A kernel security, bug fix, and enhancement update has been released for Oracle Linux 8.

El-errata: ELSA-2021-3548 Moderate: Oracle Linux 8 kernel security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2021-3548

  http://linux.oracle.com/errata/ELSA-2021-3548.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-abi-stablelists-4.18.0-305.19.1.el8_4.noarch.rpm
kernel-core-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-cross-headers-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-debug-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-debug-core-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-debug-devel-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-debug-modules-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-debug-modules-extra-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-devel-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-doc-4.18.0-305.19.1.el8_4.noarch.rpm
kernel-headers-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-modules-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-modules-extra-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-tools-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-tools-libs-4.18.0-305.19.1.el8_4.x86_64.rpm
perf-4.18.0-305.19.1.el8_4.x86_64.rpm
python3-perf-4.18.0-305.19.1.el8_4.x86_64.rpm
kernel-tools-libs-devel-4.18.0-305.19.1.el8_4.x86_64.rpm

aarch64:
bpftool-4.18.0-305.19.1.el8_4.aarch64.rpm
kernel-headers-4.18.0-305.19.1.el8_4.aarch64.rpm
kernel-tools-4.18.0-305.19.1.el8_4.aarch64.rpm
kernel-tools-libs-4.18.0-305.19.1.el8_4.aarch64.rpm
perf-4.18.0-305.19.1.el8_4.aarch64.rpm
python3-perf-4.18.0-305.19.1.el8_4.aarch64.rpm
kernel-tools-libs-devel-4.18.0-305.19.1.el8_4.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-305.19.1.el8_4.src.rpm

Related CVEs:

CVE-2021-3653



Description of changes:

[4.18.0-305.19.1.el8_4.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 count math in tty_reopen() (Waiman Long) [1997999 1968271]
- tty: Don't block on IO when ldisc change is pending (Waiman Long) [1997999 1968271]
- tty: Hold tty_ldisc_lock() during tty_reopen() (Waiman Long) [1997999 1968271]
- tty: Drop tty->count on tty_reopen() failure (Waiman Long) [1997999 1968271]
- [s390] s390/vtime: fix increased steal time accounting (Claudio Imbrenda) [1988386 1963075]
- XArray: Fix splitting to non-zero orders (Chris von Recklinghausen) [1997997 1946304]
- XArray: Fix split documentation (Chris von Recklinghausen) [1997997 1946304]
- ima: extend boot_aggregate with kernel measurements (Bruno Meneguele) [1997766 1977422]
- ceph: reduce contention in ceph_check_delayed_caps() (Jeff Layton) [1995862 1953430]
- ice: Stop processing VF messages during teardown (Ken Cox) [1997538 1986451]
- iavf: Set RSS LUT and key in reset handle path (Ken Cox) [1997536 1910853]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985412 1985413] {CVE-2021-3653}
- scsi: ibmvfc: Fix potential race in ibmvfc_wait_for_ops() (Steve Best) [1969792 1941180]
- [s390] s390/dasd: add missing discipline function (Claudio Imbrenda) [1995206 1981804]
- serial_core: switch to ->[sg]et_serial() (Artem Savkov) [1993872 1952415]
- net/mlx5e: Fix mapping of ct_label zero (Jan Stancek) [1983681 1915308]
- drm/qxl: add lock asserts to qxl_bo_vmap_locked + qxl_bo_vunmap_locked (Lyude Paul) [1992839 1907341]
- drm/qxl: rework cursor plane (Lyude Paul) [1992839 1907341]
- drm/qxl: move shadow handling to new qxl_prepare_shadow() (Lyude Paul) [1992839 1907341]
- drm/qxl: fix monitors object vmap (Lyude Paul) [1992839 1907341]
- drm/qxl: fix prime vmap (Lyude Paul) [1992839 1907341]
- drm/qxl: rename qxl_bo_kmap -> qxl_bo_vmap_locked (Lyude Paul) [1992839 1907341]
- drm/qxl: fix lockdep issue in qxl_alloc_release_reserved (Lyude Paul) [1992839 1907341]
- drm/qxl: use ttm bo priorities (Lyude Paul) [1992839 1907341]
- drm/qxl: more fence wait rework (Lyude Paul) [1992839 1907341]
- drm/qxl: properly handle device init failures (Lyude Paul) [1992839 1907341]
- drm/qxl: allocate dumb buffers in ram (Lyude Paul) [1992839 1907341]
- drm/qxl: simplify qxl_fence_wait (Lyude Paul) [1992839 1907341]
- drm/qxl: properly free qxl releases (Lyude Paul) [1992839 1907341]
- drm/qxl: handle shadow in primary destroy (Lyude Paul) [1992839 1907341]
- drm/qxl: properly pin/unpin shadow (Lyude Paul) [1992839 1907341]
- drm/qxl: release shadow on shutdown (Lyude Paul) [1992839 1907341]
- drm/qxl: unpin release objects (Lyude Paul) [1992839 1907341]
- drm/qxl: use drmm_mode_config_init (Lyude Paul) [1992839 1907341]
- qxl/ttm: drop the unusued no wait flag to reserve function (Lyude Paul) [1992839 1907341]