ELSA-2025-20018

ELSA-2025-20018 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-01-11

Description

[5.15.0-304.171.4]
- Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds)
- Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno)
- tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima)
- lib/buildid: Fix build ID parsing logic (Jiri Olsa)
- powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
- mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin)
- Revert 'ALSA: hda/conexant: Mute speakers at suspend / shutdown' (Jaroslaw Janik)
- usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros)
- ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang)
- mm: revert 'mm: shmem: fix data-race in shmem_getattr()' (Andrew Morton)
- ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
- scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli)
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
- vhost_scsi: log write descriptors (Dongli Zhang) [Orabug: 37393531]
- vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang) [Orabug: 37393531]

[5.15.0-304.171.3]
- build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock) [Orabug: 37381702]
- mtd: fix use-after-free in mtd release (Alexander Usyskin) [Orabug: 37371929]
- mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal) [Orabug: 37371929]
- mtd: call external _get and _put in right order (Alexander Usyskin) [Orabug: 37371929]
- nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko) [Orabug: 37371929]
- Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang) [Orabug: 37364544]
- x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna) [Orabug: 37361290]
- x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna) [Orabug: 37361290]
- cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma) [Orabug: 37347419]
- mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna) [Orabug: 37306542]

[5.15.0-304.171.2]
- uek-rpm: Add mstflint_access module to the core list (Thomas Tai) [Orabug: 37345530]
- uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai) [Orabug: 37345530]
- sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay) [Orabug: 37329531]
- Partial revert 'rds: Add inc/frag cache statistics' (Hans Westgaard Ry) [Orabug: 37232315]

[5.15.0-304.171.1]
- kpcimgr: assign CPU to handle PCIE transactions during kexec (Joe Dobosenski) [Orabug: 37295980]
- kexec: update start address for LPI table data (Joe Dobosenski) [Orabug: 37295980]
- kpcimgr: fix flush_icache_range arguments (Joe Dobosenski) [Orabug: 37295980]
- embedded2: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Joe Dobosenski) [Orabug: 37295980]
- embedded2: Support booting an encrypted root filesystem (Joe Dobosenski) [Orabug: 37295980]
- Update embedded2 config for UEK7 (Joe Dobosenski) [Orabug: 37295980]
- Pensando: kernel config changes for kdump (Rob Gardner) [Orabug: 34091165] [Orabug: 37295980]
- arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Joe Dobosenski) [Orabug: 37295980]
- arm64: kexec: add support for kexec with spin-table (Henry Willard) [Orabug: 32549965] [Orabug: 37295980]
- drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear) [Orabug: 37295980]
- drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear) [Orabug: 37295980]
- mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson) [Orabug: 37295980]
- Fix NULL pointer dereference in cn_filter() (Anjali Kulkarni) [Orabug: 37280567]
- selftests: connector: Fix input argument error paths to skip (Shuah Khan) [Orabug: 37280567]
- connector/cn_proc: Selftest for proc connector (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Allow non-root users access (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Performance improvements (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Add filtering to fix some bugs (Anjali Kulkarni) [Orabug: 37280567]
- netlink: Add new netlink_release function (Anjali Kulkarni) [Orabug: 37280567]
- ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski) [Orabug: 37214589] {CVE-2024-46770}

