[ELSA-2021-3548] kernel security, bug fix, and enhancement update
[4.18.0-305.19.1_4.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-11.0.5
[4.18.0-305.19.1_4]
- libceph: allow addrvecs with a single NONE/blank address (Jeff Layton) [1996682 1972278]
- ice: Only lock to update netdev dev_addr (Michal Schmidt) [2000129 1995868]
- ice: don't remove netdev->dev_addr from uc sync list (Ken Cox) [2000130 1961018]
[4.18.0-305.18.1_4]
- mfd: intel-lpss: Use devm_ioremap_uc for MMIO (Steve Best) [1989560 1986715]
- lib: devres: add a helper function for ioremap_uc (Steve Best) [1989560 1986715]
- ceph: fix test for whether we can skip read when writing beyond EOF (Jeff Layton) [1996680 1971101]
- arm64: memory: Add missing brackets to untagged_addr() macro (Chris von Recklinghausen) [1997998 1955809]
- arm64: tags: Preserve tags for addresses translated via TTBR1 (Chris von Recklinghausen) [1997998 1955809]
- arm64: entry: Move ct_user_exit before any other exception (Chris von Recklinghausen) [1997998 1955809]
- arm64: memory: Implement __tag_set() as common function (Chris von Recklinghausen) [1997998 1955809]
- arm64: mm: Really fix sparse warning in untagged_addr() (Chris von Recklinghausen) [1997998 1955809]
- arm64: untag user pointers in access_ok and __uaccess_mask_ptr (Chris von Recklinghausen) [1997998 1955809]
- arm64/mm: fix variable 'tag' set but not used (Chris von Recklinghausen) [1997998 1955809]
- arm64: entry: SP Alignment Fault doesn't write to FAR_EL1 (Chris von Recklinghausen) [1997998 1955809]
- arm64: compat: Add separate CP15 trapping hook (Chris von Recklinghausen) [1997998 1955809]
- arm64: don't restore GPRs when context tracking (Chris von Recklinghausen) [1997998 1955809]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested (CVE-2021-3656) (Jon Maloy) [1985429 1985430] {CVE-2021-3656}
- KVM: SVM: add module param to control the #SMI interception (Jon Maloy) [1985429 1985430] {CVE-2021-3656}
- tty: Don't hold ldisc lock in tty_reopen() if ldisc present (Waiman Long) [1997999 1968271]
- tty/ldsem: Add lockdep asserts for ldisc_sem (Waiman Long) [1997999 1968271]
- tty: Simplify tty->count math in tty_reopen() (Waiman Long) [1997999 1968271]
- tty: Don't block on IO when ldisc change is pending (Waiman Long) [1997999 1968271]
- tty: Hold tty_ldisc_lock() during tty_reopen() (Waiman Long) [1997999 1968271]
- tty: Drop tty->count on tty_reopen() failure (Waiman Long) [1997999 1968271]
- [s390] s390/vtime: fix increased steal time accounting (Claudio Imbrenda) [1988386 1963075]
- XArray: Fix splitting to non-zero orders (Chris von Recklinghausen) [1997997 1946304]
- XArray: Fix split documentation (Chris von Recklinghausen) [1997997 1946304]
- ima: extend boot_aggregate with kernel measurements (Bruno Meneguele) [1997766 1977422]
- ceph: reduce contention in ceph_check_delayed_caps() (Jeff Layton) [1995862 1953430]
- ice: Stop processing VF messages during teardown (Ken Cox) [1997538 1986451]
- iavf: Set RSS LUT and key in reset handle path (Ken Cox) [1997536 1910853]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985412 1985413] {CVE-2021-3653}
- scsi: ibmvfc: Fix potential race in ibmvfc_wait_for_ops() (Steve Best) [1969792 1941180]
- [s390] s390/dasd: add missing discipline function (Claudio Imbrenda) [1995206 1981804]
- serial_core: switch to ->[sg]et_serial() (Artem Savkov) [1993872 1952415]
- net/mlx5e: Fix mapping of ct_label zero (Jan Stancek) [1983681 1915308]
- drm/qxl: add lock asserts to qxl_bo_vmap_locked + qxl_bo_vunmap_locked (Lyude Paul) [1992839 1907341]
- drm/qxl: rework cursor plane (Lyude Paul) [1992839 1907341]
- drm/qxl: move shadow handling to new qxl_prepare_shadow() (Lyude Paul) [1992839 1907341]
- drm/qxl: fix monitors object vmap (Lyude Paul) [1992839 1907341]
- drm/qxl: fix prime vmap (Lyude Paul) [1992839 1907341]
- drm/qxl: rename qxl_bo_kmap -> qxl_bo_vmap_locked (Lyude Paul) [1992839 1907341]
- drm/qxl: fix lockdep issue in qxl_alloc_release_reserved (Lyude Paul) [1992839 1907341]
- drm/qxl: use ttm bo priorities (Lyude Paul) [1992839 1907341]
- drm/qxl: more fence wait rework (Lyude Paul) [1992839 1907341]
- drm/qxl: properly handle device init failures (Lyude Paul) [1992839 1907341]
- drm/qxl: allocate dumb buffers in ram (Lyude Paul) [1992839 1907341]
- drm/qxl: simplify qxl_fence_wait (Lyude Paul) [1992839 1907341]
- drm/qxl: properly free qxl releases (Lyude Paul) [1992839 1907341]
- drm/qxl: handle shadow in primary destroy (Lyude Paul) [1992839 1907341]
- drm/qxl: properly pin/unpin shadow (Lyude Paul) [1992839 1907341]
- drm/qxl: release shadow on shutdown (Lyude Paul) [1992839 1907341]
- drm/qxl: unpin release objects (Lyude Paul) [1992839 1907341]
- drm/qxl: use drmm_mode_config_init (Lyude Paul) [1992839 1907341]
- qxl/ttm: drop the unusued no wait flag to reserve function (Lyude Paul) [1992839 1907341]
- ID
- ELSA-2021-3548
- Severity
- moderate
- URL
- https://linux.oracle.com/errata/ELSA-2021-3548.html
- Published
-
2021-09-16T00:00:00
(3 years ago) - Modified
-
2021-09-16T00:00:00
(3 years ago) - Rights
- Copyright 2021 Oracle, Inc.
