[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2021-9407 -- Oracle kernel-uek

ID: oval:org.secpod.oval:def:1505051Date: (C)2021-08-16   (M)2024-04-17
Class: PATCHFamily: unix




[4.14.35-2047.506.8.el7uek] - A/A Bonding: dev_hold/put the delayed GARP work handler"s netdev in rdmaip [Orabug: 33187189] - rds/ib: quarantine STALE mr before dereg [Orabug: 33187192] - rds/ib: avoid dereg of mr in frwr_clean [Orabug: 33187195] - rds/ib: update mr incarnation after forming inv wr [Orabug: 33187199] - rds: ib: Increase entropy of RDMA IOVAs [Orabug: 33187200] [4.14.35-2047.506.7.el7uek] - scsi: core: Retry I/O for Notify Required error [Orabug: 33167357] - Revert x86/reboot: Force all cpus to exit VMX root if VMX is supported [Orabug: 33167350] [4.14.35-2047.506.6.el7uek] - rds: Check for illegal flags when creating an MR [Orabug: 33144339] - seq_file: disallow extremely large seq buffer allocations [Orabug: 33135633] {CVE-2021-33909} [4.14.35-2047.506.5.el7uek] - xen/blkback: Force flush and secure discard support flags [Orabug: 33131619] [4.14.35-2047.506.4.el7uek] - rds/ib: avoid use of trace_printk [Orabug: 33120588] - RDMA/cma: Remove unnecessary INIT-INIT transition [Orabug: 33114515] - ext4: use ext4_grp_locked_error in mb_find_extent [Orabug: 33027709] [4.14.35-2047.506.3.el7uek] - capmem: Mark the pages as non-readonly+dirty. [Orabug: 33116008] - PCI/ERR: Retain status from error notification [Orabug: 32747989] - NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error. [Orabug: 33106366] - net/mlx4: Fix EEPROM dump support [Orabug: 31895299] {CVE-2020-14304} [4.14.35-2047.506.2.el7uek] - KVM: VMX: Consider PID.PIR to determine if vCPU has pending interrupts [Orabug: 33089240] - mm: hugetlb: soft-offline: dissolve_free_huge_page return zero on !PageHuge [Orabug: 33042327] - mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page fails [Orabug: 33042327] - mm: soft-offline: close the race against page allocation [Orabug: 33042327] - mm: fix race on soft-offlining free huge pages [Orabug: 33042327] - Revert xen/fb: allow xenfb initialization for hvm guests [Orabug: 33075317] - scsi: qla2xxx: Fix use after free in bsg [Orabug: 32912131] - block: fix a race between del_gendisk and BLKRRPART [Orabug: 32285697] - block: prevent block device lookups at the beginning of del_gendisk [Orabug: 32285697] - block: take bd_mutex around delete_partitions in del_gendisk [Orabug: 32285697] - Linux 4.14.231 - xen/events: fix setting irq affinity - perf map: Tighten snprintf string precision to pass gcc check on some 32-bit arches - netfilter: x_tables: fix compat match/target pad out-of-bound write - net: phy: broadcom: Only advertise EEE for supported modes - block: only update parent bi_status when bio fail - gfs2: report already frozen/thawed errors - drm/imx: imx-ldb: fix out of bounds array access warning - KVM: arm64: Disable guest access to trace filter controls - KVM: arm64: Hide system instruction access to Trace registers - Revert cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb-prepath. - net: ieee802154: stop dump llsec params for monitors - net: ieee802154: forbid monitor for del llsec seclevel - net: ieee802154: forbid monitor for set llsec params - net: ieee802154: fix nl802154 del llsec devkey - net: ieee802154: fix nl802154 add llsec key - net: ieee802154: fix nl802154 del llsec dev - net: ieee802154: fix nl802154 del llsec key - net: ieee802154: nl-mac: fix check on panid - net: mac802154: Fix general protection fault - drivers: net: fix memory leak in peak_usb_create_dev - drivers: net: fix memory leak in atusb_probe - net: tun: set tun-dev-addr_len during TUNSETLINK processing - cfg80211: remove WARN_ON in cfg80211_sme_connect - usbip: fix vudc usbip_sockfd_store races leading to gpf - net/ncsi: Avoid GFP_KERNEL in response handler - net/ncsi: Refactor MAC, VLAN filters - net/ncsi: Add generic netlink family - net/ncsi: Don"t return error on normal response - net/ncsi: Improve general state logging - net/ncsi: Make local function ncsi_get_filter static - clk: socfpga: fix iomem pointer cast on 64-bit - RDMA/cxgb4: check for ipv6 address properly while destroying listener - net/mlx5: Fix placement of log_max_flow_counter - s390/cpcmd: fix inline assembly register clobbering - workqueue: Move the position of debug_work_activate in __queue_work - clk: fix invalid usage of list cursor in unregister - clk: fix invalid usage of list cursor in register - soc/fsl: qbman: fix conflicting alignment attributes - ASoC: sunxi: sun4i-codec: fill ASoC card owner - net/ncsi: Avoid channel_monitor hrtimer deadlock - ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces - net:tipc: Fix a double free in tipc_sk_mcast_rcv - gianfar: Handle error code at MAC address change - sch_red: fix off-by-one checks in red_check_params - amd-xgbe: Update DMA coherency values - ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips - regulator: bd9571mwv: Fix AVS