ELSA-2025-20018

ELSA-2025-20018 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2025-01-11

Description

[5.15.0-304.171.4]
- Revert 'unicode: Don't special case ignorable code points' (Linus Torvalds)
- Revert 'mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K' (Aurelien Jarno)
- tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Kuniyuki Iwashima)
- lib/buildid: Fix build ID parsing logic (Jiri Olsa)
- powerpc/vdso: Flag VDSO64 entry points as functions (Christophe Leroy)
- mm: krealloc: Fix MTE false alarm in __do_krealloc (Qun-Wei Lin)
- Revert 'ALSA: hda/conexant: Mute speakers at suspend / shutdown' (Jaroslaw Janik)
- usb: dwc3: fix fault at system suspend if device was already runtime suspended (Roger Quadros)
- ACPI: PRM: Clean up guid type in struct prm_handler_info (Dan Carpenter)
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (Junxian Huang)
- mm: revert 'mm: shmem: fix data-race in shmem_getattr()' (Andrew Morton)
- ACPI: CPPC: Fix _CPC register setting issue (Lifeng Zheng)
- scsi: qla2xxx: Fix abort in bsg timeout (Quinn Tran)
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (Antonio Quartulli)
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Kashyap Desai)
- vhost_scsi: log write descriptors (Dongli Zhang) [Orabug: 37393531]
- vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang) [Orabug: 37393531]

[5.15.0-304.171.3]
- build: populate modules_thick.builtin for dirs containing only modules (Nick Alcock) [Orabug: 37381702]
- mtd: fix use-after-free in mtd release (Alexander Usyskin) [Orabug: 37371929]
- mtd: Clean refcounting with MTD_PARTITIONED_MASTER (Miquel Raynal) [Orabug: 37371929]
- mtd: call external _get and _put in right order (Alexander Usyskin) [Orabug: 37371929]
- nvmem: core: Check input parameter for NULL in nvmem_unregister() (Andy Shevchenko) [Orabug: 37371929]
- Revert 'ocfs2: fix the la space leak when unmounting an ocfs2 volume' (Sherry Yang) [Orabug: 37364544]
- x86/pkeys: Ensure updated PKRU value is XRSTOR'd (Aruna Ramakrishna) [Orabug: 37361290]
- x86/pkeys: Change caller of update_pkru_in_sigframe() (Aruna Ramakrishna) [Orabug: 37361290]
- cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Vishal Verma) [Orabug: 37347419]
- mm/memcontrol: Fix memcg stat calculation (Aruna Ramakrishna) [Orabug: 37306542]

[5.15.0-304.171.2]
- uek-rpm: Add mstflint_access module to the core list (Thomas Tai) [Orabug: 37345530]
- uek-rpm/ol8/config-aarch64-emb3: Enable CONFIG_ARM_SDE_INTERFACE (Thomas Tai) [Orabug: 37345530]
- sunrpc: fix a NULL deref in svc_process() when ->sv_stats doesn't exist (Calum Mackay) [Orabug: 37329531]
- Partial revert 'rds: Add inc/frag cache statistics' (Hans Westgaard Ry) [Orabug: 37232315]

[5.15.0-304.171.1]
- kpcimgr: assign CPU to handle PCIE transactions during kexec (Joe Dobosenski) [Orabug: 37295980]
- kexec: update start address for LPI table data (Joe Dobosenski) [Orabug: 37295980]
- kpcimgr: fix flush_icache_range arguments (Joe Dobosenski) [Orabug: 37295980]
- embedded2: Enable CONFIG_SQUASHFS_ZSTD to support zstd compression (Joe Dobosenski) [Orabug: 37295980]
- embedded2: Support booting an encrypted root filesystem (Joe Dobosenski) [Orabug: 37295980]
- Update embedded2 config for UEK7 (Joe Dobosenski) [Orabug: 37295980]
- Pensando: kernel config changes for kdump (Rob Gardner) [Orabug: 34091165] [Orabug: 37295980]
- arm64: Reserve elfcorehdr before scanning reserved memory from device tree (Joe Dobosenski) [Orabug: 37295980]
- arm64: kexec: add support for kexec with spin-table (Henry Willard) [Orabug: 32549965] [Orabug: 37295980]
- drivers/soc/pensando/cap_mem.c: Support DM region mapping. (David Clear) [Orabug: 37295980]
- drivers/edac: elba: Support multiple DDR bypass ranges. (David Clear) [Orabug: 37295980]
- mmc: sdhci-cadence: Enable host driver defined bounce buffer (Brad Larson) [Orabug: 37295980]
- Fix NULL pointer dereference in cn_filter() (Anjali Kulkarni) [Orabug: 37280567]
- selftests: connector: Fix input argument error paths to skip (Shuah Khan) [Orabug: 37280567]
- connector/cn_proc: Selftest for proc connector (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Allow non-root users access (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Performance improvements (Anjali Kulkarni) [Orabug: 37280567]
- connector/cn_proc: Add filtering to fix some bugs (Anjali Kulkarni) [Orabug: 37280567]
- netlink: Add new netlink_release function (Anjali Kulkarni) [Orabug: 37280567]
- ice: Add netif_device_attach/detach into PF reset flow (Dawid Osuchowski) [Orabug: 37214589] {CVE-2024-46770}

