
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)
- ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)
- ACPI: EC: Abort address space access upon error (Armin Wolf)
- scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)
- gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)

Related CVEs

CVE-2024-41015

CVE-2024-41059

CVE-2024-41068

CVE-2024-41063

CVE-2024-41081

CVE-2024-41012

CVE-2024-41072

CVE-2024-41017

CVE-2024-41020

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	kernel-uek-4.14.35-2047.542.2.el7uek.src.rpm	376f79a32a28c18c2c35adb7f3e513e2	-	ol7_aarch64_developer_UEKR5
	kernel-uek-4.14.35-2047.542.2.el7uek.src.rpm	376f79a32a28c18c2c35adb7f3e513e2	-	ol7_aarch64_latest
	kernel-uek-4.14.35-2047.542.2.el7uek.src.rpm	376f79a32a28c18c2c35adb7f3e513e2	-	ol7_aarch64_optional_latest
	kernel-uek-4.14.35-2047.542.2.el7uek.src.rpm	376f79a32a28c18c2c35adb7f3e513e2	-	ol7_aarch64_u9_patch
	kernel-uek-4.14.35-2047.542.2.el7uek.aarch64.rpm	0648787253384033701f47381e90ac24	-	ol7_aarch64_developer_UEKR5
	kernel-uek-4.14.35-2047.542.2.el7uek.aarch64.rpm	0648787253384033701f47381e90ac24	-	ol7_aarch64_latest
	kernel-uek-4.14.35-2047.542.2.el7uek.aarch64.rpm	0648787253384033701f47381e90ac24	-	ol7_aarch64_u9_patch
	kernel-uek-debug-4.14.35-2047.542.2.el7uek.aarch64.rpm	77d1ea28668b5155f7250332ab495f04	-	ol7_aarch64_developer_UEKR5
	kernel-uek-debug-4.14.35-2047.542.2.el7uek.aarch64.rpm	77d1ea28668b5155f7250332ab495f04	-	ol7_aarch64_latest
	kernel-uek-debug-4.14.35-2047.542.2.el7uek.aarch64.rpm	77d1ea28668b5155f7250332ab495f04	-	ol7_aarch64_u9_patch
	kernel-uek-debug-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	1813a04bd6f82506675f2398ad7182c1	-	ol7_aarch64_developer_UEKR5
	kernel-uek-debug-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	1813a04bd6f82506675f2398ad7182c1	-	ol7_aarch64_latest
	kernel-uek-debug-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	1813a04bd6f82506675f2398ad7182c1	-	ol7_aarch64_u9_patch
	kernel-uek-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	f10446f8d80062bf660ed0a2b6d8dd02	-	ol7_aarch64_developer_UEKR5
	kernel-uek-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	f10446f8d80062bf660ed0a2b6d8dd02	-	ol7_aarch64_latest
	kernel-uek-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	f10446f8d80062bf660ed0a2b6d8dd02	-	ol7_aarch64_u9_patch
	kernel-uek-headers-4.14.35-2047.542.2.el7uek.aarch64.rpm	7277d19393d763759db8631e526083ea	-	ol7_aarch64_developer_UEKR5
	kernel-uek-headers-4.14.35-2047.542.2.el7uek.aarch64.rpm	7277d19393d763759db8631e526083ea	-	ol7_aarch64_latest
	kernel-uek-headers-4.14.35-2047.542.2.el7uek.aarch64.rpm	7277d19393d763759db8631e526083ea	-	ol7_aarch64_u9_patch
	kernel-uek-tools-4.14.35-2047.542.2.el7uek.aarch64.rpm	d2ab6fc4507590e70ea96de5e51768f6	-	ol7_aarch64_developer_UEKR5
	kernel-uek-tools-4.14.35-2047.542.2.el7uek.aarch64.rpm	d2ab6fc4507590e70ea96de5e51768f6	-	ol7_aarch64_latest
	kernel-uek-tools-4.14.35-2047.542.2.el7uek.aarch64.rpm	d2ab6fc4507590e70ea96de5e51768f6	-	ol7_aarch64_u9_patch
