The following kernel updates has been released for Oracle Linux:

ELSA-2018-4084 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update
ELSA-2018-4084 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

ELSA-2018-4084 Important: Oracle Linux 6 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4084

http://linux.oracle.com/errata/ELSA-2018-4084.html

The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.14.2.el6uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.14.2.el6uek.noarch.rpm
kernel-uek-4.1.12-124.14.2.el6uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.14.2.el6uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.14.2.el6uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.14.2.el6uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/kernel-uek-4.1.12-124.14.2.el6uek.src.rpm



Description of changes:

[4.1.12-124.14.2.el6uek]
- scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled
(Jianchao Wang) [Orabug: 27726302]
- block: fix bio_will_gap() for first bvec with offset (Ming Lei)
[Orabug: 27775588]
- block: relax check on sg gap (Ming Lei) [Orabug: 27775588]
- block: don't optimize for non-cloned bio in bio_get_last_bvec() (Ming
Lei) [Orabug: 27775588]
- block: merge: get the 1st and last bvec via helpers (Ming Lei)
[Orabug: 27775588]
- block: get the 1st and last bvec via helpers (Ming Lei) [Orabug:
27775588]
- block: check virt boundary in bio_will_gap() (Ming Lei) [Orabug:
27775588]
- block: bio: introduce helpers to get the 1st and last bvec (Ming Lei)
[Orabug: 27775588]
- Failing to send a CLOSE if file is opened WRONLY and server reboots on
a 4.x mount (Olga Kornievskaia) [Orabug: 27848303]
- ext4: add validity checks for bitmap block numbers (Theodore Ts'o)
[Orabug: 27854373] {CVE-2018-1093} {CVE-2018-1093}
- ocfs2: Take inode cluster lock before moving reflinked inode from
orphan dir (Ashish Samant) [Orabug: 27869411]
- Input: gtco - fix potential out-of-bound access (Dmitry Torokhov)
[Orabug: 27869844] {CVE-2017-16643}
- Input: ims-psu - check if CDC union descriptor is sane (Dmitry
Torokhov) [Orabug: 27870333] {CVE-2017-16645}
- vfio/pci: Virtualize Maximum Payload Size (Alex Williamson)
- vfio-pci: Virtualize PCIe & AF FLR (Alex Williamson)
- uek-rpm: Disable DMA CMA (Jianchao Wang) [Orabug: 27892359]
- nvme-pci: fix multiple ctrl removal scheduling (Rakesh Pandit)
[Orabug: 27892359]
- nvme-pci: Fix nvme queue cleanup if IRQ setup fails (Jianchao Wang)
[Orabug: 27892359]
- nvme/pci: Fix stuck nvme reset (Keith Busch) [Orabug: 27892359]
- nvme: don't schedule multiple resets (Keith Busch) [Orabug: 27892359]
- blk-mq: fix use-after-free in blk_mq_free_tag_set() (Junichi Nomura)
[Orabug: 27892359]
- USB: core: prevent malicious bNumInterfaces overflow (Alan Stern)
[Orabug: 27895909]
- driver core: platform: fix race condition with driver_override (Adrian
Salido) [Orabug: 27897874] {CVE-2017-12146}
- usb/core: usb_alloc_dev(): fix setting of ->portnum (Nicolai Stange)
[Orabug: 27908746]

ELSA-2018-4084 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

Oracle Linux Security Advisory ELSA-2018-4084

http://linux.oracle.com/errata/ELSA-2018-4084.html

The following updated rpms for Oracle Linux 7 have been uploaded to the
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.14.2.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.14.2.el7uek.noarch.rpm
kernel-uek-4.1.12-124.14.2.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.14.2.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.14.2.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.14.2.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.14.2.el7uek.src.rpm



Description of changes:

[4.1.12-124.14.2.el7uek]
- scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled
(Jianchao Wang) [Orabug: 27726302]
- block: fix bio_will_gap() for first bvec with offset (Ming Lei)
[Orabug: 27775588]
- block: relax check on sg gap (Ming Lei) [Orabug: 27775588]
- block: don't optimize for non-cloned bio in bio_get_last_bvec() (Ming
Lei) [Orabug: 27775588]
- block: merge: get the 1st and last bvec via helpers (Ming Lei)
[Orabug: 27775588]
- block: get the 1st and last bvec via helpers (Ming Lei) [Orabug:
27775588]
- block: check virt boundary in bio_will_gap() (Ming Lei) [Orabug:
27775588]
- block: bio: introduce helpers to get the 1st and last bvec (Ming Lei)
[Orabug: 27775588]
- Failing to send a CLOSE if file is opened WRONLY and server reboots on
a 4.x mount (Olga Kornievskaia) [Orabug: 27848303]
- ext4: add validity checks for bitmap block numbers (Theodore Ts'o)
[Orabug: 27854373] {CVE-2018-1093} {CVE-2018-1093}
- ocfs2: Take inode cluster lock before moving reflinked inode from
orphan dir (Ashish Samant) [Orabug: 27869411]
- Input: gtco - fix potential out-of-bound access (Dmitry Torokhov)
[Orabug: 27869844] {CVE-2017-16643}
- Input: ims-psu - check if CDC union descriptor is sane (Dmitry
Torokhov) [Orabug: 27870333] {CVE-2017-16645}
- vfio/pci: Virtualize Maximum Payload Size (Alex Williamson)
- vfio-pci: Virtualize PCIe & AF FLR (Alex Williamson)
- uek-rpm: Disable DMA CMA (Jianchao Wang) [Orabug: 27892359]
- nvme-pci: fix multiple ctrl removal scheduling (Rakesh Pandit)
[Orabug: 27892359]
- nvme-pci: Fix nvme queue cleanup if IRQ setup fails (Jianchao Wang)
[Orabug: 27892359]
- nvme/pci: Fix stuck nvme reset (Keith Busch) [Orabug: 27892359]
- nvme: don't schedule multiple resets (Keith Busch) [Orabug: 27892359]
- blk-mq: fix use-after-free in blk_mq_free_tag_set() (Junichi Nomura)
[Orabug: 27892359]
- USB: core: prevent malicious bNumInterfaces overflow (Alan Stern)
[Orabug: 27895909]
- driver core: platform: fix race condition with driver_override (Adrian
Salido) [Orabug: 27897874] {CVE-2017-12146}
- usb/core: usb_alloc_dev(): fix setting of ->portnum (Nicolai Stange)
[Orabug: 27908746]