- Other Advisories
-
- ALAS2-2021-1704
- ALSA-2021:3548
- DSA-4978-1
- ELSA-2021-3801
- ELSA-2021-9419
- ELSA-2021-9420
- ELSA-2021-9421
- ELSA-2021-9422
- ELSA-2021-9450
- ELSA-2021-9451
- ELSA-2021-9452
- ELSA-2021-9453
- ELSA-2021-9564
- ELSA-2021-9565
- ELSA-2022-9244
- ELSA-2022-9245
- FEDORA-2021-33819e6b09
- FEDORA-2021-a424256622
- MS:CVE-2021-3653
- openSUSE-SU-2021:1271-1
- openSUSE-SU-2021:3179-1
- openSUSE-SU-2021:3205-1
- openSUSE-SU-2021:3876-1
- RHSA-2021:3547
- RHSA-2021:3548
- RHSA-2021:3801
- RHSA-2021:3802
- SSA:2022-031-01
- SUSE-SU-2021:3073-1
- SUSE-SU-2021:3177-1
- SUSE-SU-2021:3178-1
- SUSE-SU-2021:3179-1
- SUSE-SU-2021:3192-1
- SUSE-SU-2021:3196-1
- SUSE-SU-2021:3205-1
- SUSE-SU-2021:3205-2
- SUSE-SU-2021:3206-1
- SUSE-SU-2021:3207-1
- SUSE-SU-2021:3217-1
- SUSE-SU-2021:3415-1
- SUSE-SU-2021:3876-1
- SUSE-SU-2021:3929-1
- SUSE-SU-2021:3935-1
- SUSE-SU-2021:3969-1
- SUSE-SU-2021:3972-1
- USN-5062-1
- USN-5070-1
- USN-5071-1
- USN-5071-2
- USN-5072-1
- USN-5073-1
- USN-5073-2
- USN-5082-1
Source | # ID | Name | URL |
---|---|---|---|
elsa | ELSA-2021-3548 | https://linux.oracle.com/errata/ELSA-2021-3548.html | |
CVE | CVE-2021-3653 | https://linux.oracle.com/cve/CVE-2021-3653.html |
Type | Package URL | Namespace | Name / Product | Version | Distribution / Platform | Arch | Patch / Fix |
---|---|---|---|---|---|---|---|
Affected | pkg:rpm/oraclelinux/python3-perf?distro=oraclelinux-8.4 | oraclelinux | python3-perf | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/perf?distro=oraclelinux-8.4 | oraclelinux | perf | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel?distro=oraclelinux-8.4 | oraclelinux | kernel | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-tools?distro=oraclelinux-8.4 | oraclelinux | kernel-tools | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-tools-libs?distro=oraclelinux-8.4 | oraclelinux | kernel-tools-libs | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-tools-libs-devel?distro=oraclelinux-8.4 | oraclelinux | kernel-tools-libs-devel | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-modules?distro=oraclelinux-8.4 | oraclelinux | kernel-modules | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-modules-extra?distro=oraclelinux-8.4 | oraclelinux | kernel-modules-extra | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-headers?distro=oraclelinux-8.4 | oraclelinux | kernel-headers | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-doc?distro=oraclelinux-8.4 | oraclelinux | kernel-doc | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-devel?distro=oraclelinux-8.4 | oraclelinux | kernel-devel | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug?distro=oraclelinux-8.4 | oraclelinux | kernel-debug | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug-modules?distro=oraclelinux-8.4 | oraclelinux | kernel-debug-modules | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug-modules-extra?distro=oraclelinux-8.4 | oraclelinux | kernel-debug-modules-extra | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug-devel?distro=oraclelinux-8.4 | oraclelinux | kernel-debug-devel | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-debug-core?distro=oraclelinux-8.4 | oraclelinux | kernel-debug-core | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-cross-headers?distro=oraclelinux-8.4 | oraclelinux | kernel-cross-headers | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-core?distro=oraclelinux-8.4 | oraclelinux | kernel-core | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/kernel-abi-stablelists?distro=oraclelinux-8.4 | oraclelinux | kernel-abi-stablelists | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 | ||
Affected | pkg:rpm/oraclelinux/bpftool?distro=oraclelinux-8.4 | oraclelinux | bpftool | < 4.18.0-305.19.1.el8_4 | oraclelinux-8.4 |
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
---|---|---|---|---|---|---|---|---|---|---|---|
# CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |