elsa-2021-3057

{
  "cves": [
    "CVE-2021-22543",
    "CVE-2021-22555",
    "CVE-2021-3609"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[4.18.0-305.12.1_4.OL8]\n- Update Oracle Linux certificates (Kevin Lyons)\n- Disable signing for aarch64 (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15-11.0.5\n\n[4.18.0-305.12.1_4]\n- Revert 'nvme-pci: remove last_sq_tail' (Gopal Tiwari) [1965415 1921591]\n- tc-testing: add test for ct DNAT tuple collision (Marcelo Ricardo Leitner) [1982494 1964578]\n- tc-testing: add support for sending various scapy packets (Marcelo Ricardo Leitner) [1982494 1964578]\n- tc-testing: fix list handling (Marcelo Ricardo Leitner) [1982494 1964578]\n- net/sched: act_ct: handle DNAT tuple collision (Marcelo Ricardo Leitner) [1982494 1964578]\n- mm/memcg: Relocate tcpmem to below memory in struct mem_cgroup (Waiman Long) [1980314 1959772]\n- mm/memcg: optimize user context object stock access (Waiman Long) [1980314 1959772]\n- mm/memcg: improve refill_obj_stock() performance (Waiman Long) [1980314 1959772]\n- mm/memcg: cache vmstat data in percpu memcg_stock_pcp (Waiman Long) [1980314 1959772]\n- mm/memcg: move mod_objcg_state() to memcontrol.c (Waiman Long) [1980314 1959772]\n- mm: memcontrol: use obj_cgroup APIs to charge kmem pages (Waiman Long) [1980314 1959772]\n- mm: memcontrol: change ug-dummy_page only if memcg changed (Waiman Long) [1980314 1959772]\n- mm: memcontrol: directly access page-memcg_data in mm/page_alloc.c (Waiman Long) [1980314 1959772]\n- mm: memcontrol: introduce obj_cgroup_{un}charge_pages (Waiman Long) [1980314 1959772]\n- mm: memcontrol: slab: fix obtain a reference to a freeing memcg (Waiman Long) [1980314 1959772]\n- mm: move lruvec stats update functions to vmstat.h (Waiman Long) [1980314 1959772]\n- mm: memcg/slab: rename *_lruvec_slab_state to *_lruvec_kmem_state (Waiman Long) [1980314 1959772]\n- mm: Convert page kmemcg type to a page memcg flag (Waiman Long) [1980314 1959772]\n- mm: Introduce page memcg flags (Waiman Long) [1980314 1959772]\n- mm: memcontrol/slab: Use helpers to access slab page's memcg_data (Waiman Long) [1980314 1959772]\n- mm: memcontrol: Use helpers to read page's memcg data (Waiman Long) [1980314 1959772]\n- mm/page_alloc.c: extract check_[new|free]_page_bad() common part to page_bad_reason() (Waiman Long) [1980314 1959772]\n- mm/page_alloc.c: rename free_pages_check() to check_free_page() (Waiman Long) [1980314 1959772]\n- mm/page_alloc.c: rename free_pages_check_bad() to check_free_page_bad() (Waiman Long) [1980314 1959772]\n- mm/page_alloc.c: bad_flags is not necessary for bad_page() (Waiman Long) [1980314 1959772]\n- mm/page_alloc.c: bad_[reason|flags] is not necessary when PageHWPoison (Waiman Long) [1980314 1959772]\n\n[4.18.0-305.11.1_4]\n- SUNRPC: Handle major timeout in xprt_adjust_timeout() (Scott Mayhew) [1980613 1979070]\n- net/mlx5e: Disable TLS device offload in kdump mode (Alaa Hleihel) [1969909 1946647]\n- net/mlx5e: Disable TX MPWQE in kdump mode (Alaa Hleihel) [1969909 1946647]\n- drm/i915: Add an encoder hook to sanitize its state during init/resume (Imre Deak) [1981250 1961122]\n- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980500 1980501] {CVE-2021-22555}\n- Bluetooth: btusb: Fix the autosuspend enable and disable (Gopal Tiwari) [1972564 1927375]\n- cifs: handle empty list of targets in cifs_reconnect() (Ronnie Sahlberg) [1973637 1952263]\n- tick/nohz: Update idle_exittime on actual idle exit (Phil Auld) [1978710 1962632]\n- tick/nohz: Remove superflous check for CONFIG_VIRT_CPU_ACCOUNTING_NATIVE (Phil Auld) [1978710 1962632]\n- tick/nohz: Conditionally restart tick on idle exit (Phil Auld) [1978710 1962632]\n- can: bcm: delay release of struct bcm_op after synchronize_rcu() (Hangbin Liu) [1975058 1975059]\n- redhat/configs: Re-enable dptf_power module (Prarit Bhargava) [1968381 1962349]\n- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975514 1975515] {CVE-2021-22543}\n- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975181 1975182] {CVE-2021-33909}",
  "id": "ELSA-2021-3057",
  "ovalId": "oval:com.oracle.elsa:def:20213057",
  "source": "oracle_linux",
  "title": "ELSA-2021-3057:  kernel security, bug fix, and enhancement update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2021-3057.html"
}