and DVFS voltage range - i2c: turn recovery error on init to debug - usbip: synchronize event handler with sysfs code paths - usbip: stub-dev synchronize sysfs code paths - usbip: add sysfs_lock to synchronize sysfs code paths - net: sched: sch_teql: fix null-pointer dereference - net: ensure mac header is set in virtio_net_hdr_to_skb - batman-adv: initialize struct batadv_tvlv_tt_vlan_data-reserved field - ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin - parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers - parisc: parisc-agp requires SBA IOMMU driver - fs: direct-io: fix missing sdio-boundary - ia64: fix user_stack_pointer for ptrace - net: ipv6: check for validity before dereferencing cfg-fc_nlinfo.nlh - xen/evtchn: Change irq_info lock to raw_spinlock_t - nfc: Avoid endless loops caused by repeated llcp_sock_connect - nfc: fix memory leak in llcp_sock_connect {CVE-2020-25672} - nfc: fix refcount leak in llcp_sock_connect {CVE-2020-25671} - nfc: fix refcount leak in llcp_sock_bind {CVE-2020-25670} - ASoC: intel: atom: Stop advertising non working S24LE support - ALSA: aloop: Fix initialization of controls - Linux 4.14.230 - can: flexcan: flexcan_chip_freeze: fix chip freeze for missing bitrate - init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM - init/Kconfig: make COMPILE_TEST depend on !S390 - cifs: Silently ignore unknown oplock break handle - cifs: revalidate mapping when we open files for SMB1 POSIX - ia64: mca: allocate early mca with GFP_ATOMIC - scsi: target: pscsi: Clean up after failure in pscsi_map_sg - x86/build: Turn off -fcf-protection for realmode targets - platform/x86: thinkpad_acpi: Allow the FnLock LED to change state - drm/msm: Ratelimit invalid-fence message - mac80211: choose first enabled channel for monitor - mISDN: fix crash in fritzpci - net: pxa168_eth: Fix a potential data race in pxa168_eth_remove - ARM: dts: am33xx: add aliases for mmc interfaces - Linux 4.14.229 - drivers: video: fbcon: fix NULL dereference in fbcon_cursor - staging: rtl8192e: Change state information from u16 to u8 - staging: rtl8192e: Fix incorrect source in memcpy - usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference - USB: cdc-acm: fix use-after-free after probe failure - USB: cdc-acm: downgrade message to debug - USB: cdc-acm: untangle a circular dependency between callback and softint - cdc-acm: fix BREAK rx code path adding necessary calls - usb: xhci-mtk: fix broken streams issue on 0.96 xHCI - usb: musb: Fix suspend with devices connected for a64 - USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem - usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control - firewire: nosy: Fix a use-after-free bug in nosy_ioctl - extcon: Fix error handling in extcon_dev_register - extcon: Add stubs for extcon_register_notifier_all functions - pinctrl: rockchip: fix restore error in resume - reiserfs: update reiserfs_xattrs_initialized condition - drm/amdgpu: check alignment on CPU page for bo map - drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings - mm: fix race by making init_zero_pfn early_initcall - tracing: Fix stack trace event size - ALSA: hda/realtek: call alc_update_headset_mode in hp_automute_hook - ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO - ALSA: usb-audio: Apply sample rate quirk to Logitech Connect - bpf: Remove MTU check in __bpf_skb_max_len - net: wan/lmc: unregister device when no matching device is found - appletalk: Fix skb allocation size in loopback case - net: ethernet: aquantia: Handle error cleanup of start on open - brcmfmac: clear EAP/association status bits on linkdown events - ext4: do not iput inode under running transaction in ext4_rename - ASoC: rt5659: Update MCLK rate in set_sysclk - staging: comedi: cb_pcidas64: fix request_irq warn - staging: comedi: cb_pcidas: fix request_irq warn - scsi: qla2xxx: Fix broken #endif placement - scsi: st: Fix a use after free in st_open - vhost: Fix vhost_vq_reset - powerpc: Force inlining of cpu_has_feature to avoid build failure - ASoC: cs42l42: Always wait at least 3ms after reset - ASoC: cs42l42: Fix mixer volume control - ASoC: es8316: Simplify adc_pga_gain_tlv table - ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe - ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10 - ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10 - rpc: fix NULL dereference on kmalloc failure - ext4: fix bh ref count on error paths - ipv6: weaken the v4mapped source check - selinux: vsock: Set SID for socket returned by accept - Linux 4.14.228 - can: peak_usb: Revert can: peak_usb: add forgotten supported devices - ext4: add reclaim checks to xattr code - mac80211: fix double free in ibss_leave - net: qrtr: fix a kernel-infoleak in qrtr_recvmsg - net: sched: validate stab values - can: dev: Move device back to init netns on owning netns delete - locking/mutex: Fix non debug version of mutex_lock_io_nested - scsi: mpt3sas: Fix error