-
Tue Dec 04 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.23.1.el7uek]
- xfs: don't call xfs_da_shrink_inode with NULL bp (Eric Sandeen) [Orabug: 28898616] {CVE-2018-13094}
- ALSA: rawmidi: Change resized buffers atomically (Takashi Iwai) [Orabug: 28898636] {CVE-2018-10902}
- md/raid5: fix a race condition in stripe batch (Shaohua Li) [Orabug: 28917012]
- xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE (Darrick J. Wong) [Orabug: 28924091] {CVE-2018-18690}
- certs: Add Oracle's new X509 cert into the kernel keyring (Eric Snowberg) [Orabug: 28926203]
- block: fix bdi vs gendisk lifetime mismatch (Shan Hai) [Orabug: 28945039]
- Add the following entries to 'uek-rpm/ol[67]/nano_modules.list': kernel/drivers/net/net_failover.ko kernel/net/core/failover.ko Fixes: b3bc7c163fc9 ('net: Introduce generic failover module') (Vijay Balakrishna) [Orabug: 28953351]
- floppy: Do not copy a kernel pointer to user memory in FDGETPRM ioctl (Andy Whitcroft) [Orabug: 28956547] {CVE-2018-7755} {CVE-2018-7755}
- iov_iter: don't revert iov buffer if csum error (Ding Tianhong) [Orabug: 28960296]
- crypto: salsa20 - fix blkcipher_walk API usage (Eric Biggers) [Orabug: 28976583] {CVE-2017-17805}
- crypto: hmac - require that the underlying hash algorithm is unkeyed (Eric Biggers) [Orabug: 28976653] {CVE-2017-17806}
-
Tue Nov 27 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.4.el7uek]
- Revert commit 8bd274934987 ("block: fix bdi vs gendisk lifetime mismatch") (Ashish Samant) [Orabug: 28968102]
- KVM/x86: Add IBPB support (Ashok Raj) [Orabug: 28703712]
- x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris Ostrovsky) [Orabug: 28814570]
- x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace (Boris Ostrovsky) [Orabug: 28814570]
- x86/speculation: x86_spec_ctrl_set needs to be called unconditionally (Boris Ostrovsky) [Orabug: 28814570]
- x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris Ostrovsky) [Orabug: 28814570]
- x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris Ostrovsky) [Orabug: 28814570]
-
Tue Nov 20 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.3.el7uek]
- net: net_failover: fix typo in net_failover_slave_register() (Liran Alon) [Orabug: 28122104]
- virtio_net: Extend virtio to use VF datapath when available (Sridhar Samudrala) [Orabug: 28122104]
- virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar Samudrala) [Orabug: 28122104]
- net: Introduce net_failover driver (Sridhar Samudrala) [Orabug: 28122104]
- net: Introduce generic failover module (Sridhar Samudrala) [Orabug: 28122104]
- net: introduce lower state changed info structure for LAG lowers (Jiri Pirko) [Orabug: 28122104]
- net: introduce change lower state notifier (Jiri Pirko) [Orabug: 28122104]
- net: add info struct for LAG changeupper (Jiri Pirko) [Orabug: 28122104]
- net: add possibility to pass information about upper device via notifier (Jiri Pirko) [Orabug: 28122104]
- net: Check CHANGEUPPER notifier return value (Ido Schimmel) [Orabug: 28122104]
- net: introduce change upper device notifier change info (Jiri Pirko) [Orabug: 28122104]
- x86/bugs: rework x86_spec_ctrl_set to make its changes explicit (Daniel Jordan) [Orabug: 28271063]
- x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel Jordan) [Orabug: 28271063]
- x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec ctrl MSR (Daniel Jordan) [Orabug: 28271063]
- xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath Patil) [Orabug: 28798861]
- scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart) [Orabug: 28855939]
- scsi: virtio_scsi: let host do exception handling (Paolo Bonzini) [Orabug: 28856913]
- net/rds: Fix endless RNR situation (Venkat Venkatsubra) [Orabug: 28857027]
- scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander Potapenko) [Orabug: 28892656] {CVE-2018-1000204}
- cdrom: fix improper type cast, which can leat to information leak. (Young_X) [Orabug: 28929767] {CVE-2018-16658} {CVE-2018-10940} {CVE-2018-18710}
-
Wed Nov 14 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.2.el7uek]
- oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen) [Orabug: 28650922]
- oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen) [Orabug: 28650922]
- KVM: MTRR: remove MSR 0x2f8 (Andy Honig) [Orabug: 23276795] {CVE-2016-3713} {CVE-2016-3713}
- x86/cpu/amd: Limit cpu_core_id fixup to families older than F17h (Suravee Suthikulpanit) [Orabug: 28783929]
- x86/CPU/AMD: Fix Bulldozer topology (Borislav Petkov) [Orabug: 28783929]
- x86/cpu/AMD: Clean up cpu_llc_id assignment per topology feature (Yazen Ghannam) [Orabug: 28783929]
- x86/cpu: Get rid of compute_unit_id (Borislav Petkov) [Orabug: 28783929]
- x86/topology: Fix AMD core count (Peter Zijlstra) [Orabug: 28783929]
- perf/x86/amd: Move nodes_per_socket into bsp_init_amd() (Huang Rui) [Orabug: 28783929]
- x86/cpu/amd: Give access to the number of nodes in a physical package (Aravind Gopalakrishnan) [Orabug: 28783929]
- ocfs2: should wait dio before inode lock in ocfs2_setattr() (alex chen) [Orabug: 28852806] {CVE-2017-18204}
- Update dracut version requirement within the kernel (Jie Li) [Orabug: 28873097]
-
Thu Nov 08 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.22.1.el7uek]
- secureboot: update UEFI public keys in kernel rpms (Brian Maly) [Orabug: 28901191]
-
Tue Nov 06 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.21.1.el7uek]
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:447! (Mike Kravetz) [Orabug: 28839992]
- scsi: libsas: fix memory leak in sas_smp_get_phy_events() (Jason Yan) [Orabug: 27927687] {CVE-2018-7757}
- KVM: vmx: shadow more fields that are read/written on every vmexits (Paolo Bonzini) [Orabug: 28581045]
- vhost/scsi: Use common handling code in request queue handler (Bijan Mottahedeh) [Orabug: 28775573]
- vhost/scsi: Extract common handling code from control queue handler (Bijan Mottahedeh) [Orabug: 28775573]
- vhost/scsi: Respond to control queue operations (Bijan Mottahedeh) [Orabug: 28775573]
-
Tue Oct 30 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.8.el7uek]
- scsi: lpfc: devloss timeout race condition caused null pointer reference (James Smart) [Orabug: 27994179]
- scsi: qla2xxx: Fix race condition between iocb timeout and initialisation (Ben Hutchings) [Orabug: 28013813]
- i40e: Add programming descriptors to cleaned_count (Alexander Duyck) [Orabug: 28228724]
- i40e: Fix memory leak related filter programming status (Alexander Duyck) [Orabug: 28228724]
- xen-swiotlb: use actually allocated size on check physical continuous (Joe Jin) [Orabug: 28258102]
- Revert "Revert "xen-swiotlb: fix the check condition for xen_swiotlb_free_coherent"" (Dongli Zhang) [Orabug: 28258102]
- net/mlx4_en: fix potential use-after-free with dma_unmap_page (Sarah Newman) [Orabug: 28376051]
- ocfs2: fix ocfs2 read block panic (Junxiao Bi) [Orabug: 28580543]
- block: fix bdi vs gendisk lifetime mismatch (Dan Williams) [Orabug: 28645416]
- e1000e: Fix link check race condition (Benjamin Poirier) [Orabug: 28716958]
- Revert "e1000e: Separate signaling for link check/link up" (Benjamin Poirier) [Orabug: 28716958]
- e1000e: Avoid missed interrupts following ICR read (Benjamin Poirier) [Orabug: 28716958]
- e1000e: Fix queue interrupt re-raising in Other interrupt (Benjamin Poirier) [Orabug: 28716958]
- Partial revert "e1000e: Avoid receiver overrun interrupt bursts" (Benjamin Poirier) [Orabug: 28716958]
- e1000e: Remove Other from EIAC (Benjamin Poirier) [Orabug: 28716958]
- Fix error code in nfs_lookup_verify_inode() (Lance Shelton) [Orabug: 28789030]
- workqueue: Allow modifying low level unbound workqueue cpumask (Lai Jiangshan) [Orabug: 28813166]
- workqueue: Create low-level unbound workqueues cpumask (Frederic Weisbecker) [Orabug: 28813166]
- scsi: sg: mitigate read/write abuse (Jann Horn) [Orabug: 28824718] {CVE-2017-13168}
-
Wed Oct 24 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.7.el7uek]
- Revert "rds: RDS (tcp) hangs on sendto() to unresponding address" (Brian Maly) [Orabug: 28837953]
-
Tue Oct 23 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.6.el7uek]
- x86/speculation: Retpoline should always be available on Skylake (Alexandre Chartre) [Orabug: 28801831]
-
Mon Oct 22 2018 Brian Maly <brian.maly@oracle.com> [4.1.12-124.20.5.el7uek]
- x86/speculation: Add sysfs entry to enable/disable retpoline (Alexandre Chartre) [Orabug: 28607548]
- x86/speculation: Switch to IBRS when loading a non-retpoline module (Alexandre Chartre) [Orabug: 28607548]
- x86/speculation: Remove unnecessary retpoline alternatives (Alexandre Chartre) [Orabug: 28607548]
- x86/speculation: Use static key to enable/disable retpoline (Alexandre Chartre) [Orabug: 28607548]
- locking/static_keys: Provide DECLARE and well as DEFINE macros (Tony Luck) [Orabug: 28607548]
- jump_label: remove bug.h, atomic.h dependencies for HAVE_JUMP_LABEL (Jason Baron) [Orabug: 28607548]
- locking/static_key: Fix concurrent static_key_slow_inc() (Paolo Bonzini) [Orabug: 28607548]
- jump_label: make static_key_enabled() work on static_key_true/false types too (Tejun Heo) [Orabug: 28607548]
- locking/static_keys: Fix up the static keys documentation (Jonathan Corbet) [Orabug: 28607548]
- locking/static_keys: Fix a silly typo (Jonathan Corbet) [Orabug: 28607548]
- jump label, locking/static_keys: Update docs (Jason Baron) [Orabug: 28607548]
- x86/asm: Add asm macros for static keys/jump labels (Andy Lutomirski) [Orabug: 28607548]
- x86/asm: Error out if asm/jump_label.h is included inappropriately (Andy Lutomirski) [Orabug: 28607548]
- jump_label/x86: Work around asm build bug on older/backported GCCs (Peter Zijlstra) [Orabug: 28607548]
- locking/static_keys: Add a new static_key interface (Peter Zijlstra) [Orabug: 28607548]
- locking/static_keys: Rework update logic (Peter Zijlstra) [Orabug: 28607548]
- jump_label: Add jump_entry_key() helper (Peter Zijlstra) [Orabug: 28607548]
- jump_label, locking/static_keys: Rename JUMP_LABEL_TYPE_* and related helpers to the static_key* pattern (Peter Zijlstra) [Orabug: 28607548]
- jump_label: Rename JUMP_LABEL_{EN,DIS}ABLE to JUMP_LABEL_{JMP,NOP} (Peter Zijlstra) [Orabug: 28607548]
- module, jump_label: Fix module locking (Peter Zijlstra) [Orabug: 28607548]
- x86/speculation: Protect against userspace-userspace spectreRSB (Jiri Kosina) [Orabug: 28631590] {CVE-2018-15572}
- x86/spectre_v2: Remove remaining references to lfence mitigation (Alejandro Jimenez) [Orabug: 28631590] {CVE-2018-15572}
- Revert "md: allow a partially recovered device to be hot-added to an array." (NeilBrown) [Orabug: 28702623]
- x86/bugs: ssbd_ibrs_selected called prematurely (Daniel Jordan) [Orabug: 28788839]
- net/mlx4_core: print firmware version during driver loading (Qing Huang) [Orabug: 28809377]
- mm: numa: Do not trap faults on shared data section pages. (Henry Willard) [Orabug: 28814880]
- hugetlbfs: dirty pages as they are added to pagecache (Mike Kravetz) [Orabug: 28813968]