Related CVEs

CVE-2024-53070

CVE-2024-46770

CVE-2024-53060

CVE-2024-53097

CVE-2024-53226

CVE-2024-53206

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	kernel-uek-5.15.0-304.171.4.el8uek.src.rpm	a4bc5030eb7a4a38dc21d0df3b82be78	-	ol8_aarch64_UEKR7
	bpftool-5.15.0-304.171.4.el8uek.aarch64.rpm	ccc432a6809b5cde22ae5a5be6251d9a	-	ol8_aarch64_UEKR7
	kernel-uek-5.15.0-304.171.4.el8uek.aarch64.rpm	3ba4979fe529d56f33e251505765c9a5	-	ol8_aarch64_UEKR7
	kernel-uek-container-5.15.0-304.171.4.el8uek.aarch64.rpm	6dd701ae05cdee3e5d2d06b7b40bd17e	-	ol8_aarch64_UEKR7
	kernel-uek-container-debug-5.15.0-304.171.4.el8uek.aarch64.rpm	22a1004d5d1201827099146148e96f8f	-	ol8_aarch64_UEKR7
	kernel-uek-core-5.15.0-304.171.4.el8uek.aarch64.rpm	a1119a738462e4b13f6fe7106b0376aa	-	ol8_aarch64_UEKR7
	kernel-uek-debug-5.15.0-304.171.4.el8uek.aarch64.rpm	d4c763fb7fb4ca07d2c59d0c9d3077dd	-	ol8_aarch64_UEKR7
	kernel-uek-debug-core-5.15.0-304.171.4.el8uek.aarch64.rpm	ced342f469d68f9670ac209b25098012	-	ol8_aarch64_UEKR7
	kernel-uek-debug-devel-5.15.0-304.171.4.el8uek.aarch64.rpm	8e5f5973c6afa900eda114ec8f8d74a4	-	ol8_aarch64_UEKR7
	kernel-uek-debug-modules-5.15.0-304.171.4.el8uek.aarch64.rpm	ff5540a8f5be6ccd5cd11535bdaeb9c8	-	ol8_aarch64_UEKR7
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el8uek.aarch64.rpm	21ea52c5ef6abe466fae5ef28d3ce889	-	ol8_aarch64_UEKR7
	kernel-uek-devel-5.15.0-304.171.4.el8uek.aarch64.rpm	6e1834caf430eb5a4361633f376709cf	-	ol8_aarch64_UEKR7
	kernel-uek-doc-5.15.0-304.171.4.el8uek.noarch.rpm	8934b3d80499f7db7febba0076c2bb77	-	ol8_aarch64_UEKR7
	kernel-uek-modules-5.15.0-304.171.4.el8uek.aarch64.rpm	601faef589e214fa77047f5b048f7e80	-	ol8_aarch64_UEKR7
	kernel-uek-modules-extra-5.15.0-304.171.4.el8uek.aarch64.rpm	aef4c75c6d7d5c57bc637908b0d8deb2	-	ol8_aarch64_UEKR7
Oracle Linux 8 (x86_64)	kernel-uek-5.15.0-304.171.4.el8uek.src.rpm	a4bc5030eb7a4a38dc21d0df3b82be78	-	ol8_x86_64_UEKR7
	bpftool-5.15.0-304.171.4.el8uek.x86_64.rpm	f8b631e201f0995cd3624541fec2b6e2	-	ol8_x86_64_UEKR7
	kernel-uek-5.15.0-304.171.4.el8uek.x86_64.rpm	cf4f46e3f38fd039e83d1631989e8018	-	ol8_x86_64_UEKR7
	kernel-uek-container-5.15.0-304.171.4.el8uek.x86_64.rpm	7cf05051a3a90bd0845713d43b0fa9c5	-	ol8_x86_64_UEKR7
	kernel-uek-container-debug-5.15.0-304.171.4.el8uek.x86_64.rpm	f711acfbae0510193affe725c898ef7a	-	ol8_x86_64_UEKR7
	kernel-uek-core-5.15.0-304.171.4.el8uek.x86_64.rpm	0589c44343ac8bb6716d379b9a9cea6f	-	ol8_x86_64_UEKR7
	kernel-uek-debug-5.15.0-304.171.4.el8uek.x86_64.rpm	a9e73942b46f8f5f17f32939ce30e396	-	ol8_x86_64_UEKR7
	kernel-uek-debug-core-5.15.0-304.171.4.el8uek.x86_64.rpm	64dbf0f642ffab48296603e5db86b4f6	-	ol8_x86_64_UEKR7
	kernel-uek-debug-devel-5.15.0-304.171.4.el8uek.x86_64.rpm	4139b4eb473f53b0fb1f9e90403a8de8	-	ol8_x86_64_UEKR7
	kernel-uek-debug-modules-5.15.0-304.171.4.el8uek.x86_64.rpm	1fce5ab5519e294e0a18c8ec214570b8	-	ol8_x86_64_UEKR7