return code of mpt3sas_base_attach - scsi: qedi: Fix error return code of qedi_alloc_global_queues - perf auxtrace: Fix auxtrace queue conflict - ACPI: scan: Use unique number for instance_no - ACPI: scan: Rearrange memory allocation in acpi_device_add - RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server - net/mlx5e: Fix error path for ethtool set-priv-flag - arm64: kdump: update ppos when reading elfcorehdr - drm/msm: fix shutdown hook in case GPU components failed to bind - net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes - net: cdc-phonet: fix data-interface release on probe failure - mac80211: fix rate mask reset - can: m_can: m_can_do_rx_poll: fix extraneous msg loss warning - can: c_can: move runtime PM enable/disable to c_can_platform - can: c_can_pci: c_can_pci_remove: fix use-after-free - can: peak_usb: add forgotten supported devices - ftgmac100: Restart MAC HW once - net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template - e1000e: Fix error handling in e1000_set_d0_lplu_state_82571 - e1000e: add rtnl_lock to e1000_reset_task - net: dsa: bcm_sf2: Qualify phydev-dev_flags based on port - macvlan: macvlan_count_rx needs to be aware of preemption - libbpf: Fix INSTALL flag order - bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD - ARM: dts: at91-sama5d27_som1: fix phy address to 7 - arm64: dts: ls1043a: mark crypto engine dma coherent - arm64: dts: ls1012a: mark crypto engine dma coherent - arm64: dts: ls1046a: mark crypto engine dma coherent - squashfs: fix xattr id and id lookup sanity checks - squashfs: fix inode lookup sanity checks - ia64: fix ptrace sign - ia64: fix ia64_syscall_get_set_arguments for break-based syscalls - nfs: we don"t support removing system.nfs4_acl - drm/radeon: fix AGP dependency - u64_stats,lockdep: Fix u64_stats_init vs lockdep - sparc64: Fix opcode filtering in handling of no fault loads - atm: idt77252: fix null-ptr-dereference - atm: uPD98402: fix incorrect allocation - net: wan: fix error return code of uhdlc_init - net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch - NFS: Correct size calculation for create reply length - nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default - gpiolib: acpi: Add missing IRQF_ONESHOT - sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count - net: tehuti: fix error return code in bdx_probe - ixgbe: Fix memleak in ixgbe_configure_clsu32 - Revert r8152: adjust the settings about MAC clock speed down for RTL8153 - atm: lanai: dont run lanai_dev_close if not open - atm: eni: dont release is never initialized - powerpc/4xx: Fix build errors from mfdcr - net: fec: ptp: avoid register access when ipg clock is disabled [4.14.35-2047.506.1.el7uek] - drivers/uio: Fix incorrect calls to pm_runtime_enable/disable. [Orabug: 33070176] - dts/pensando: Add board config partitions. [Orabug: 33070176] - drivers: updates driver version string to 1.15.9.7 [Orabug: 33065280] - drivers: updates for 1.15.9.7 [Orabug: 33065280] - arm64: Stop printing the virtual memory layout [Orabug: 33059865] - uek-rpm: Fix Pensando"s network application error [Orabug: 33050671] - RDMA/cma: Fix rdma_resolve_route memory leak [Orabug: 33048382] - uek-rpm: enable selinux for Pensando [Orabug: 33032940] - scsi: qla2xxx: Do logout even if fabric scan retries got exhausted [Orabug: 32989009] - xfs: fix lockup issue [Orabug: 32880215] - Build Pensando drivers for uek5 kernel [Orabug: 32569849] - net/ethernet/pensando: Fix Pensando driver build [Orabug: 32569849] - Added mdev, mnet_uio_pdrv and ionic_mnic driver src to UEK5 [Orabug: 32569849] - Linux 4.14.227 - genirq: Disable interrupts for force threaded handlers - ext4: fix potential error in ext4_do_update_inode - ext4: do not try to set xattr into ea_inode if value is empty - ext4: find old entry again if failed to rename whiteout - x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall - x86: Move TS_COMPAT back to asm/thread_info.h - kernel, fs: Introduce and use set_restart_fn and arch_set_restart_data - x86/ioapic: Ignore IRQ2 again - PCI: rpadlpar: Fix potential drc_name corruption in store functions - iio: hid-sensor-temperature: Fix issues of timestamp channel - iio: hid-sensor-prox: Fix scale not correct issue - iio: hid-sensor-humidity: Fix alignment issue of timestamp channel - iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler - iio: adis16400: Fix an error code in adis16400_initial_setup - iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel - iio:adc:stm32-adc: Add HAS_IOMEM dependency - usb: gadget: configfs: Fix KASAN use-after-free - USB: replace hardcode maximum usb string length by definition - usb-storage: Add quirk to defeat Kindle"s automatic unload - nvme-rdma: fix possible hang when failing to set io queues - scsi: lpfc: Fix some error codes in debugfs - net/qrtr: fix __netdev_alloc_skb call - sunrpc: fix refcount leak for rpc auth modules - svcrdma: disable timeouts on rdma backchannel - NFSD: Repair misuse of sv_lock in 5.10.16-rt30. - nvmet: don"t check iosqes,iocqes for discovery controllers - tools build feature: Check if pthread_barrier_t is available - perf: Make perf able to build with latest libbfd - tools build: Check if gettid is available before providing helper - tools build feature: Check if eventfd is available - tools build feature: Check if get_current_dir_name is available - perf tools: Use - Revert PM: runtime: Update device status before letting suppliers suspend - net: dsa: b53: Support setting learning on port - bpf: Fix off-by-one for area size in creating mask to left - ext4: check journal inode extents more carefully - ext4: don"t allow overlapping system zones - Linux 4.14.226 - xen/events: avoid handling the same event on two cpus at the same time - xen/events: don"t unmask an event channel when an eoi is pending - xen/events: reset affinity of 2-level event when tearing it down - iio: imu: adis16400: release allocated memory on failure - KVM: arm64: Fix exclusive limit for IPA size - hwmon: Fix max6658 sporadic wrong temperature reading - binfmt_misc: fix possible deadlock in bm_register_write - powerpc/64s: Fix instruction encoding for lis in ppc_function_entry - include/linux/sched/mm.h: use rcu_dereference in in_vfork - stop_machine: mark helpers __always_inline - configfs: fix a use-after-free in __configfs_open_file - block: rsxx: fix error return code of rsxx_pci_probe - NFSv4.2: fix return value of _nfs4_get_security_label - sh_eth: fix TRSCER mask for R7S72100 - staging: comedi: pcl818: Fix endian problem for AI command data - staging: comedi: pcl711: Fix endian problem for AI command data - staging: comedi: me4000: Fix endian problem for AI command data - staging: comedi: dmm32at: Fix endian problem for AI command data - staging: comedi: das800: Fix endian problem for AI command data - staging: comedi: das6402: Fix endian problem for AI command data - staging: comedi: adv_pci1710: Fix endian problem for AI command data - staging: comedi: addi_apci_1500: Fix endian problem for command sample - staging: comedi: addi_apci_1032: Fix endian problem for COS sample - staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan - staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd - staging: ks7010: prevent buffer overflow in ks_wlan_set_scan - staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data - staging: rtl8712: unterminated string leads to read overflow - staging: rtl8188eu: prevent -ssid overflow in rtw_wx_set_scan - staging: rtl8192u: fix -ssid overflow in r8192_wx_set_scan - usbip: fix vhci_hcd attach_store races leading to gpf - usbip: fix stub_dev usbip_sockfd_store races leading to gpf - usbip: fix vudc to check for stream socket - usbip: fix vhci_hcd to check for stream socket - usbip: fix stub_dev to check for stream socket - USB: serial: cp210x: add some more GE USB IDs - USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter - USB: serial: ch341: add new Product ID - USB: serial: io_edgeport: fix memory leak in edge_startup - usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing - xhci: Improve detection of device initiated wake signal. - usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM - usb: gadget: f_uac1: stop playback on function disable - usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot - USB: gadget: u_ether: Fix a configfs return code - Goodix Fingerprint device is not a modem - mmc: core: Fix partition switch time for eMMC - s390/dasd: fix hanging IO request during DASD driver unbind - s390/dasd: fix hanging DASD driver unbind - Revert 95ebabde382c - ALSA: usb-audio: Fix cannot get freq eq errors on Dell AE515 sound bar - ALSA: hda: Avoid spurious unsol event handling during S3/S4 - ALSA: hda: Drop the BATCH workaround for AMD controllers - ALSA: hda/hdmi: Cancel pending works before suspend - scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu error handling - s390/smp: __smp_rescan_cpus - move cpumask away from stack - PCI: mediatek: Add missing of_node_put to fix reference leak - PCI: xgene-msi: Fix race in installing chained irq handler - powerpc/perf: Record counter overflow always if SAMPLE_IP is unset - powerpc: improve handling of unrecoverable system reset - mmc: mediatek: fix race condition between msdc_request_timeout and irq - mmc: mxs-mmc: Fix a resource leak in an error handling path in "mxs_mmc_probe" - udf: fix silent AED tagLocation corruption - net: phy: fix save wrong speed and duplex problem if autoneg is on - media: usbtv: Fix deadlock on suspend - s390/cio: return -EFAULT if copy_to_user fails - drm: meson_drv add shutdown function - drm/compat: Clear bounce structures - s390/cio: return -EFAULT if copy_to_user fails again - perf traceevent: Ensure read cmdlines are null terminated. - net: stmmac: stop each tx channel independently - net: davicom: Fix regulator not turned off on driver removal - net: davicom: Fix regulator not turned off on failed probe - net: lapbether: Remove netif_start_queue / netif_stop_queue - net: usb: qmi_wwan: allow qmimux add/del with master up - net: sched: avoid duplicates in classes dump - net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10 - net/mlx4_en: update moderation when config reset - sh_eth: fix TRSCER mask for SH771x - Revert mm, slub: consider rest of partial list if acquire_slab fails - cifs: return proper error code in statfs - netfilter: x_tables: gpf inside xt_find_revision - can: flexcan: enable RX FIFO after FRZ/HALT valid - can: flexcan: assert FRZ bit in flexcan_chip_freeze - can: skb: can_skb_set_owner: fix ref counting if socket was closed before setting skb ownership - net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0 - net: Fix gro aggregation for udp encaps with zero csum - ath9k: fix transmitting to stations in dynamic SMPS mode - ethernet: alx: fix order of calls on resume - uapi: nfnetlink_cthelper.h: fix userspace compilation error - Linux 4.14.225 - drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register - misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom - PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller - platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016 - platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices - platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag - platform/x86: acer-wmi: Add new force_caps module parameter - platform/x86: acer-wmi: Cleanup accelerometer device handling - platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines - mwifiex: pcie: skip cancel_work_sync on reset failure path - iommu/amd: Fix sleeping in atomic in increase_address_space - dm table: fix iterate_devices based device capability checks - rsxx: Return -EFAULT if copy_to_user fails - ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits - usbip: tools: fix build error for multiple definition - PM: runtime: Update device status before letting suppliers suspend - btrfs: fix raid6 qstripe kmap - btrfs: raid56: simplify tracking of Q stripe presence - Linux 4.14.224 - media: v4l: ioctl: Fix memory leak in video_usercopy - swap: fix swapfile read/write offset - zsmalloc: account the number of compacted pages correctly - xen-netback: respect gnttab_map_refs"s return value - Xen/gnttab: handle p2m update errors on a per-slot basis - parisc: Bump 64-bit IRQ stack size to 64 KB - f2fs: handle unallocated section and zone on pinned/atgc - media: uvcvideo: Allow entities with no pads - staging: most: sound: add sanity check for function argument - Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data - x86/build: Treat R_386_PLT32 relocation as R_386_PC32 - ath10k: fix wmi mgmt tx queue full due to race condition - pktgen: fix misuse of BUG_ON in pktgen_thread_worker - wlcore: Fix command execute failure 19 for wl12xx - vt/consolemap: do font sum unsigned - x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk - staging: fwserial: Fix error handling in fwserial_create - dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/ - net: bridge: use switchdev for port flags set through sysfs too - mm/hugetlb.c: fix unnecessary address expansion of pmd sharing - net: fix up truesize of cloned skb in skb_prepare_for_shift - smackfs: restrict bytes count in smackfs write functions - xfs: Fix assert failure in xfs_setattr_size - media: mceusb: sanity check for prescaler value - JFS: more checks for invalid superblock - arm64: Use correct ll/sc atomic constraints - arm64: cmpxchg: Use K instead of L for ll/sc immediate constraint - arm64: Avoid redundant type conversions in xchg and cmpxchg - arm64 module: set plt* section addresses to 0x0 - virtio/s390: implement virtio-ccw revision 2 correctly - drm/virtio: use kvmalloc for large allocations - hugetlb: fix update_and_free_page contig page struct assumption - scripts: set proper OpenSSL include dir also for sign-file - scripts: use pkg-config to locate libcrypto - net: usb: qmi_wwan: support ZTE P685M modem [4.14.35-2047.506.0.el7uek] - Linux 4.14.223 - dm era: Update in-core bitset after committing the metadata - net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending - ipv6: silence compilation warning for non-IPV6 builds - ipv6: icmp6: avoid indirect call for icmpv6_send - sunvnet: use icmp_ndo_send helper - gtp: use icmp_ndo_send helper - icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n - icmp: introduce helper for nat"d source address in network device context - dm era: only resize metadata in preresume - dm era: Reinitialize bitset cache before digesting a new writeset - dm era: Use correct value size in equality function of writeset tree - dm era: Fix bitset memory leaks - dm era: Verify the data block size hasn"t changed - dm era: Recover committed writeset after crash - gfs2: Don"t skip dlm unlock if glock has an lvb - sparc32: fix a user-triggerable oops in clear_user - f2fs: fix out-of-repair __setattr_copy - printk: fix deadlock when kernel panic - gpio: pcf857x: Fix missing first interrupt - mmc: sdhci-esdhc-imx: fix kernel panic when remove module - module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols - libnvdimm/dimm: Avoid race between probe and available_slots_show - usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop - mm: hugetlb: fix a race between freeing and dissolving the page - hugetlb: fix copy_huge_page_from_user contig page struct assumption - fs/affs: release old buffer head on error path - mtd: spi-nor: hisi-sfc: Put child node np on error path - watchdog: mei_wdt: request stop on unregister - arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing - floppy: reintroduce O_NDELAY fix - x86/reboot: Force all cpus to exit VMX root if VMX is supported - staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table - drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue - seccomp: Add missing return in non-void function - crypto: sun4i-ss - handle BigEndian for cipher - crypto: sun4i-ss - checking sg length is not sufficient - btrfs: fix extent buffer leak on failure to copy root - btrfs: fix reloc root leak with 0 ref reloc roots on recovery - btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root - KEYS: trusted: Fix migratable=1 failing - tpm_tis: Fix check_locality for correct locality acquisition - ALSA: hda/realtek: modify EAPD in the ALC886 - usb: dwc3: gadget: Fix dep-interval for fullspeed interrupt - usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1 - USB: serial: mos7720: fix error code in mos7720_write - USB: serial: mos7840: fix error code in mos7840_write - usb: musb: Fix runtime PM race in musb_queue_resume_work - USB: serial: option: update interface mapping for ZTE P685M - Input: i8042 - add ASUS Zenbook Flip to noselftest list - Input: joydev - prevent potential read overflow in ioctl - Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S - Input: raydium_ts_i2c - do not send zero length - HID: wacom: Ignore attempts to overwrite the touch_max value from HID - ACPI: configfs: add missing check after configfs_register_default_group - ACPI: property: Fix fwnode string properties matching - blk-settings: align max_sectors on logical_block_size boundary - scsi: bnx2fc: Fix Kconfig warning CNIC build errors - mm/rmap: fix potential pte_unmap on an not mapped pte - i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition - arm64: Add missing ISB after invalidating TLB in __primary_switch - mm/hugetlb: fix potential double free in hugetlb_register_node error path - mm/memory.c: fix potential pte_unmap_unlock pte error - ocfs2: fix a use after free on error - net/mlx4_core: Add missed mlx4_free_cmd_mailbox - i40e: Fix overwriting flow control settings during driver loading - i40e: Fix flow for IPv6 next header - ext4: fix potential htree index checksum corruption - drm/msm/dsi: Correct io_start for MSM8994 - PCI: Align checking of syscall user config accessors - VMCI: Use set_page_dirty_lock when unregistering guest memory - pwm: rockchip: rockchip_pwm_probe: Remove superfluous clk_unprepare - misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users - misc: eeprom_93xx46: Fix module alias to enable module autoprobe - sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set - Input: elo - fix an error code in elo_connect - perf test: Fix unaligned access in sample parsing test - perf intel-pt: Fix missing CYC processing in PSB - spi: pxa2xx: Fix the controller numbering for Wildcat Point - powerpc/8xx: Fix software emulation interrupt - powerpc/pseries/dlpar: handle ibm, configure-connector delay status - mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq - spi: stm32: properly handle 0 byte transfer - RDMA/rxe: Fix coding error in rxe_recv.c - perf tools: Fix DSO filtering when not finding a map for a sampled address - tracepoint: Do not fail unregistering a probe due to memory failure - amba: Fix resource leak for drivers without .remove - ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores - mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe - powerpc/47x: Disable 256k page size - IB/umad: Return EIO in case of when device disassociated - auxdisplay: ht16k33: Fix refresh rate handling - isofs: release buffer head before return - spi: atmel: Put allocated master before return - certs: Fix blacklist flag type confusion - regulator: axp20x: Fix reference cout leak - clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined - rtc: s5m: select REGMAP_I2C - power: reset: at91-sama5d2_shdwc: fix wkupdbc mask - of/fdt: Make sure no-map does not remove already reserved regions - fdt: Properly handle no-map field in the memory region - mfd: bd9571mwv: Use devm_mfd_add_devices - dmaengine: hsu: disable spurious interrupt - dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function - dmaengine: fsldma: Fix a resource leak in the remove function - HID: core: detect and skip invalid