elsa-2021-3327

{
  "cves": [
    "CVE-2021-29650",
    "CVE-2021-32399",
    "CVE-2020-27777",
    "CVE-2021-29154",
    "CVE-2021-22555"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[3.10.0-1160.41.1.OL7]\n- Update Oracle Linux certificates (Ilya Okomin)\n- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)\n- Update x509.genkey [Orabug: 24817676]\n- Conflict with shim-ia32 and shim-x64 = 15-2.0.9\n- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)\n\n[3.10.0-1160.41.1]\n- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]\n\n[3.10.0-1160.40.1]\n- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}\n- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}\n- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}\n- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]\n\n[3.10.0-1160.39.1]\n- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}\n- Revert 'be2net: disable bh with spin_lock in be_process_mcc' (Petr Oros) [1971744]\n- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]\n- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]\n- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]\n\n[3.10.0-1160.38.1]\n- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]\n- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]\n- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}\n- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]\n- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]\n\n[3.10.0-1160.37.1]\n- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]\n- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]\n- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}\n- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]\n- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]",
  "id": "ELSA-2021-3327",
  "ovalId": "oval:com.oracle.elsa:def:20213327",
  "source": "oracle_linux",
  "title": "ELSA-2021-3327:  kernel security and bug fix update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2021-3327.html"
}