A kernel security, bug fix, and enhancement update has been released for Oracle Linux 8.

El-errata: ELSA-2022-5564 Important: Oracle Linux 8 kernel security, bug fix, and enhancement update

Oracle Linux Security Advisory ELSA-2022-5564

  http://linux.oracle.com/errata/ELSA-2022-5564.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
bpftool-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-abi-stablelists-4.18.0-372.16.1.0.1.el8_6.noarch.rpm
kernel-core-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-cross-headers-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-debug-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-debug-core-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-debug-devel-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-debug-modules-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-debug-modules-extra-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-devel-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-doc-4.18.0-372.16.1.0.1.el8_6.noarch.rpm
kernel-headers-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-modules-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-modules-extra-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-tools-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-tools-libs-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
perf-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
python3-perf-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm
kernel-tools-libs-devel-4.18.0-372.16.1.0.1.el8_6.x86_64.rpm

aarch64:
bpftool-4.18.0-372.16.1.0.1.el8_6.aarch64.rpm
kernel-cross-headers-4.18.0-372.16.1.0.1.el8_6.aarch64.rpm
kernel-headers-4.18.0-372.16.1.0.1.el8_6.aarch64.rpm
kernel-tools-4.18.0-372.16.1.0.1.el8_6.aarch64.rpm
kernel-tools-libs-4.18.0-372.16.1.0.1.el8_6.aarch64.rpm
perf-4.18.0-372.16.1.0.1.el8_6.aarch64.rpm
python3-perf-4.18.0-372.16.1.0.1.el8_6.aarch64.rpm
kernel-tools-libs-devel-4.18.0-372.16.1.0.1.el8_6.aarch64.rpm

SRPMS:
  http://oss.oracle.com/ol8/SRPMS-updates/kernel-4.18.0-372.16.1.0.1.el8_6.src.rpm

Related CVEs:

CVE-2022-1729



Description of changes:

[4.18.0-372.16.1.0.1.el8_6.OL8]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 iov when iter_is_iovec(i) (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Prevent endless loops in gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix mmap + page fault deadlocks for buffered I/O (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate ip->i_gh (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Move the inode glock locking to gfs2_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix "Introduce flag for glock holder auto-demotion" (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Introduce flag for glock holder auto-demotion (Bob Peterson) [2092074 1955591]
- gfs2: fix scheduling while atomic bug in glocks (Bob Peterson) [2092074 1955591]
- gfs2: Clean up function may_grant (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Add wrapper for iomap_file_buffered_write (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Introduce fault_in_iov_iter_writeable (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Turn iov_iter_fault_in_readable into fault_in_iov_iter_readable (Andreas Gruenbacher) [2092074 1955591]
- gup: Turn fault_in_pages_{readable,writeable} into fault_in_{readable,writeable} (Andreas Gruenbacher) [2092074 1955591]
- powerpc/signal64: Don't opencode page prefaulting (Andreas Gruenbacher) [2092074 1955591]
- sanitize iov_iter_fault_in_readable() (Andreas Gruenbacher) [2092074 1955591]
- [xarray] iov_iter_fault_in_readable() should do nothing in xarray case (Andreas Gruenbacher) [2092074 1955591]
- powerpc/kvm: Fix kvm_use_magic_page (Andreas Gruenbacher) [2092074 1955591]
- iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Fix length of holes reported at end-of-file (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Remove redundant check from gfs2_glock_dq (Bob Peterson) [2092074 1955591]
- gfs2: release iopen glock early in evict (Bob Peterson) [2092074 1955591]
- mm: change fault_in_pages_* to have an unsigned size parameter (Andreas Gruenbacher) [2092074 1955591]
- gfs2: Eliminate vestigial HIF_FIRST (Bob Peterson) [2092074 1955591]
- iomap: remove the iomap arguments to ->page_{prepare,done} (Andreas Gruenbacher) [2092074 1955591]
- md: Set MD_BROKEN for RAID1 and RAID10 (Nigel Croxon) [2075075 2048954]
- raid5: introduce MD_BROKEN (Nigel Croxon) [2075075 2048954]
- drm/i915/ehl: Remove require_force_probe protection (Michel Dänzer) [2075567 2048674]
- genirq: Use rcu in kstat_irqs_usr() (Waiman Long) [2083308 2068445]
- dm integrity: fix memory corruption when tag_size is less than digest size (Benjamin Marzinski) [2082184 2081775]

_______________________________________________