inputs to snto32 - spi: cadence-quadspi: Abort read if dummy cycles required are too many - clk: meson: clk-pll: fix initializing the old rate for a PLL - capabilities: Don"t allow writing ambiguous v3 file capabilities - jffs2: fix use after free in jffs2_sum_write_data - fs/jfs: fix potential integer overflow on shift of a int - ima: Free IMA measurement buffer after kexec syscall - ima: Free IMA measurement buffer on error - crypto: ecdh_helper - Ensure "len = secret.len" in decode_key - hwrng: timeriomem - Fix cooldown period calculation - btrfs: clarify error returns values in __load_free_space_cache - Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind - ata: ahci_brcm: Add back regulators management - media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values - media: pxa_camera: declare variable when DEBUG is defined - media: cx25821: Fix a bug when reallocating some dma memory - media: qm1d1c0042: fix error return code in qm1d1c0042_init - media: lmedm04: Fix misuse of comma - crypto: bcm - Rename struct device_private to bcm_device_private - ASoC: cs42l56: fix up error handling in probe - media: tm6000: Fix memleak in tm6000_start_stream - media: media/pci: Fix memleak in empress_init - media: vsp1: Fix an error handling path in the probe function - media: i2c: ov5670: Fix PIXEL_RATE minimum value - MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0 - MIPS: c-r4k: Fix section mismatch for loongson2_sc_init - crypto: sun4i-ss - fix kmap usage - gma500: clean up error handling in init - drm/gma500: Fix error return code in psb_driver_load - fbdev: aty: SPARC64 requires FB_ATY_CT - net: mvneta: Remove per-cpu queue mapping for Armada 3700 - net: amd-xgbe: Reset link when the link never comes back - net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout - ibmvnic: skip send_request_unmap for timeout reset - b43: N-PHY: Fix the update of coef for the PHY revision = 3case - mac80211: fix potential overflow when multiplying to u32 integers - bnxt_en: reverse order of TX disable and carrier off - ath9k: fix data bus crash when setting nf_override via debugfs - bpf_lru_list: Read double-checked variable once without lock - ARM: s3c: fix fiq for clang IAS - arm64: dts: msm8916: Fix reserved and rfsa nodes unit address - staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules - usb: dwc2: Make trimming xfer length a debug message - usb: dwc2: Abort transaction after errors with unknown reason - usb: dwc2: Do not update data length if it is 0 on inbound transfers - ARM: dts: Configure missing thermal interrupt for 4430 - Bluetooth: Put HCI device if inquiry procedure interrupts - Bluetooth: drop HCI device reference before return - usb: gadget: u_audio: Free requests only after callback - cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in -remove - arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso - arm64: dts: exynos: correct PMIC interrupt trigger level on TM2 - ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa - ARM: dts: exynos: correct PMIC interrupt trigger level on Spring - ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato - ARM: dts: exynos: correct PMIC interrupt trigger level on Monk - Bluetooth: Fix initializing response id after clearing struct - Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function - random: fix the RNDRESEEDCRNG ioctl - MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA section - kdb: Make memory allocations more robust - vmlinux.lds.h: add DWARF v5 sections - scripts/recordmcount.pl: support big endian for ARCH sh - cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb-prepath. - NET: usb: qmi_wwan: Adding support for Cinterion MV31 - arm64: tegra: Add power-domain for Tegra210 HDA - ntfs: check for valid standard information attribute - usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable - HID: make arrays usage and value to be the same - Linux 4.14.222 - kvm: check tlbs_dirty directly - usb: gadget: u_ether: Fix MTU size mismatch with RX packet size - USB: Gadget Ethernet: Re-enable Jumbo frames. - scsi: qla2xxx: Fix crash during driver load on big endian machines - xen/arm: don"t ignore return errors from set_phys_to_machine - tracing: Avoid calling cc-option -mrecord-mcount for every Makefile - tracing: Fix SKIP_STACK_VALIDATION=1 build due to bad merge with -mrecord-mcount - trace: Use -mcount-record for dynamic ftrace - x86/build: Disable CET instrumentation in the kernel for 32-bit too - h8300: fix PREEMPTION build, TI_PRE_COUNT undefined - i2c: stm32f7: fix configuration of the digital filter - vsock: fix locking in vsock_shutdown - vsock/virtio: update credit only if socket is not closed - net: watchdog: hold device global xmit lock during tx disable - net/vmw_vsock: improve locking in vsock_connect_timeout - usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one - usb: dwc3: ulpi: fix checkpatch warning - netfilter: conntrack: skip identical