[El-errata] ELSA-2018-4288 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2018-4288

http://linux.oracle.com/errata/ELSA-2018-4288.html

The following updated rpms for Oracle Linux 7 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.22.4.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.22.4.el7uek.noarch.rpm
kernel-uek-4.1.12-124.22.4.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.22.4.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.22.4.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.22.4.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.22.4.el7uek.src.rpm



Description of changes:

[4.1.12-124.22.4.el7uek]
- Revert commit 8bd274934987 ("block: fix bdi vs gendisk lifetime 
mismatch") (Ashish Samant)  [Orabug: 28968102]
- KVM/x86: Add IBPB support (Ashok Raj)  [Orabug: 28703712]
- x86/intel/spectre_v2: Remove unnecessary retp_compiler() test (Boris 
Ostrovsky)  [Orabug: 28814570]
- x86/intel/spectre_v4: Deprecate spec_store_bypass_disable=userspace 
(Boris Ostrovsky)  [Orabug: 28814570]
- x86/speculation: x86_spec_ctrl_set needs to be called unconditionally 
(Boris Ostrovsky)  [Orabug: 28814570]
- x86/speculation: Drop unused DISABLE_IBRS_CLOBBER macro (Boris 
Ostrovsky)  [Orabug: 28814570]
- x86/intel/spectre_v4: Keep SPEC_CTRL_SSBD when IBRS is in use (Boris 
Ostrovsky)  [Orabug: 28814570]

[4.1.12-124.22.3.el7uek]
- net: net_failover: fix typo in net_failover_slave_register() (Liran 
Alon)  [Orabug: 28122104]
- virtio_net: Extend virtio to use VF datapath when available (Sridhar 
Samudrala)  [Orabug: 28122104]
- virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit (Sridhar 
Samudrala)  [Orabug: 28122104]
- net: Introduce net_failover driver (Sridhar Samudrala)  [Orabug: 
28122104]
- net: Introduce generic failover module (Sridhar Samudrala)  [Orabug: 
28122104]
- net: introduce lower state changed info structure for LAG lowers (Jiri 
Pirko)  [Orabug: 28122104]
- net: introduce change lower state notifier (Jiri Pirko)  [Orabug: 
28122104]
- net: add info struct for LAG changeupper (Jiri Pirko)  [Orabug: 28122104]
- net: add possibility to pass information about upper device via 
notifier (Jiri Pirko)  [Orabug: 28122104]
- net: Check CHANGEUPPER notifier return value (Ido Schimmel)  [Orabug: 
28122104]
- net: introduce change upper device notifier change info (Jiri Pirko) 
[Orabug: 28122104]
- x86/bugs: rework x86_spec_ctrl_set to make its changes explicit 
(Daniel Jordan)  [Orabug: 28271063]
- x86/bugs: rename ssbd_ibrs_selected to ssbd_userspace_selected (Daniel 
Jordan)  [Orabug: 28271063]
- x86/bugs: always use x86_spec_ctrl_base or _priv when setting spec 
ctrl MSR (Daniel Jordan)  [Orabug: 28271063]
- xen-blkfront: fix kernel panic with negotiate_mq error path (Manjunath 
Patil)  [Orabug: 28798861]
- scsi: lpfc: Correct MDS diag and nvmet configuration (James Smart) 
[Orabug: 28855939]
- scsi: virtio_scsi: let host do exception handling (Paolo Bonzini) 
[Orabug: 28856913]
- net/rds: Fix endless RNR situation (Venkat Venkatsubra)  [Orabug: 
28857027]
- scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() (Alexander 
Potapenko)  [Orabug: 28892656]  {CVE-2018-1000204}
- cdrom: fix improper type cast, which can leat to information leak. 
(Young_X)  [Orabug: 28929767]  {CVE-2018-16658} {CVE-2018-10940} 
{CVE-2018-18710}