Lucene search

K
oraclelinuxOracleLinuxELSA-2021-4777
HistoryNov 24, 2021 - 12:00 a.m.

kernel security and bug fix update

2021-11-2400:00:00
linux.oracle.com
29

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

[3.10.0-1160.49.1.OL7]

  • Update Oracle Linux certificates (Ilya Okomin)
  • Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)([email protected])
  • Update x509.genkey [Orabug: 24817676]
  • Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
  • Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)
    [3.10.0-1160.49.1]
  • NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]
    [3.10.0-1160.48.1]
  • scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
  • scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
  • scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
  • scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
  • scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
  • scsi: ibmvfc: don’t check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
  • scsi: ibmvfc: Use compiler attribute defines instead of attribute() (Desnes A. Nunes do Rosario) [1882627]
  • scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]
    [3.10.0-1160.47.1]
  • PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
  • PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
  • PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
  • scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]
    [3.10.0-1160.46.1]
  • RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
  • RDMA/ucma: Fix locking for ctx->events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
  • RDMA/ucma: Fix the locking of ctx->file (Kamal Heib) [1978075] {CVE-2020-36385}
  • RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
  • RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
  • RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
  • nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
  • nvme-pci: Don’t disable on timeout in reset state (Gopal Tiwari) [1981610]
  • nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P