Related CVEs

CVE-2024-53070

CVE-2024-46770

CVE-2024-53060

CVE-2024-53097

CVE-2024-53226

CVE-2024-53206

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-uek-5.15.0-304.171.4.el8uek.src.rpm	3d46a65a459c5e57b5204fd17ede8a0f3d2b3fd4563e794e690423ed837d6a24	-	ol8_aarch64_UEKR7
	bpftool-5.15.0-304.171.4.el8uek.aarch64.rpm	ae7659650fd5916ff394890c33717342befc15546197cf1ac043c00fa545a2e1	-	ol8_aarch64_UEKR7
	kernel-uek-5.15.0-304.171.4.el8uek.aarch64.rpm	ffd3b2eb446b44fdb8c26ef46657c1c556b29380897039ff718fe6369bd67a25	-	ol8_aarch64_UEKR7
	kernel-uek-container-5.15.0-304.171.4.el8uek.aarch64.rpm	056090fec36d14949bccf8c96c20db7d71629a4a36b81af4820ff4ef17ec7464	-	ol8_aarch64_UEKR7
	kernel-uek-container-debug-5.15.0-304.171.4.el8uek.aarch64.rpm	fb17fcc8d9dd461f02da08bbfee743a9f517cce9868628fe2861ae921e05d214	-	ol8_aarch64_UEKR7
	kernel-uek-core-5.15.0-304.171.4.el8uek.aarch64.rpm	5376010853ffe167fbb8df89d2fbac4ea7116cc64f87bf30bdc850b53790614c	-	ol8_aarch64_UEKR7
	kernel-uek-debug-5.15.0-304.171.4.el8uek.aarch64.rpm	f1ee64f3c4729188b27cd24cc447dc03127dfe084055f72a086082dc1baf2e1b	-	ol8_aarch64_UEKR7
	kernel-uek-debug-core-5.15.0-304.171.4.el8uek.aarch64.rpm	683bdf7a12ee12a4488647165ee3a22c98d5628e4d4e91435e0a2f6ce5a145e3	-	ol8_aarch64_UEKR7
	kernel-uek-debug-devel-5.15.0-304.171.4.el8uek.aarch64.rpm	b18b7003824e87e6cf63deb0b6433fc0fb17d2e1f8acdf88682e94e29f19b32a	-	ol8_aarch64_UEKR7
	kernel-uek-debug-modules-5.15.0-304.171.4.el8uek.aarch64.rpm	b693dc225ea0eeef63393a24a93230e826ef523c65e11c69743c4e016edb2a92	-	ol8_aarch64_UEKR7
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el8uek.aarch64.rpm	23cb13f8a89a11dc804b74751f417a52bae3a098678be8719a1a55378ca94187	-	ol8_aarch64_UEKR7
	kernel-uek-devel-5.15.0-304.171.4.el8uek.aarch64.rpm	abaf519306b56058575a8aba39830b0a09a7053816ddf626ae597229c3d1c941	-	ol8_aarch64_UEKR7
	kernel-uek-doc-5.15.0-304.171.4.el8uek.noarch.rpm	d77bf297f2f6f145b2317506d2b991f480c35479f04a1465c5a949ede450a44c	-	ol8_aarch64_UEKR7
	kernel-uek-modules-5.15.0-304.171.4.el8uek.aarch64.rpm	df2cb04578491814e304b772fce153f558cd44d68dc0fa48270d007b045b5374	-	ol8_aarch64_UEKR7
	kernel-uek-modules-extra-5.15.0-304.171.4.el8uek.aarch64.rpm	ff0bac5b83f7f585fe71ad20dc2993583d0b7493f8e4ee98d9bd7cd6791f312a	-	ol8_aarch64_UEKR7
Oracle Linux 8 (x86_64)	kernel-uek-5.15.0-304.171.4.el8uek.src.rpm	3d46a65a459c5e57b5204fd17ede8a0f3d2b3fd4563e794e690423ed837d6a24	-	ol8_x86_64_UEKR7
	bpftool-5.15.0-304.171.4.el8uek.x86_64.rpm	23c7bd9d6f7f71d2f1691da71fa5db121f9663386dfc82629b88b417491ca4d6	-	ol8_x86_64_UEKR7
	kernel-uek-5.15.0-304.171.4.el8uek.x86_64.rpm	b9179a59fb47da1a1d2477a922c17a763fbddc2933bae7f87373a3a9a0c111df	-	ol8_x86_64_UEKR7
	kernel-uek-container-5.15.0-304.171.4.el8uek.x86_64.rpm	74b27f1b59c68718dc4f45cedf75a188d358afce75322d02d12a290f2fac32aa	-	ol8_x86_64_UEKR7
