Stay Connected:

ELSA-2024-12830

ELSA-2024-12830 - Unbreakable Enterprise kernel security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2024-11-20

Description


[5.15.0-300.163.18.7]
- Revert 'net/mlx5: disable the 'fast unload' feature on Exadata systems' (Qing Huang) [Orabug: 37285705]
- Revert 'net/mlx5: pretend 'fast unload' succeeded on Exadata systems' (Qing Huang) [Orabug: 37285705]

[5.15.0-300.163.18.6]
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Adamos Ttofari) [Orabug: 37281022] {CVE-2024-35801}
- devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev) [Orabug: 37281015] {CVE-2024-26734}
- RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood) [Orabug: 31688618] [Orabug: 37279424]
- block: fix inflight io counter leaking when io sumit failure for dm device (Junxiao Bi) [Orabug: 37279421]

[5.15.0-300.163.18.5]
- net/mlx5: pretend 'fast unload' succeeded on Exadata systems (Gerd Rausch) [Orabug: 37264565]
- rds: Do not invoke the transport's recv_path() while in atomic context (Hakon Bugge) [Orabug: 37264563]

[5.15.0-300.163.18.4]
- nvme: fix deadlock between reset and scan (Bitao Hu) [Orabug: 37260320]
- rds: ib: Avoid reuse of IB MRs when cleaning is in progress (Hakon Bugge) [Orabug: 37260304]
- Revert 'rds: ib: Make sure receives are posted before connection is up' (Gerd Rausch) [Orabug: 37260292]

[5.15.0-300.163.18.3]
- kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 37203371] {CVE-2024-42292}
- net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang) [Orabug: 37203368]

[5.15.0-300.163.18.2]
- netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). (Kuniyuki Iwashima) [Orabug: 37184791] {CVE-2024-42269}
- netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso) [Orabug: 37184793] {CVE-2024-27397}
- IB/mlx5: Fix mlx5_ib_get_vector_irqn() after dynamic IRQ allocation change (Gerd Rausch) [Orabug: 37189054]
- x86/bugs: Adjust SRSO mitigation to new features (Boris Ostrovsky) [Orabug: 37184802]
- KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (Kim Phillips) [Orabug: 37184800]
- x86/cpu, kvm: Add the SMM_CTL MSR not present feature (Kim Phillips) [Orabug: 37184800]
- x86/cpu, kvm: Add the Null Selector Clears Base feature (Kim Phillips) [Orabug: 37184800]
- x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (Kim Phillips) [Orabug: 37184800]
- x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (Kim Phillips) [Orabug: 37184800]
- KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (Kim Phillips) [Orabug: 37184800]
- KVM: x86: Advertise that the SMM_CTL MSR is not supported (Jim Mattson) [Orabug: 37184800]
- KVM: x86: synthesize CPUID leaf 0x80000021h if useful (Paolo Bonzini) [Orabug: 37184800]
- KVM: x86: skip host CPUID call for hypervisor leaves (Paolo Bonzini) [Orabug: 37184800]
- KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini) [Orabug: 37184800]
- amd_hsmp: Update PwrEfficiencyModeSelection message (Suma Hegde) [Orabug: 37185578]
- amd_hsmp: Add support for new error codes returned from firmware (Suma Hegde) [Orabug: 37185578]
- amd_hsmp: Add new HSMP messages of protocol version 7 (Suma Hegde) [Orabug: 37185578]
- netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). (Kuniyuki Iwashima) [Orabug: 37184779] {CVE-2024-42270}
- mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds) [Orabug: 37184794] {CVE-2024-47674}
- net/mlx5: Fix IPsec RoCE MPV trace call (Patrisious Haddad) [Orabug: 37184799]
- fwctl: Allow up to 4k devices (Saeed Mahameed) [Orabug: 37184797]
- mm/memory-failure: send SIGBUS in the event of thp split fail (Jane Chu) [Orabug: 37184796]
- mm/memory-failure: move hwpoison_filter() higher up (Jane Chu) [Orabug: 37184796]
- mm/memory-failure: improve memory failure action_result messages (Jane Chu) [Orabug: 37184796]
- mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED (Naoya Horiguchi) [Orabug: 37184796]
- mm/madvise: add MF_ACTION_REQUIRED to madvise(MADV_HWPOISON) (Jane Chu) [Orabug: 37184796]
- mm/memory-failure: try to send SIGBUS even if unmap failed (Jane Chu) [Orabug: 37184796]
- mm: memory-failure: cleanup try_to_split_thp_page() (Kefeng Wang) [Orabug: 37184796]

[5.15.0-300.163.18.1]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37132350]

[5.15.0-300.163.18]
- crypto: qat - specify firmware files for 402xx (Giovanni Cabiddu) [Orabug: 37044631]


