Lucene search

K
oraclelinuxOracleLinuxELSA-2022-9998
HistoryNov 15, 2022 - 12:00 a.m.

Unbreakable Enterprise kernel security update

2022-11-1500:00:00
linux.oracle.com
20

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

[5.4.17-2136.313.6]

  • Uninitialized variable image_ext in fixup_vdso_exception of extable.c (Alok Tiwari) [Orabug: 33000550]
  • NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo) [Orabug: 34475857]
  • EDAC/mce_amd: Do not load edac_mce_amd module on guests (Smita Koralahalli) [Orabug: 34484268]
  • uek: kabi: update kABI files for new symbol (Saeed Mirzamohammadi) [Orabug: 34595589]
  • RDS/IB Fix allocation warning (Hans Westgaard Ry) [Orabug: 34684322]
  • uek-rpm: Add support for building a kdump kernel on MIPS64 (Dave Kleikamp) [Orabug: 34696261]
  • hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek) [Orabug: 34710682]
  • hwmon: (opbmc) Driver message prefixes (Jan Zdarek) [Orabug: 34710682]
  • Revert ‘fs: check FMODE_LSEEK to control internal pipe splicing’ (Saeed Mirzamohammadi) [Orabug: 34724694]
  • Revert ‘sched/deadline: Fix priority inheritance with multiple scheduling classes’ (Sherry Yang) [Orabug: 34700434]
    [5.4.17-2136.313.5]
  • IB/mlx5: Move to fully dynamic UAR mode once user space supports it (Yishai Hadas) [Orabug: 34430072]
  • IB/mlx5: Extend QP creation to get uar page index from user space (Yishai Hadas) [Orabug: 34430072]
  • IB/mlx5: Extend CQ creation to get uar page index from user space (Yishai Hadas) [Orabug: 34430072]
  • IB/mlx5: Expose UAR object and its alloc/destroy commands (Yishai Hadas) [Orabug: 34430072]
  • IB/mlx5: Generally use the WC auto detection test result (Yishai Hadas) [Orabug: 34430072]
  • RDMA/mlx5: Use offsetofend() instead of duplicated variant (Leon Romanovsky) [Orabug: 34430072]
  • RDMA/mlx5: Remove duplicate definitions of SW_ICM macros (Erez Shitrit) [Orabug: 34430072]
  • IB/mlx5: Introduce UAPIs to manage packet pacing (Yishai Hadas) [Orabug: 34430072]
  • RDMA/mlx5: Prevent overflow in mmap offset calculations (Leon Romanovsky) [Orabug: 34430072]
  • RDMA/core: Make the entire API tree static (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Ensure that rdma_user_mmap_entry_remove() is a fence (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/mlx5: Set relaxed ordering when requested (Michael Guralnik) [Orabug: 34430072]
  • RDMA/core: Add the core support field to METHOD_GET_CONTEXT (Michael Guralnik) [Orabug: 34430072]
  • RDMA/uverbs: Add new relaxed ordering memory region access flag (Michael Guralnik) [Orabug: 34430072]
  • RDMA/core: Add optional access flags range (Michael Guralnik) [Orabug: 34430072]
  • RDMA/uverbs: Add ioctl command to get a device context (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Remove ucontext_lock from the uverbs_destry_ufile_hw() path (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Add UVERBS_METHOD_ASYNC_EVENT_ALLOC (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Use READ_ONCE for ib_ufile.async_file (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Make ib_uverbs_async_event_file into a uobject (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Remove the ufile arg from rdma_alloc_begin_uobject (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Simplify type usage for ib_uverbs_async_handler() (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Do not erase the type of ib_wq.uobject (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Do not erase the type of ib_qp.uobject (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Do not erase the type of ib_cq.uobject (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Make ib_ucq_object use ib_uevent_object (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Do not allow alloc_commit to fail (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/mlx5: Simplify devx async commands (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/core: Simplify destruction of FD uobjects (Jason Gunthorpe) [Orabug: 34430072]
  • RDMA/mlx5: Use RCU and direct refcounts to keep memory alive (Jason Gunthorpe) [Orabug: 34430072]
  • IB/mlx5: Add mmap support for VAR (Yishai Hadas) [Orabug: 34430072]
  • IB/mlx5: Introduce VAR object and its alloc/destroy methods (Yishai Hadas) [Orabug: 34430072]
  • IB/mlx5: Extend caps stage to handle VAR capabilities (Yishai Hadas) [Orabug: 34430072]
  • IB/mlx5: Fix device memory flows (Yishai Hadas) [Orabug: 34430072]
  • IB/core: Introduce rdma_user_mmap_entry_insert_range() API (Yishai Hadas) [Orabug: 34430072]
  • IB/mlx5: Support flow counters offset for bulk counters (Yevgeny Kliteynik) [Orabug: 34430072]
  • IB/mlx5: Rename profile and init methods (Michael Guralnik) [Orabug: 34430072]
  • RDMA: Connect between the mmap entry and the umap_priv structure (Michal Kalderon) [Orabug: 34430072]
  • RDMA/core: Create mmap database and cookie helper functions (Michal Kalderon) [Orabug: 34430072]
