Synopsis:          Important: kernel security, bug fix, and enhancement update
Advisory ID:       SLSA-2020:0834-1
Issue Date:        2020-03-17
CVE Numbers:       CVE-2019-11487
                   CVE-2019-17666
                   CVE-2019-19338
--

Security Fix(es):

* kernel: Count overflow in FUSE request leading to use-after-free issues.
(CVE-2019-11487)

* kernel: rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in
the Linux kernel lacks a certain upper-bound check, leading to a buffer
overflow (CVE-2019-17666)

* Kernel: KVM: export MSR_IA32_TSX_CTRL to guest - incomplete fix for TAA
(CVE-2019-11135) (CVE-2019-19338)

Bug Fix(es):

* SL7.7 - default idle mishandles lazy irq state

* Sanitize MM backported code for SL7

* A bio with a flush and write to an md device can be lost and never
complete by the md layer

* [FJ7.7 Bug]: [REG] Read from /proc/net/if_inet6 never stop.

* SL7.7 - zfcp: fix reaction on bit error threshold notification

* SL7.7 Snapshot3 - Kernel Panic when running LTP mm test on s390x

* Leak in cachefiles driver

* VFS: Busy inodes after unmount of loop0 when encountering duplicate
directory inodes

* Allocation failure in md's r10buf_pool_alloc function leads to a crash
from accessing uninitialized pointers
* [Hyper-V][SL7.6]Hyper-V guest waiting indefinitely for RCU callback when
removing a mem cgroup

* A bnx2fc abort attempt doesn't timeout from miscalculation causing a
huge timeout value

* scsi: libiscsi: fall back to sendmsg for slab pages

* SL7.7 - kernel: avoid cpu yield in SMT environment

* SL7.6 - kernel: jump label transformation performance

* drm radeon power management warning on VERDE cards

* Duplicate enum value in include/linux/blk_types.h

* [HPE 7.7 Bug] hpsa: bug fix for reset issue

* System Crash on vport creation (NPIV on FCoE)

* [Hyper-V][SL 7.8] Four Mellanox Patches needed for kernels that have
that have SRIOV

* WARNING: CPU: 7 PID: 2049 at mm/slub.c:2296 ___slab_alloc+0x508/0x520

* fio with ioengine=pmemblk on fsdax failed

* [HPE 7.7 Bug] hpsa: bug fixes

* perf top -p PID does not show anything

* Delay in RT task scheduled. Incorrect nr_scheduled value.

* A directory on a gfs2 filesystem appears corrupt on nodeB after nodeA
renames the directory

* ixgbevf interface goes down on hypervisor and causes outage

* Can't enable virt-ssbd on some AMD hosts

* [HPEMC 7.8 BUG] x86/boot/64: Avoid mapping reserved ranges in early page
tables

Enhancement(s):

* scsi: qla2xxx: Fix panic in qla_dfs_tgt_counters_show'
--

SL7
  x86_64
    bpftool-3.10.0-1062.18.1.el7.x86_64.rpm
    bpftool-debuginfo-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-debug-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-debug-debuginfo-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-debug-devel-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-debuginfo-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-debuginfo-common-x86_64-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-devel-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-headers-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-tools-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-tools-debuginfo-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-tools-libs-3.10.0-1062.18.1.el7.x86_64.rpm
    perf-3.10.0-1062.18.1.el7.x86_64.rpm
    perf-debuginfo-3.10.0-1062.18.1.el7.x86_64.rpm
    python-perf-3.10.0-1062.18.1.el7.x86_64.rpm
    python-perf-debuginfo-3.10.0-1062.18.1.el7.x86_64.rpm
    kernel-tools-libs-devel-3.10.0-1062.18.1.el7.x86_64.rpm
  noarch
    kernel-abi-whitelists-3.10.0-1062.18.1.el7.noarch.rpm
    kernel-doc-3.10.0-1062.18.1.el7.noarch.rpm

- Scientific Linux Development Team