	kernel-uek-container-debug-5.15.0-304.171.4.el8uek.x86_64.rpm	301bd9130f187fd356ee60ace40ed99f4d42fc90bd0e15730cfba2cbe2c1e642	-	ol8_x86_64_UEKR7
	kernel-uek-core-5.15.0-304.171.4.el8uek.x86_64.rpm	2ab55d092adc1f0d21ff4cbdaf947aa45d6fdc770e3d5e100a061dbb1d07a8df	-	ol8_x86_64_UEKR7
	kernel-uek-debug-5.15.0-304.171.4.el8uek.x86_64.rpm	da585fd51fba80a1a4224a437821b95256bd22ef99d4df6880ce65afef4eee8c	-	ol8_x86_64_UEKR7
	kernel-uek-debug-core-5.15.0-304.171.4.el8uek.x86_64.rpm	082db0183ae8ac3318f842b3866b9944a5def25a91c40e89d9f73da1ca349aed	-	ol8_x86_64_UEKR7
	kernel-uek-debug-devel-5.15.0-304.171.4.el8uek.x86_64.rpm	c26dcbae143fe5324893d1fdaa78dcc6957d707ee14c146a3df1d49e10bfc43c	-	ol8_x86_64_UEKR7
	kernel-uek-debug-modules-5.15.0-304.171.4.el8uek.x86_64.rpm	aa9b27bd402f599c63b8be3685d095b1c77b2317b16e1bcd738575a20146e657	-	ol8_x86_64_UEKR7
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el8uek.x86_64.rpm	58afc30410675a7cfcd992e29830456765da9022a0c80aa46dbe440806c788d2	-	ol8_x86_64_UEKR7
	kernel-uek-devel-5.15.0-304.171.4.el8uek.x86_64.rpm	c48d2de76de3c6cd2779de4f85517adb9c8586afb702c7108cab28be0a0f2482	-	ol8_x86_64_UEKR7
	kernel-uek-doc-5.15.0-304.171.4.el8uek.noarch.rpm	d77bf297f2f6f145b2317506d2b991f480c35479f04a1465c5a949ede450a44c	-	ol8_x86_64_UEKR7
	kernel-uek-modules-5.15.0-304.171.4.el8uek.x86_64.rpm	83ce97e9ddffb8fd00611504fe7aa07696e84ab3e037194e3cdfb0f0f7ac32b6	-	ol8_x86_64_UEKR7
	kernel-uek-modules-extra-5.15.0-304.171.4.el8uek.x86_64.rpm	ed88f714f607430bd1d3415be86b0b506d8ee6672cffae0c4b6eb9281af7349b	-	ol8_x86_64_UEKR7
Oracle Linux 9 (aarch64)	kernel-uek-5.15.0-304.171.4.el9uek.src.rpm	c9954f2fd90f406b14b7d7a3fd377e955e7d339422cb0074443a3724b6d643d2	-	ol9_aarch64_baseos_latest
	kernel-uek-5.15.0-304.171.4.el9uek.src.rpm	c9954f2fd90f406b14b7d7a3fd377e955e7d339422cb0074443a3724b6d643d2	-	ol9_aarch64_u5_baseos_patch
	bpftool-5.15.0-304.171.4.el9uek.aarch64.rpm	d46b50a4f2ebce92c775572bc9017e7d795fd08fabddad4b22be4dcbc4efef61	-	ol9_aarch64_baseos_latest
	bpftool-5.15.0-304.171.4.el9uek.aarch64.rpm	d46b50a4f2ebce92c775572bc9017e7d795fd08fabddad4b22be4dcbc4efef61	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-5.15.0-304.171.4.el9uek.aarch64.rpm	35fc938b6b5a7878d77e35c237a5426c003d74e375f3bcbb3b0cc5b43e88074f	-	ol9_aarch64_baseos_latest
	kernel-uek-5.15.0-304.171.4.el9uek.aarch64.rpm	35fc938b6b5a7878d77e35c237a5426c003d74e375f3bcbb3b0cc5b43e88074f	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-container-5.15.0-304.171.4.el9uek.aarch64.rpm	5c8de24e4cce58926f269decebc9c0fa86c048aa905dee314101bc2e4a2aec7f	-	ol9_aarch64_baseos_latest
	kernel-uek-container-5.15.0-304.171.4.el9uek.aarch64.rpm	5c8de24e4cce58926f269decebc9c0fa86c048aa905dee314101bc2e4a2aec7f	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-container-debug-5.15.0-304.171.4.el9uek.aarch64.rpm	a55d19f49867c28d130898481b9d7ae6433961e96ee9fdbf7eb09fa303b73700	-	ol9_aarch64_baseos_latest