Related CVEs


CVE-2024-26734
CVE-2024-27397
CVE-2024-35801
CVE-2024-42292
CVE-2024-47674
CVE-2024-42269
CVE-2024-42270

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By AdvisoryChannel Label
Oracle Linux 8 (aarch64) kernel-uek-5.15.0-300.163.18.7.el8uek.src.rpmd2ea48ab481e0d0d3f74273aa06ff420-ol8_aarch64_UEKR7
bpftool-5.15.0-300.163.18.7.el8uek.aarch64.rpmcca2e58fc112eedbbc730d0b4108251f-ol8_aarch64_UEKR7
kernel-uek-5.15.0-300.163.18.7.el8uek.aarch64.rpma40ca5d02c1dd78b6df874aae0192694-ol8_aarch64_UEKR7
kernel-uek-container-5.15.0-300.163.18.7.el8uek.aarch64.rpmb359ad7c2d0854e77becf1f86123c06c-ol8_aarch64_UEKR7
kernel-uek-container-debug-5.15.0-300.163.18.7.el8uek.aarch64.rpm6e4ed10325e084a80d384e82bff2e915-ol8_aarch64_UEKR7
kernel-uek-core-5.15.0-300.163.18.7.el8uek.aarch64.rpm7d1d37853fdbaae9d9e8e4f50826cd83-ol8_aarch64_UEKR7
kernel-uek-debug-5.15.0-300.163.18.7.el8uek.aarch64.rpm63a7db755f3927647c888c67166e1d88-ol8_aarch64_UEKR7
kernel-uek-debug-core-5.15.0-300.163.18.7.el8uek.aarch64.rpm5698eb4f766636a7b1daa572bb1bf3af-ol8_aarch64_UEKR7
kernel-uek-debug-devel-5.15.0-300.163.18.7.el8uek.aarch64.rpmb02ff9b7238645af80d0fe63664a6e73-ol8_aarch64_UEKR7
kernel-uek-debug-modules-5.15.0-300.163.18.7.el8uek.aarch64.rpm0194f77a9885c17876eb8e779beecac0-ol8_aarch64_UEKR7
kernel-uek-debug-modules-extra-5.15.0-300.163.18.7.el8uek.aarch64.rpm0391ad38174384000f31a4efa33e8ac1-ol8_aarch64_UEKR7
kernel-uek-devel-5.15.0-300.163.18.7.el8uek.aarch64.rpm22645c2054de3b8eab332bc33bca2a21-ol8_aarch64_UEKR7
kernel-uek-doc-5.15.0-300.163.18.7.el8uek.noarch.rpmdb5205a0fa17c66ec113fd67826d2e8a-ol8_aarch64_UEKR7
kernel-uek-modules-5.15.0-300.163.18.7.el8uek.aarch64.rpmb24dd05d8cb1a38999b25e5f789234e6-ol8_aarch64_UEKR7
kernel-uek-modules-extra-5.15.0-300.163.18.7.el8uek.aarch64.rpm2382ed743a23bddcb969fe8070da33d4-ol8_aarch64_UEKR7
Oracle Linux 8 (x86_64) kernel-uek-5.15.0-300.163.18.7.el8uek.src.rpmd2ea48ab481e0d0d3f74273aa06ff420-ol8_x86_64_UEKR7
bpftool-5.15.0-300.163.18.7.el8uek.x86_64.rpm953ed0b6e8d5d346dad78fa97878e89e-ol8_x86_64_UEKR7
kernel-uek-5.15.0-300.163.18.7.el8uek.x86_64.rpmdbd6ab13e89f62cbc9c0cd0923a6c550-ol8_x86_64_UEKR7
kernel-uek-container-5.15.0-300.163.18.7.el8uek.x86_64.rpmb0b6d2e1fcee18a2bb8a7a1fd4c8dfef-ol8_x86_64_UEKR7
kernel-uek-container-debug-5.15.0-300.163.18.7.el8uek.x86_64.rpmd173b0fb5f1de56cbebcf3494de89b12-ol8_x86_64_UEKR7
kernel-uek-core-5.15.0-300.163.18.7.el8uek.x86_64.rpme05a31709476dbdc6fcf93cdda251235-ol8_x86_64_UEKR7
kernel-uek-debug-5.15.0-300.163.18.7.el8uek.x86_64.rpm171c713fed103841fa9ca26805614293-ol8_x86_64_UEKR7
kernel-uek-debug-core-5.15.0-300.163.18.7.el8uek.x86_64.rpmb1342366aac06e1ca502bbade232e586-ol8_x86_64_UEKR7
kernel-uek-debug-devel-5.15.0-300.163.18.7.el8uek.x86_64.rpmc3fafec347f5333416b9155c02feb75c-ol8_x86_64_UEKR7
kernel-uek-debug-modules-5.15.0-300.163.18.7.el8uek.x86_64.rpm378c12c4d3692edbd178ff9791c22f23-ol8_x86_64_UEKR7