  • RDMA/core: Move core content from ib_uverbs to ib_core (Michal Kalderon) [Orabug: 34430072]
  • IB/mlx5: Test write combining support (Michael Guralnik) [Orabug: 34430072]
  • IB/mlx5: Align usage of QP1 create flags with rest of mlx5 defines (Michael Guralnik) [Orabug: 34430072]
  • IB/mlx5: Introduce and use mkey context setting helper routine (Parav Pandit) [Orabug: 34430072]
  • net/rds: Send congestion map updates only via path zero (Anand Khoje) [Orabug: 34578051]
  • Revert ‘RDS/IB: Fix RDS IB SRQ implementation and tune it’ (Hans Westgaard Ry) [Orabug: 34662431]
  • net: vlan: Avoid using BUG() in vlan_proto_idx() (Florian Fainelli) [Orabug: 34672449]
  • KVM: x86: drop superfluous mmu_check_root() from fast_pgd_switch() (Vitaly Kuznetsov) [Orabug: 34679770]
  • KVM: SVM: Update cr3_lm_rsvd_bits for AMD SEV guests (Babu Moger) [Orabug: 34679770]
  • KVM: x86: Invoke vendor’s vcpu_after_set_cpuid() after all common updates (Sean Christopherson) [Orabug: 34679770]
  • KVM: x86: Move kvm_x86_ops.vcpu_after_set_cpuid() into kvm_vcpu_after_set_cpuid() (Xiaoyao Li) [Orabug: 34679770]
  • KVM: x86: Rename cpuid_update() callback to vcpu_after_set_cpuid() (Xiaoyao Li) [Orabug: 34679770]
  • RDMA/cma: Use output interface for net_dev check (Hakon Bugge) [Orabug: 34694980]
    [5.4.17-2136.313.4]
  • arm64: pensando: Suppress tree-loop-distribute-patterns optimization (Henry Willard) [Orabug: 34634974]
  • uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi) [Orabug: 34644240]
  • ACPI: processor idle: Practically limit ‘Dummy wait’ workaround to old Intel systems (Dave Hansen) [Orabug: 34671342]
    [5.4.17-2136.313.3]
  • Revert ‘net: mvpp2: debugfs: fix memory leak when using debugfs_lookup()’ (Sasha Levin)
  • USB: core: Fix RST error in hub.c (Alan Stern)
  • cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa)
  • parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)
  • LTS tag: v5.4.213 (Sherry Yang)
  • MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)
  • x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra)
  • sch_sfb: Also store skb len before calling child enqueue (Toke Hoiland-Jorgensen)
  • tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)
  • nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg)
  • RDMA/mlx5: Set local port to one when accessing counters (Chris Mi)
  • ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)
  • RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij)
  • i40e: Fix kernel crash during module removal (Ivan Vecera)
  • tipc: fix shift wrapping bug in map_get() (Dan Carpenter)
  • sch_sfb: Don’t assume the skb is still around after enqueueing to child (Toke Hoiland-Jorgensen)
  • afs: Use the operation issue time instead of the reply time for callbacks (David Howells)
  • rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells)
  • netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)
  • netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi)
  • RDMA/hns: Fix supported page size (Chengchang Tang)
  • soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He)
  • RDMA/cma: Fix arguments order in net device validation (Michael Guralnik)
  • regulator: core: Clean up on enable failure (Andrew Halaney)
  • ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch)
  • smb3: missing inode locks in punch hole (David Howells)
  • scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang)
  • scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)
  • nvmet: fix a use-after-free (Bart Van Assche)
  • debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman)
  • kprobes: Prohibit probes in gate area (Christian A. Ehrhardt)
  • ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke)
  • ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong)
  • ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis)
  • drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang)
  • fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang)
  • arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla)
  • parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller)
  • parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong)
  • drm/radeon: add a force flush to delay work when radeon (Zhenneng Li)
  • drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li)
  • drm/gem: Fix GEM handle release errors (Jeffy Chen)
  • scsi: megaraid_sas: Fix double kfree() (Guixin Liu)
  • USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)
  • USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)
  • usb: dwc3: disable USB core PHY management (Johan Hovold)
  • usb: dwc3: fix PHY disable sequence (Johan Hovold)
  • btrfs: harden identification of a stale device (Anand Jain)
  • drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz)
  • ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai)
  • ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai)
  • net: mac802154: Fix a condition in the receive path (Miquel Raynal)
  • ip: fix triggering of ‘icmp redirect’ (Nicolas Dichtel)
  • wifi: mac80211: Don’t finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant)
  • driver core: Don’t probe devices after bus_type.match() probe deferral (Isaac J. Manjarres)
  • usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati)
  • USB: core: Prevent nested device-reset calls (Alan Stern)
  • s390: fix nospec table alignments (Josh Poimboeuf)
  • s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer)
  • usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta)
  • USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT)
  • usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit)
  • usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun)
  • USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao)
  • USB: serial: option: add Quectel EM060K modem (Yonglin Tan)
  • USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu)
  • USB: serial: cp210x: add Decagon UCA device id (Johan Hovold)
  • xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman)
  • thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg)
  • gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen)
  • hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf)
  • clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren)
  • Input: rk805-pwrkey - fix module autoloading (Peter Robinson)
  • clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai)
  • Revert ‘clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops’ (Stephen Boyd)
  • clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai)
  • drm/i915/reg: Fix spelling mistake ‘Unsupport’ -> ‘Unsupported’ (Colin Ian King)
  • usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold)
  • binder: fix UAF of ref->proc caused by race condition (Carlos Llamas)
  • USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens)
  • misc: fastrpc: fix memory corruption on open (Johan Hovold)
  • misc: fastrpc: fix memory corruption on probe (Johan Hovold)
  • iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson)
  • Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa)
  • tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun)
  • vt: Clear selection before changing the font (Helge Deller)
  • powerpc: align syscall table for ppc32 (Masahiro Yamada)
  • staging: rtl8712: fix use after free bugs (Dan Carpenter)
  • serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang)
  • net/smc: Remove redundant refcount increase (Yacan Liu)
  • Revert ‘sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb’ (Jakub Kicinski)
  • tcp: annotate data-race around challenge_timestamp (Eric Dumazet)
  • sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Hoiland-Jorgensen)
  • kcm: fix strp_init() order and cleanup (Cong Wang)
  • ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou)
  • net: sched: tbf: don’t call qdisc_put() while holding tree lock (Zhengchao Shao)
  • Revert ‘xhci: turn off port power in shutdown’ (Mathias Nyman)
  • wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter)
  • ieee802154/adf7242: defer destroy_workqueue call (Lin Ma)
  • iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson)
  • platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko)
  • drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson)
  • drm/msm/dsi: fix the inconsistent indenting (sunliming)
  • net: dp83822: disable false carrier interrupt (Enguerrand de Ribaucourt)
  • Revert ‘mm: kmemleak: take a full lowmem check in kmemleak_*_phys()’ (Yee Lee)
  • fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds)
  • net: mvpp2: debugfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)
  • wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka)
  • efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim)
  • LTS tag: v5.4.212 (Sherry Yang)
  • net: neigh: don’t call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)
  • net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao)
  • kprobes: don’t call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima)
  • lib/vdso: Mark do_hres() and do_coarse() as __always_inline (Andrei Vagin)
  • lib/vdso: Let do_coarse() return 0 to simplify the callsite (Christophe Leroy)
  • btrfs: tree-checker: check for overlapping extent items (Josef Bacik)
  • netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven)
  • drm/amd/display: Fix pixel clock programming (Ilya Bakoulin)
  • s390/hypfs: avoid error message under KVM (Juergen Gross)
  • neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev)
  • drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang)
  • drm/amd/display: Avoid MPC infinite loop (Josip Pavic)
  • btrfs: unify lookup return value when dir entry is missing (Filipe Manana)