	kernel-uek-container-debug-5.15.0-304.171.4.el9uek.aarch64.rpm	a55d19f49867c28d130898481b9d7ae6433961e96ee9fdbf7eb09fa303b73700	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-core-5.15.0-304.171.4.el9uek.aarch64.rpm	4f3ad5a5ad68de06edad8483f092abfe0cabd62ed373f7f3b8a49670e0ad481e	-	ol9_aarch64_baseos_latest
	kernel-uek-core-5.15.0-304.171.4.el9uek.aarch64.rpm	4f3ad5a5ad68de06edad8483f092abfe0cabd62ed373f7f3b8a49670e0ad481e	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-5.15.0-304.171.4.el9uek.aarch64.rpm	19bff51bd3665f706fc0f6d8d9951ca111714544ef503fbb4954f5d085eebdce	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-5.15.0-304.171.4.el9uek.aarch64.rpm	19bff51bd3665f706fc0f6d8d9951ca111714544ef503fbb4954f5d085eebdce	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-core-5.15.0-304.171.4.el9uek.aarch64.rpm	ff5e44aecbece876279542f2237336efde0b8d009d595d7921d379a770afa391	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-core-5.15.0-304.171.4.el9uek.aarch64.rpm	ff5e44aecbece876279542f2237336efde0b8d009d595d7921d379a770afa391	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-devel-5.15.0-304.171.4.el9uek.aarch64.rpm	6199b7afe4dace16452f29d799974d7e17488793a0102e2abad647287d5d4cb6	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-devel-5.15.0-304.171.4.el9uek.aarch64.rpm	6199b7afe4dace16452f29d799974d7e17488793a0102e2abad647287d5d4cb6	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-modules-5.15.0-304.171.4.el9uek.aarch64.rpm	b1409a6bb5eb2576fa9602bc6a217654cdb9e2dfcd7239130fb47539a5dd20cd	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-modules-5.15.0-304.171.4.el9uek.aarch64.rpm	b1409a6bb5eb2576fa9602bc6a217654cdb9e2dfcd7239130fb47539a5dd20cd	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el9uek.aarch64.rpm	609a739a416aa805db2e1d9bc5cea9bcd2f462d06e9dcb200dafa25491151db8	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el9uek.aarch64.rpm	609a739a416aa805db2e1d9bc5cea9bcd2f462d06e9dcb200dafa25491151db8	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-devel-5.15.0-304.171.4.el9uek.aarch64.rpm	b13a7550e2c63fdf9ac031d143da905bf06505c28bc06889de6629ba3b019751	-	ol9_aarch64_baseos_latest
	kernel-uek-devel-5.15.0-304.171.4.el9uek.aarch64.rpm	b13a7550e2c63fdf9ac031d143da905bf06505c28bc06889de6629ba3b019751	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-doc-5.15.0-304.171.4.el9uek.noarch.rpm	b28865874b8b851ab175617804b9a8edae0295173fb649da55a5c48da5d3f34d	-	ol9_aarch64_baseos_latest
	kernel-uek-doc-5.15.0-304.171.4.el9uek.noarch.rpm	b28865874b8b851ab175617804b9a8edae0295173fb649da55a5c48da5d3f34d	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-modules-5.15.0-304.171.4.el9uek.aarch64.rpm	0d5b73aa8f274a7c5dfdcb2b3794a56962579c7b90dbf504620018c3d13386fc	-	ol9_aarch64_baseos_latest