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el8uek.x86_64.rpm	c14f609a1f88274ce6a05bff1479fd7b	-	ol8_x86_64_UEKR7
	kernel-uek-devel-5.15.0-304.171.4.el8uek.x86_64.rpm	1952a864fa63b6fe227ac0ed1c5e7e4b	-	ol8_x86_64_UEKR7
	kernel-uek-doc-5.15.0-304.171.4.el8uek.noarch.rpm	8934b3d80499f7db7febba0076c2bb77	-	ol8_x86_64_UEKR7
	kernel-uek-modules-5.15.0-304.171.4.el8uek.x86_64.rpm	829ed74e0f71a97cef38c3948c3485e7	-	ol8_x86_64_UEKR7
	kernel-uek-modules-extra-5.15.0-304.171.4.el8uek.x86_64.rpm	c12f54af2318e6aed12e79f850b69e87	-	ol8_x86_64_UEKR7
Oracle Linux 9 (aarch64)	kernel-uek-5.15.0-304.171.4.el9uek.src.rpm	ff5d29718d44447e3512c6ac08488608	-	ol9_aarch64_baseos_latest
	kernel-uek-5.15.0-304.171.4.el9uek.src.rpm	ff5d29718d44447e3512c6ac08488608	-	ol9_aarch64_u5_baseos_patch
	bpftool-5.15.0-304.171.4.el9uek.aarch64.rpm	fc394816e3368aa09778b52a98da20a6	-	ol9_aarch64_baseos_latest
	bpftool-5.15.0-304.171.4.el9uek.aarch64.rpm	fc394816e3368aa09778b52a98da20a6	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-5.15.0-304.171.4.el9uek.aarch64.rpm	6ba332e40355c4618dcef0bc73cf8bd1	-	ol9_aarch64_baseos_latest
	kernel-uek-5.15.0-304.171.4.el9uek.aarch64.rpm	6ba332e40355c4618dcef0bc73cf8bd1	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-container-5.15.0-304.171.4.el9uek.aarch64.rpm	c9f6f7ad7324c630ab7d579d73e3626c	-	ol9_aarch64_baseos_latest
	kernel-uek-container-5.15.0-304.171.4.el9uek.aarch64.rpm	c9f6f7ad7324c630ab7d579d73e3626c	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-container-debug-5.15.0-304.171.4.el9uek.aarch64.rpm	fb48808e23ad5209fbb3415bd801386c	-	ol9_aarch64_baseos_latest
	kernel-uek-container-debug-5.15.0-304.171.4.el9uek.aarch64.rpm	fb48808e23ad5209fbb3415bd801386c	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-core-5.15.0-304.171.4.el9uek.aarch64.rpm	35dc1ef2b88d65badac5683059a7ded1	-	ol9_aarch64_baseos_latest
	kernel-uek-core-5.15.0-304.171.4.el9uek.aarch64.rpm	35dc1ef2b88d65badac5683059a7ded1	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-5.15.0-304.171.4.el9uek.aarch64.rpm	3ff9d84eb463a14efaf34a978ad923e3	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-5.15.0-304.171.4.el9uek.aarch64.rpm	3ff9d84eb463a14efaf34a978ad923e3	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-core-5.15.0-304.171.4.el9uek.aarch64.rpm	0ad3568df986d69fab85477b81a33ad3	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-core-5.15.0-304.171.4.el9uek.aarch64.rpm	0ad3568df986d69fab85477b81a33ad3	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-devel-5.15.0-304.171.4.el9uek.aarch64.rpm	cb727e2c1f69436d2cbdb7ac5a1f8748	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-devel-5.15.0-304.171.4.el9uek.aarch64.rpm	cb727e2c1f69436d2cbdb7ac5a1f8748	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-modules-5.15.0-304.171.4.el9uek.aarch64.rpm	2df3f16639ea479fd4b1d7eee2743645	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-modules-5.15.0-304.171.4.el9uek.aarch64.rpm	2df3f16639ea479fd4b1d7eee2743645	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el9uek.aarch64.rpm	8bcc607405a4d86a74c79de245369bb3	-	ol9_aarch64_baseos_latest