kernel-uek-debug-modules-extra-5.15.0-300.163.18.7.el8uek.x86_64.rpm4571e4d653ed729da2679d51fa4dd200-ol8_x86_64_UEKR7
kernel-uek-devel-5.15.0-300.163.18.7.el8uek.x86_64.rpm97dd2eb1144a7b527adb391e61a3625f-ol8_x86_64_UEKR7
kernel-uek-doc-5.15.0-300.163.18.7.el8uek.noarch.rpmdb5205a0fa17c66ec113fd67826d2e8a-ol8_x86_64_UEKR7
kernel-uek-modules-5.15.0-300.163.18.7.el8uek.x86_64.rpm8a428bc705676ce2e81388e356ce8953-ol8_x86_64_UEKR7
kernel-uek-modules-extra-5.15.0-300.163.18.7.el8uek.x86_64.rpmc664a8c88c41eded15a823e7c4f2dc83-ol8_x86_64_UEKR7
Oracle Linux 9 (aarch64) kernel-uek-5.15.0-300.163.18.7.el9uek.src.rpm55ce84bbd92981653f8011173cc706a8-ol9_aarch64_baseos_latest
kernel-uek-5.15.0-300.163.18.7.el9uek.src.rpm55ce84bbd92981653f8011173cc706a8-ol9_aarch64_u5_baseos_patch
bpftool-5.15.0-300.163.18.7.el9uek.aarch64.rpmc3252bcb64271f794c968e2d49cb11af-ol9_aarch64_baseos_latest
bpftool-5.15.0-300.163.18.7.el9uek.aarch64.rpmc3252bcb64271f794c968e2d49cb11af-ol9_aarch64_u5_baseos_patch
kernel-uek-5.15.0-300.163.18.7.el9uek.aarch64.rpmc9e6056494d6832708bc210e1d0034cc-ol9_aarch64_baseos_latest
kernel-uek-5.15.0-300.163.18.7.el9uek.aarch64.rpmc9e6056494d6832708bc210e1d0034cc-ol9_aarch64_u5_baseos_patch
kernel-uek-container-5.15.0-300.163.18.7.el9uek.aarch64.rpm4abfe3e272ed348719e9e0077c962307-ol9_aarch64_baseos_latest
kernel-uek-container-5.15.0-300.163.18.7.el9uek.aarch64.rpm4abfe3e272ed348719e9e0077c962307-ol9_aarch64_u5_baseos_patch
kernel-uek-container-debug-5.15.0-300.163.18.7.el9uek.aarch64.rpme833b29c9fa533f1694093d40bc9b344-ol9_aarch64_baseos_latest
kernel-uek-container-debug-5.15.0-300.163.18.7.el9uek.aarch64.rpme833b29c9fa533f1694093d40bc9b344-ol9_aarch64_u5_baseos_patch
kernel-uek-core-5.15.0-300.163.18.7.el9uek.aarch64.rpmb18cf4b0047a4d41685d4306407be2b9-ol9_aarch64_baseos_latest
kernel-uek-core-5.15.0-300.163.18.7.el9uek.aarch64.rpmb18cf4b0047a4d41685d4306407be2b9-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-5.15.0-300.163.18.7.el9uek.aarch64.rpm450aa302b3733e000db3322e93725dea-ol9_aarch64_baseos_latest
kernel-uek-debug-5.15.0-300.163.18.7.el9uek.aarch64.rpm450aa302b3733e000db3322e93725dea-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-core-5.15.0-300.163.18.7.el9uek.aarch64.rpmd6e7e5961478f1776f03a401667ed616-ol9_aarch64_baseos_latest
kernel-uek-debug-core-5.15.0-300.163.18.7.el9uek.aarch64.rpmd6e7e5961478f1776f03a401667ed616-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-devel-5.15.0-300.163.18.7.el9uek.aarch64.rpm57bd56bd82913cbf9a291def52e6f6b7-ol9_aarch64_baseos_latest
kernel-uek-debug-devel-5.15.0-300.163.18.7.el9uek.aarch64.rpm57bd56bd82913cbf9a291def52e6f6b7-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-modules-5.15.0-300.163.18.7.el9uek.aarch64.rpm2d522d0d727460e49512cc4da7564b6b-ol9_aarch64_baseos_latest
kernel-uek-debug-modules-5.15.0-300.163.18.7.el9uek.aarch64.rpm2d522d0d727460e49512cc4da7564b6b-ol9_aarch64_u5_baseos_patch
