An Unbreakable Enterprise kernel security update has been released for Oracle Linux 7.

Oracle Linux Security Advisory ELSA-2020-5541

  http://linux.oracle.com/errata/ELSA-2020-5541.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.36.3.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.36.3.el7uek.noarch.rpm
kernel-uek-4.1.12-124.36.3.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.36.3.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.36.3.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.36.3.el7uek.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.36.3.el7uek.src.rpm


Description of changes:

[4.1.12-124.36.3.el7uek]
- Fix KABI error by keeping the struct field being removed by the below
patch (Ritika Srivastava) [Orabug: 30902926] - Revert "PCI: Check pref
compatible bit for mem64 resource of PCIe device" (Ritika Srivastava)
[Orabug: 30902926]

[4.1.12-124.36.2.el7uek]
- rds: Use bitmap to designate dropped connections (Håkon Bugge)
[Orabug: 30868399] - rds: Avoid flushing MRs in rds_rdma_drop_keys (aru
kolappan) [Orabug: 29797476] - CIFS: fix POSIX lock leak and invalid ptr
deref (Aurelien Aptel) [Orabug: 30399972] - mwifiex: Fix heap overflow
in mmwifiex_process_tdls_action_frame() (qize wang) [Orabug: 30819439]
{CVE-2019-14901}
- media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum) [Orabug:
30864533] {CVE-2019-15291}
- rds: prevent use-after-free of rds conn in rds_send_drop_to() (Sharath
Srinivasan) [Orabug: 30865080] - KVM: vmx: use MSR_IA32_TSX_CTRL to
hard-disable TSX on guest that lack it (Paolo Bonzini) [Orabug:
30867886] - KVM: vmx: implement MSR_IA32_TSX_CTRL disable RTM
functionality (Paolo Bonzini) [Orabug: 30867886] - KVM: x86: implement
MSR_IA32_TSX_CTRL effect on CPUID (Paolo Bonzini) [Orabug: 30867886] -
KVM: x86: do not modify masked bits of shared MSRs (Paolo Bonzini)
[Orabug: 30867886] - KVM: x86: fix presentation of TSX feature in
ARCH_CAPABILITIES (Paolo Bonzini) [Orabug: 30867886] - slub: do not
sanity check if SLAB_DEBUG_FREE is not set (Dongli Zhang) [Orabug:
30903145] - slub: extend slub debug to handle multiple slabs (Aaron
Tomlin) [Orabug: 30903145] - Fix kmalloc slab creation sequence
(Christoph Lameter) [Orabug: 30903145] - slab: correct size_index table
before replacing the bootstrap kmem_cache_node (Daniel Sanders) [Orabug:
30903145] - mm/slab_common: support the slub_debug boot option on
specific object size (Gavin Guo) [Orabug: 30903145]


_______________________________________________