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el9uek.aarch64.rpm	8bcc607405a4d86a74c79de245369bb3	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-devel-5.15.0-304.171.4.el9uek.aarch64.rpm	9c7840525a3777fe4719c7a8acc9cf4d	-	ol9_aarch64_baseos_latest
	kernel-uek-devel-5.15.0-304.171.4.el9uek.aarch64.rpm	9c7840525a3777fe4719c7a8acc9cf4d	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-doc-5.15.0-304.171.4.el9uek.noarch.rpm	3aabb9938580d0c95bdf53146c26b2a2	-	ol9_aarch64_baseos_latest
	kernel-uek-doc-5.15.0-304.171.4.el9uek.noarch.rpm	3aabb9938580d0c95bdf53146c26b2a2	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-modules-5.15.0-304.171.4.el9uek.aarch64.rpm	6220ca5dad9566d865fadb1e96592e2f	-	ol9_aarch64_baseos_latest
	kernel-uek-modules-5.15.0-304.171.4.el9uek.aarch64.rpm	6220ca5dad9566d865fadb1e96592e2f	-	ol9_aarch64_u5_baseos_patch
	kernel-uek-modules-extra-5.15.0-304.171.4.el9uek.aarch64.rpm	411788ff1d423de20888c9771cfb9af4	-	ol9_aarch64_baseos_latest
	kernel-uek-modules-extra-5.15.0-304.171.4.el9uek.aarch64.rpm	411788ff1d423de20888c9771cfb9af4	-	ol9_aarch64_u5_baseos_patch
Oracle Linux 9 (x86_64)	kernel-uek-5.15.0-304.171.4.el9uek.src.rpm	ff5d29718d44447e3512c6ac08488608	-	ol9_x86_64_UEKR7
	bpftool-5.15.0-304.171.4.el9uek.x86_64.rpm	72a3906a51ddb756e8c52bf226ebadb5	-	ol9_x86_64_UEKR7
	kernel-uek-5.15.0-304.171.4.el9uek.x86_64.rpm	b83aab88858e82b97811ee44abfd0007	-	ol9_x86_64_UEKR7
	kernel-uek-container-5.15.0-304.171.4.el9uek.x86_64.rpm	e49165d02d62619f80b9f0926937b6bb	-	ol9_x86_64_UEKR7
	kernel-uek-container-debug-5.15.0-304.171.4.el9uek.x86_64.rpm	ccc4588050b79e8c3ae2a6d2838f9b18	-	ol9_x86_64_UEKR7
	kernel-uek-core-5.15.0-304.171.4.el9uek.x86_64.rpm	69510c92feeda581a079daf371b82bd7	-	ol9_x86_64_UEKR7
	kernel-uek-debug-5.15.0-304.171.4.el9uek.x86_64.rpm	1c44567e139679ac29f971f0a8cd3092	-	ol9_x86_64_UEKR7
	kernel-uek-debug-core-5.15.0-304.171.4.el9uek.x86_64.rpm	e35876cb48d816ed75b125ae22265d42	-	ol9_x86_64_UEKR7
	kernel-uek-debug-devel-5.15.0-304.171.4.el9uek.x86_64.rpm	63201bbdf50ac6ae3edd3f5674926c55	-	ol9_x86_64_UEKR7
	kernel-uek-debug-modules-5.15.0-304.171.4.el9uek.x86_64.rpm	f86f828d5c7caf8cbc3e99315afffb09	-	ol9_x86_64_UEKR7
	kernel-uek-debug-modules-extra-5.15.0-304.171.4.el9uek.x86_64.rpm	99d1bc80ba096f77c83c17db0525e2ec	-	ol9_x86_64_UEKR7
	kernel-uek-devel-5.15.0-304.171.4.el9uek.x86_64.rpm	4fb1ea7286cbeac14bd5ba1d12452520	-	ol9_x86_64_UEKR7
	kernel-uek-doc-5.15.0-304.171.4.el9uek.noarch.rpm	3aabb9938580d0c95bdf53146c26b2a2	-	ol9_x86_64_UEKR7
	kernel-uek-modules-5.15.0-304.171.4.el9uek.x86_64.rpm	24e009d76cef3bb84eaed9b68e722ab6	-	ol9_x86_64_UEKR7
	kernel-uek-modules-extra-5.15.0-304.171.4.el9uek.x86_64.rpm	a8a5338acdec7e2463476171ad5eb470	-	ol9_x86_64_UEKR7