	kernel-uek-modules-5.15.0-304.171.4.el9uek.aarch64.rpm	0d5b73aa8f274a7c5dfdcb2b3794a56962579c7b90dbf504620018c3d13386fc	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-modules-extra-5.15.0-304.171.4.el9uek.aarch64.rpm	073de923d02c366b40c74123e2323accde0594513b48b8da29679f881045f51a	-	ol9_aarch64_baseos_latest
	kernel-uek-modules-extra-5.15.0-304.171.4.el9uek.aarch64.rpm	073de923d02c366b40c74123e2323accde0594513b48b8da29679f881045f51a	-	ol9_aarch64_u5_baseos_patch
Oracle Linux 9 (x86_64)	kernel-uek-5.15.0-304.171.4.el9uek.src.rpm	c9954f2fd90f406b14b7d7a3fd377e955e7d339422cb0074443a3724b6d643d2	-	ol9_x86_64_UEKR7
	bpftool-5.15.0-304.171.4.el9uek.x86_64.rpm	358980e4245580e86051033f6bcc5c21954f74c1e65da2986cb021b9df319472	-	ol9_x86_64_UEKR7
	kernel-uek-5.15.0-304.171.4.el9uek.x86_64.rpm	9a2d810134933a3d12b2f07d2ab8b0795ea055ab2bd3cca62a8afe7d64907013	-	ol9_x86_64_UEKR7
	kernel-uek-container-5.15.0-304.171.4.el9uek.x86_64.rpm	cd2893b8bc527a7b3eecd7dc65bceb97908ab48daa008339647af3932dfa547f	-	ol9_x86_64_UEKR7
	kernel-uek-container-debug-5.15.0-304.171.4.el9uek.x86_64.rpm	11944f859d33d33402bcc48c592e1a0dd32604d08faa3e15f887b722c3336ae6	-	ol9_x86_64_UEKR7
	kernel-uek-core-5.15.0-304.171.4.el9uek.x86_64.rpm	1cb81bc1a1ff7c4ee5ed19eb7e8bef94478cb6725596998ae9ff241cdd3e64ae	-	ol9_x86_64_UEKR7
	kernel-uek-debug-5.15.0-304.171.4.el9uek.x86_64.rpm	173bc24b6a4da4e6226373663f5fc1399ece8566a9b808604aa586fee14ab387	-	ol9_x86_64_UEKR7
	kernel-uek-debug-core-5.15.0-304.171.4.el9uek.x86_64.rpm	1fca343116db2d56b404b5c7c894a152b83a6634ba76d00a89027eff9c0dc034	-	ol9_x86_64_UEKR7
	kernel-uek-debug-devel-5.15.0-304.171.4.el9uek.x86_64.rpm	a4ebfb2760f17173e3ca52f3eac00278acf63b378ffe76585b2dc74aea304f36	-	ol9_x86_64_UEKR7
	kernel-uek-debug-modules-5.15.0-304.171.4.el9uek.x86_64.rpm	276ea573e15d00f6e26dcb979820d3cc838c3272c97485f32bd1559ef770332c	-	ol9_x86_64_UEKR7
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el9uek.x86_64.rpm	415f4fbb00d16ffdb899c85da0d3fb010523b21f5175d38b5fb2f3445333b28f	-	ol9_x86_64_UEKR7
	kernel-uek-devel-5.15.0-304.171.4.el9uek.x86_64.rpm	bf91e6d292f831853cb18d3872448d19ec26cb986f7f02f5acf73b43367256d0	-	ol9_x86_64_UEKR7
	kernel-uek-doc-5.15.0-304.171.4.el9uek.noarch.rpm	b28865874b8b851ab175617804b9a8edae0295173fb649da55a5c48da5d3f34d	-	ol9_x86_64_UEKR7
	kernel-uek-modules-5.15.0-304.171.4.el9uek.x86_64.rpm	7c4f532d2f4e72464db0ff5d2e0225f42427ea2d6d98343a3a49974feaa89425	-	ol9_x86_64_UEKR7
	kernel-uek-modules-extra-5.15.0-304.171.4.el9uek.x86_64.rpm	4f30b80339bc13e91f48de75f76e05605364a807865dc6a88bbaa48f33df4a4d	-	ol9_x86_64_UEKR7

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team