	kernel-uek-tools-libs-4.14.35-2047.542.2.el7uek.aarch64.rpm	d81658ed943a58860e7440f569a143ef	-	ol7_aarch64_developer_UEKR5
	kernel-uek-tools-libs-4.14.35-2047.542.2.el7uek.aarch64.rpm	d81658ed943a58860e7440f569a143ef	-	ol7_aarch64_latest
	kernel-uek-tools-libs-4.14.35-2047.542.2.el7uek.aarch64.rpm	d81658ed943a58860e7440f569a143ef	-	ol7_aarch64_u9_patch
	kernel-uek-tools-libs-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	c58da649406cfefa9c4c2d22c5239a43	-	ol7_aarch64_developer_UEKR5
	kernel-uek-tools-libs-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	c58da649406cfefa9c4c2d22c5239a43	-	ol7_aarch64_latest
	kernel-uek-tools-libs-devel-4.14.35-2047.542.2.el7uek.aarch64.rpm	c58da649406cfefa9c4c2d22c5239a43	-	ol7_aarch64_u9_patch
	perf-4.14.35-2047.542.2.el7uek.aarch64.rpm	3989e836684beaf9ba91a6b081bf5a77	-	ol7_aarch64_developer_UEKR5
	perf-4.14.35-2047.542.2.el7uek.aarch64.rpm	3989e836684beaf9ba91a6b081bf5a77	-	ol7_aarch64_latest
	perf-4.14.35-2047.542.2.el7uek.aarch64.rpm	3989e836684beaf9ba91a6b081bf5a77	-	ol7_aarch64_u9_patch
	python-perf-4.14.35-2047.542.2.el7uek.aarch64.rpm	6c3cbc45c08fce052a21324e44ff138f	-	ol7_aarch64_developer_UEKR5
	python-perf-4.14.35-2047.542.2.el7uek.aarch64.rpm	6c3cbc45c08fce052a21324e44ff138f	-	ol7_aarch64_latest
	python-perf-4.14.35-2047.542.2.el7uek.aarch64.rpm	6c3cbc45c08fce052a21324e44ff138f	-	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	kernel-uek-4.14.35-2047.542.2.el7uek.src.rpm	376f79a32a28c18c2c35adb7f3e513e2	-	ol7_x86_64_UEKR5
	kernel-uek-4.14.35-2047.542.2.el7uek.src.rpm	376f79a32a28c18c2c35adb7f3e513e2	-	ol7_x86_64_developer_UEKR5
	kernel-uek-4.14.35-2047.542.2.el7uek.x86_64.rpm	e276e71bba0bed3f109d898f0152d609	-	ol7_x86_64_UEKR5
	kernel-uek-4.14.35-2047.542.2.el7uek.x86_64.rpm	e276e71bba0bed3f109d898f0152d609	-	ol7_x86_64_developer_UEKR5
	kernel-uek-debug-4.14.35-2047.542.2.el7uek.x86_64.rpm	329b6083a41902edc163c464738233ae	-	ol7_x86_64_UEKR5
	kernel-uek-debug-4.14.35-2047.542.2.el7uek.x86_64.rpm	329b6083a41902edc163c464738233ae	-	ol7_x86_64_developer_UEKR5
	kernel-uek-debug-devel-4.14.35-2047.542.2.el7uek.x86_64.rpm	7d958dc53be0f9d642444d6dcb36743a	-	ol7_x86_64_UEKR5
	kernel-uek-debug-devel-4.14.35-2047.542.2.el7uek.x86_64.rpm	7d958dc53be0f9d642444d6dcb36743a	-	ol7_x86_64_developer_UEKR5
	kernel-uek-devel-4.14.35-2047.542.2.el7uek.x86_64.rpm	e54b9b587ae4268284dd496a4f259468	-	ol7_x86_64_UEKR5
	kernel-uek-devel-4.14.35-2047.542.2.el7uek.x86_64.rpm	e54b9b587ae4268284dd496a4f259468	-	ol7_x86_64_developer_UEKR5
	kernel-uek-doc-4.14.35-2047.542.2.el7uek.noarch.rpm	ef36e0aecb419efbc3dc1c08d18a76c2	-	ol7_x86_64_UEKR5
	kernel-uek-doc-4.14.35-2047.542.2.el7uek.noarch.rpm	ef36e0aecb419efbc3dc1c08d18a76c2	-	ol7_x86_64_developer_UEKR5
	kernel-uek-tools-4.14.35-2047.542.2.el7uek.x86_64.rpm	38f00cb7eb0c2c94af280de2883ed8af	-	ol7_x86_64_UEKR5
	kernel-uek-tools-4.14.35-2047.542.2.el7uek.x86_64.rpm	38f00cb7eb0c2c94af280de2883ed8af	-	ol7_x86_64_developer_UEKR5