[El-errata] ELSA-2021-9039 Important: Oracle Linux Cloud Native Environment 1.1 Unbreakable Enterprise kernel-container security update

[Errata Announcements for Oracle Linux]

Oracle Linux Cloud Native Environment Security Advisory ELSA-2021-9039

http://linux.oracle.com/errata/ELSA-2021-9039.html

The following updated rpms for Oracle Linux Cloud Native Environment 1.1 
have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-container-4.14.35-2025.405.3.el7.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-container-4.14.35-2025.405.3.el7.src.rpm



Description of changes:

[4.14.35-2025.405.3.el7]
- Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan) [Orabug:
32426280]

[4.14.35-2025.405.2.el7]
- nfs: Fix security label length not being reset (Jeffrey Mitchell) [Orabug:
32350995]

[4.14.35-2025.405.1.el7]
- net/rds: Fix gfp_t parameter (Hans Westgaard Ry) [Orabug: 32372162]
- uek-rpm: update kABI lists for new symbol (Dan Duval) [Orabug: 32378208]
- sysctl: handle overflow in proc_get_long (Christian Brauner) [Orabug: 
32382641]
- net/mlx5: Use a single MSIX vector for all control EQs in VFs (Ariel 
Levkovich) [Orabug: 31785275]
- net/mlx5: Fix available EQs FW used to reserve (Denis Drozdov) 
[Orabug: 31785275]
- net/mlx5: Use max_num_eqs for calculation of required MSIX vectors 
(Denis Drozdov) [Orabug: 31785275]
- net/mlx5: Expose DEVX specification (Yishai Hadas) [Orabug: 31785275]
- x86/process: Mark cpu inactive before offlining (Mridula Shastry) 
[Orabug: 32245085]
- target: fix XCOPY NAA identifier lookup (David Disseldorp) [Orabug: 
32248040] {CVE-2020-28374}

[4.14.35-2025.405.0.el7]
- KVM: x86: clflushopt should be treated as a no-op by emulation (David 
Edmondson) [Orabug: 32251913]
- tty: Fix ->session locking (Jann Horn) [Orabug: 32266681] {CVE-2020-29660}
- tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn) [Orabug: 32266681] 
{CVE-2020-29660}
- lockd: don't use interval-based rebinding over TCP (Calum Mackay) 
[Orabug: 32337718]
- mwifiex: Fix possible buffer overflows in 
mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui) [Orabug: 32349207] 
{CVE-2020-36158}
- add license checking to kABI checker (Dan Duval) [Orabug: 32355210]