  • btrfs: do not pin logs too early during renames (Filipe Manana)
  • btrfs: introduce btrfs_lookup_match_dir (Marcos Paulo de Souza)
  • mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn)
  • bpf: Don’t redirect packets with invalid pkt_len (Zhengchao Shao)
  • ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong)
  • fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren)
  • HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati)
  • media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu)
  • udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy)
  • HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones)
  • Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz)
  • kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng)
  • x86/bugs: Add ‘unknown’ reporting for MMIO Stale Data (Pawan Gupta)
  • s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer)
  • mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn)
  • scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar)
  • perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian)
  • md: call __md_stop_writes in md_stop (Guoqing Jiang)
  • mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand)
  • ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu)
  • s390: fix double free of GS and RI CBs on fork() failure (Brian Foster)
  • asm-generic: sections: refactor memory_intersects (Quanyang Wang)
  • loop: Check for overflow while configuring loop (Siddh Raman Pant)
  • x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin)
  • btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues)
  • btrfs: add info when mount fails due to stale replace target (Anand Jain)
  • btrfs: replace: drop assert for suspended replace (Anand Jain)
  • btrfs: fix silent failure when deleting root reference (Filipe Manana)
  • ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller)
  • net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima)
  • net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima)
  • net: Fix a data-race around netdev_budget. (Kuniyuki Iwashima)
  • net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima)
  • net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima)
  • net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima)
  • ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima)
  • net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima)
  • net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima)
  • netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso)
  • netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso)
  • netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso)
  • netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso)
  • bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta)
  • net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej zenczykowski)
  • bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins)
  • net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov)
  • net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov)
  • rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux)
  • SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust)
  • xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong)
  • kernel/sched: Remove dl_boosted flag comment (Hui Su)
  • sched/deadline: Fix priority inheritance with multiple scheduling classes (Juri Lelli)
  • sched/deadline: Fix stale throttling on de-/boosted tasks (Lucas Stach)
  • sched/deadline: Unthrottle PI boosted threads while enqueuing (Daniel Bristot de Oliveira)
  • pinctrl: amd: Don’t save/restore interrupt status and wake status bits (Basavaraj Natikar)
  • Revert ‘selftests/bpf: Fix test_align verifier log patterns’ (Jean-Philippe Brucker)
  • Revert ‘selftests/bpf: Fix ‘dubious pointer arithmetic’ test’ (Jean-Philippe Brucker)
  • usb: cdns3: Fix issue for clear halt endpoint (Pawel Laszczak)
  • kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap)
  • parisc: Fix exception handler for fldw and fstw instructions (Helge Deller)
  • audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui)
    [5.4.17-2136.313.2]
  • ice: enable ethtool hooks for E810 firmware update (John Donnelly) [Orabug: 34077831]
  • ice: add ice_handle_nvm_access() (John Donnelly) [Orabug: 34077831]
  • rds: cong: Make rds_cong_wait an array to reduce lock contention (Hakon Bugge) [Orabug: 34574093]
  • rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Hakon Bugge) [Orabug: 34574093]
  • mm: memcg/slab: disable cache merging for KMALLOC_NORMAL caches (Waiman Long) [Orabug: 34601144]
    caches (Waiman Long) [Orabug: 34601144]
  • mm: memcg/slab: properly set up gfp flags for objcg pointer array (Waiman Long) [Orabug: 34601144]
  • mm, memcg: introduce mem_cgroup_kmem_disabled() (Roman Gushchin) [Orabug: 34601144]
  • mm, slab: make kmalloc_info[] contain all types of names (Pengfei Li) [Orabug: 34601144]
    cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34639998]
  • cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo) [Orabug: 34639998]
  • cgroup: Optimize single thread migration (Michal Koutny) [Orabug: 34639998]
  • Revert ‘cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()’ (Imran Khan) [Orabug: 34639998]
    cpus_read_lock() deadlock’ (Imran Khan) [Orabug: 34639998]
  • x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Yazen Ghannam) [Orabug: 34639981]
  • x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Yazen Ghannam) [Orabug: 34639981]
  • x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Muralidhara M K) [Orabug: 34639981]
  • x86/mce: Increase maximum number of banks to 64 (Akshay Gupta) [Orabug: 34639981]
  • x86/MCE/AMD, EDAC/amd64: Move address translation to AMD64 EDAC (Yazen Ghannam) [Orabug: 34639981]
  • x86/MCE/AMD: Export smca_get_bank_type symbol (Mukul Joshi) [Orabug: 34639981]
  • EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Yazen Ghannam) [Orabug: 34639981]
  • EDAC/amd64: Set proper family type for Family 19h Models 20h-2Fh (Yazen Ghannam) [Orabug: 34639981]
  • EDAC: Add RDDR5 and LRDDR5 memory types (Yazen Ghannam) [Orabug: 34639981]
  • hwmon: (k10temp) Support up to 12 CCDs on AMD Family of processors (Babu Moger) [Orabug: 34639981]
  • hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger) [Orabug: 34639981]
  • x86/amd_nb: Add AMD Family 19h Models (10h-1Fh) and (A0h-AFh) PCI IDs (Yazen Ghannam) [Orabug: 34639981]
  • hwmon: (k10temp) Remove unused definitions (Babu Moger) [Orabug: 34639981]
  • hwmon: (k10temp) Remove residues of current and voltage (suma hegde) [Orabug: 34639981]
  • hwmon: (k10temp) Add support for yellow carp (Mario Limonciello) [Orabug: 34639981]
  • hwmon: (k10temp) Rework the temperature offset calculation (Mario Limonciello) [Orabug: 34639981]
  • hwmon: (k10temp) Don’t show Tdie for all Zen/Zen2/Zen3 CPU/APU (Mario Limonciello) [Orabug: 34639981]
  • hwmon: (k10temp) Add additional missing Zen2 and Zen3 APUs (Mario Limonciello) [Orabug: 34639981]
  • hwmon: (k10temp) support Zen3 APUs (David Bartley) [Orabug: 34639981]
  • x86/amd_nb: Add AMD family 19h model 50h PCI ids (David Bartley) [Orabug: 34639981]
  • hwmon: (k10temp) Zen3 Ryzen Desktop CPUs support (Gabriel Craciunescu) [Orabug: 34639981]
  • hwmon: (k10temp) Remove support for displaying voltage and current on Zen CPUs (Guenter Roeck) [Orabug: 34639981]
  • hwmon: (k10temp) Add support for Zen3 CPUs (Wei Huang) [Orabug: 34639981]
  • hwmon: (k10temp) Take out debugfs code (Guenter Roeck) [Orabug: 34639981]
  • hwmon: (k10temp) Define SVI telemetry and current factors for Zen2 CPUs (Wei Huang) [Orabug: 34639981]
  • hwmon: (k10temp) Create common functions and macros for Zen CPU families (Wei Huang) [Orabug: 34639981]
  • hwmon: (k10temp) make some symbols static (Jason Yan) [Orabug: 34639981]
  • hwmon: (k10temp) Reorganize and simplify temperature support detection (Guenter Roeck) [Orabug: 34639981]
  • Revert ‘hwmon: (k10temp) Add support for Zen3 CPUs’ (Dave Kleikamp) [Orabug: 34639981]
  • uek-rpm: add missing nft_chain_nat.ko module (Venkat Venkatsubra) [Orabug: 34639977]
  • random: Fix incorrect type for ‘rc’ variable (Harshit Mogalapalli) [Orabug: 34639972]
  • hwmon: (opbmc) Add support for AST2600 based Pilot (Jan Zdarek) [Orabug: 34639967]
  • KVM: SVM: Clear the CR4 register on reset (Babu Moger) [Orabug: 34639963]
  • x86,swiotlb: Adjust SWIOTLB bounce buffer size for SEV guests (Ashish Kalra) [Orabug: 34639951]
  • netfilter: ebtables: reject blobs that don’t provide all entry points (Florian Westphal) [Orabug: 34610051]
  • uek-rpm: Disable CONFIG_CRYPTO_STREEBOG (Victor Erminpour) [Orabug: 34610044]
  • uek-rpm: Disable CONFIG_CRYPTO_SM3 (Victor Erminpour) [Orabug: 34610044]
  • uek-rpm: Disable CONFIG_CRYPTO_SM4 (Victor Erminpour) [Orabug: 34610044]
  • uek-rpm: Add nftables support T93 and Ortano (Henry Willard) [Orabug: 34610035]
  • af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu) [Orabug: 34610032] {CVE-2022-3028}
  • cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Tetsuo Handa) [Orabug: 34610025]
    cpus_read_lock() deadlock (Tejun Heo) [Orabug: 34610025]
  • audit: use extern storage class for audit_filter_syscall() (Ankur Arora) [Orabug: 34586449]
  • audit: annotate branch direction for audit_in_mask() (Ankur Arora) [Orabug: 34586449]
  • audit: cache ctx->major in audit_filter_syscall() (Ankur Arora) [Orabug: 34586449]
    [5.4.17-2136.313.1]
  • video: vga16fb: Only probe for EGA and VGA 16 color graphic cards (Javier Martinez Canillas) [Orabug: 32301403]
  • KVM: arm: vgic: Only use the virtual state when userspace accesses enable bits (Marc Zyngier) [Orabug: 34542967]
  • uek-rpm: mips: enable CRYTPTO_USER config options (Dave Kleikamp) [Orabug: 34557309]

7 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H