kernel-uek-debug-modules-extra-5.15.0-300.163.18.7.el9uek.aarch64.rpm3dbf7f193d795d93228d02b75bc37b0b-ol9_aarch64_baseos_latest
kernel-uek-debug-modules-extra-5.15.0-300.163.18.7.el9uek.aarch64.rpm3dbf7f193d795d93228d02b75bc37b0b-ol9_aarch64_u5_baseos_patch
kernel-uek-devel-5.15.0-300.163.18.7.el9uek.aarch64.rpm20d6454a9cc202d8d17f1bd9447ca394-ol9_aarch64_baseos_latest
kernel-uek-devel-5.15.0-300.163.18.7.el9uek.aarch64.rpm20d6454a9cc202d8d17f1bd9447ca394-ol9_aarch64_u5_baseos_patch
kernel-uek-doc-5.15.0-300.163.18.7.el9uek.noarch.rpm06af68c9d015b730a036e67c34af501b-ol9_aarch64_baseos_latest
kernel-uek-doc-5.15.0-300.163.18.7.el9uek.noarch.rpm06af68c9d015b730a036e67c34af501b-ol9_aarch64_u5_baseos_patch
kernel-uek-modules-5.15.0-300.163.18.7.el9uek.aarch64.rpm7932a4b4cb0e8528653d333fc473b883-ol9_aarch64_baseos_latest
kernel-uek-modules-5.15.0-300.163.18.7.el9uek.aarch64.rpm7932a4b4cb0e8528653d333fc473b883-ol9_aarch64_u5_baseos_patch
kernel-uek-modules-extra-5.15.0-300.163.18.7.el9uek.aarch64.rpm73c25dc1f354ddfd06cb41a191010db8-ol9_aarch64_baseos_latest
kernel-uek-modules-extra-5.15.0-300.163.18.7.el9uek.aarch64.rpm73c25dc1f354ddfd06cb41a191010db8-ol9_aarch64_u5_baseos_patch
Oracle Linux 9 (x86_64) kernel-uek-5.15.0-300.163.18.7.el9uek.src.rpm55ce84bbd92981653f8011173cc706a8-ol9_x86_64_UEKR7
bpftool-5.15.0-300.163.18.7.el9uek.x86_64.rpm23cbf3abe3b75c69b4547edc0cf7a4f8-ol9_x86_64_UEKR7
kernel-uek-5.15.0-300.163.18.7.el9uek.x86_64.rpm07cc0febdf5f830d105b7b9a92872131-ol9_x86_64_UEKR7
kernel-uek-container-5.15.0-300.163.18.7.el9uek.x86_64.rpm7067d7ffd84179b056c664a9bf23d2b9-ol9_x86_64_UEKR7
kernel-uek-container-debug-5.15.0-300.163.18.7.el9uek.x86_64.rpmd77e38d1feb8705e8242c35fd122e558-ol9_x86_64_UEKR7
kernel-uek-core-5.15.0-300.163.18.7.el9uek.x86_64.rpm2249f5599b34cc3e28820af013ddc87e-ol9_x86_64_UEKR7
kernel-uek-debug-5.15.0-300.163.18.7.el9uek.x86_64.rpm2aa340e05dc3a5e2579b32d60b22673a-ol9_x86_64_UEKR7
kernel-uek-debug-core-5.15.0-300.163.18.7.el9uek.x86_64.rpmaaeb27c0623932bcd15a3b20dd98748c-ol9_x86_64_UEKR7
kernel-uek-debug-devel-5.15.0-300.163.18.7.el9uek.x86_64.rpmad4197a43fa31ea0463a84eb55287417-ol9_x86_64_UEKR7
kernel-uek-debug-modules-5.15.0-300.163.18.7.el9uek.x86_64.rpm81a7f6ca677931867aba3738fdf0f981-ol9_x86_64_UEKR7
kernel-uek-debug-modules-extra-5.15.0-300.163.18.7.el9uek.x86_64.rpm0be199a96f30163c2f89819cdff08f9b-ol9_x86_64_UEKR7
kernel-uek-devel-5.15.0-300.163.18.7.el9uek.x86_64.rpm972f4f06e1fed39c15a3d9f793e03e5e-ol9_x86_64_UEKR7
kernel-uek-doc-5.15.0-300.163.18.7.el9uek.noarch.rpm06af68c9d015b730a036e67c34af501b-ol9_x86_64_UEKR7
kernel-uek-modules-5.15.0-300.163.18.7.el9uek.x86_64.rpma07b503ecf1d3b768413a44b26e59815-ol9_x86_64_UEKR7
kernel-uek-modules-extra-5.15.0-300.163.18.7.el9uek.x86_64.rpm0533c188eb2f737110516f58970f822e-ol9_x86_64_UEKR7


This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections:

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights