Oracle Linux Security Advisory ELSA-2021-9460

https://linux.oracle.com/errata/ELSA-2021-9460.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

aarch64:
kernel-uek-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
kernel-uek-debug-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
kernel-uek-debug-devel-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
kernel-uek-devel-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
kernel-uek-tools-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
kernel-uek-tools-libs-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
kernel-uek-tools-libs-devel-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
perf-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
python-perf-4.14.35-2047.507.7.5.el7uek.aarch64.rpm
kernel-uek-headers-4.14.35-2047.507.7.5.el7uek.aarch64.rpm


SRPMS:
https://oss.oracle.com:443/ol7/SRPMS-updates/kernel-uek-4.14.35-2047.507.7.5.el7uek.src.rpm

Related CVEs:

CVE-2020-36322
CVE-2021-3679
CVE-2021-38160
CVE-2021-3655
CVE-2021-3573
CVE-2021-3564
CVE-2021-40490




Description of changes:

[4.14.35-2047.507.7.5.el7uek]
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa)  [Orabug: 33369947]  {CVE-2021-3573}
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma)  [Orabug: 33369947]
- Bluetooth: fix the erroneous flush_work() order (Lin Ma)  [Orabug: 33369947]  {CVE-2021-3564}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o)  [Orabug: 33369956]  {CVE-2021-40490}
- fuse: fix bad inode (Miklos Szeredi)  [Orabug: 33369955]  {CVE-2020-36322}
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo)  [Orabug: 33369954]  {CVE-2021-3679}
- virtio_console: Assure used length from device is limited (Xie Yongji)  [Orabug: 33369953]  {CVE-2021-38160}
- sctp: validate from_addr_param return (Marcelo Ricardo Leitner)  [Orabug: 33369952]  {CVE-2021-3655}


_______________________________________________
El-errata mailing list
El-errata@oss.oracle.com
https://oss.oracle.com/mailman/listinfo/el-errata