origin tuple in same zone only - netfilter: xt_recent: Fix attempt to update deleted entry - bpf: Check for integer overflow when using roundup_pow_of_two - memblock: do not start bottom-up allocations with kernel_end - ARM: ensure the signal page contains defined contents - ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL - ovl: skip getxattr of security labels - cap: fix conversions on getxattr - ovl: perform vfs_getxattr with mounter creds - platform/x86: hp-wmi: Disable tablet-mode reporting by default - arm64: dts: rockchip: Fix PCIe DT properties on rk3399 - MIPS: BMIPS: Fix section mismatch warning - arm/xen: Don"t probe xenbus as part of an early initcall - tracing: Check length before giving out the filter buffer - tracing: Do not count ftrace events in top level enable output - squashfs: add more sanity checks in xattr id lookup - squashfs: add more sanity checks in inode lookup - squashfs: add more sanity checks in id lookup - memcg: fix a crash in wb_workfn when a device disappears - include/trace/events/writeback.h: fix -Wstringop-truncation warnings - lib/string: Add strscpy_pad function - SUNRPC: Handle 0 length opaque XDR object data properly - SUNRPC: Move simple_get_bytes and simple_get_netobj into private header - iwlwifi: mvm: guard against device removal in reprobe - iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap - iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time - pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process - af_key: relax availability checks for skb size calculation - remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load - remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load - fgraph: Initialize tracing_graph_pause at task creation - Linux 4.14.221 - net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add - iommu/vt-d: Do not use flush-queue when caching-mode is on - Input: xpad - sync supported devices with fork on GitHub - x86/apic: Add extra serialization for non-serializing MSRs - x86/build: Disable CET instrumentation in the kernel - mm: thp: fix MADV_REMOVE deadlock on shmem THP - mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active - mm: hugetlb: fix a race between isolating and freeing page - mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page - ARM: footbridge: fix dc21285 PCI configuration accessors - nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs - mmc: core: Limit retries when analyse of SDIO tuples fails - smb3: Fix out-of-bounds bug in SMB2_negotiate - cifs: report error instead of invalid when revalidating a dentry fails - xhci: fix bounce buffer usage for non-sg list case - kretprobe: Avoid re-registration of the same kretprobe earlier - mac80211: fix station rate table updates on assoc - ovl: fix dentry leak in ovl_get_redirect - usb: dwc2: Fix endpoint direction check in ep_from_windex - USB: usblp: don"t call usb_set_interface if there"s a single alt - USB: gadget: legacy: fix an error code in eth_bind - ipv4: fix race condition between route lookup and invalidation - elfcore: fix building with clang - objtool: Support Clang non-section symbols in ORC generation - net: lapb: Copy the skb before sending a packet - arm64: dts: ls1046a: fix dcfg address range - USB: serial: option: Adding support for Cinterion MV31 - USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000 - USB: serial: cp210x: add pid/vid for WSDA-200-USB - Linux 4.14.220 - kthread: Extract KTHREAD_IS_PER_CPU - objtool: Don"t fail on missing symbol table - scsi: ibmvfc: Set default timeout to avoid crash during migration - mac80211: fix fast-rx encryption check - scsi: libfc: Avoid invoking response handler twice if ep is already completed - scsi: scsi_transport_srp: Don"t block target in failfast state - x86: __always_inline __{rd,wr}msr - phy: cpcap-usb: Fix warning for missing regulator_disable - driver core: Extend device_is_dependent - base: core: Remove WARN_ON from link dependencies check - net_sched: gen_estimator: support large ewma log - net_sched: reject silly cell_log in qdisc_get_rtab - ACPI: thermal: Do not call acpi_thermal_check directly - ibmvnic: Ensure that CRQ entry read are correctly ordered - net: dsa: bcm_sf2: put device node before return - rds/ib: move rds_ib_clear_irq_miss to .h file [Orabug: 33044345] - rds/ib: recover rds connection from interrupt loss scenario [Orabug: 32804265] - rds/ib: handle posted ACK during connection shutdown [Orabug: 32863569] - rds/ib: reap tx completions during connection shutdown [Orabug: 32863569] - xfs: fix xlog_finish_defer_ops [Orabug: 32982355] - Revert Allow mce to reset instead of panic on UE [Orabug: 32820277]

Platform:
Oracle Linux 7
Product:
kernel-uek
Reference:
ELSA-2021-9407
CVE-2020-14304
CVE-2020-25670
CVE-2020-25671
CVE-2020-25672
CVE-2021-33909
CVE    5
CVE-2020-14304
CVE-2020-25672
CVE-2020-25671
CVE-2020-25670
...
CPE    2
cpe:/o:oracle:kernel-uek
cpe:/o:oracle:linux:7

© SecPod Technologies