[El-errata] ELSA-2021-9534 Important: Oracle Linux 7 Unbreakable Enterprise kernel security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2021-9534

http://linux.oracle.com/errata/ELSA-2021-9534.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-doc-4.1.12-124.57.1.el7uek.noarch.rpm
kernel-uek-firmware-4.1.12-124.57.1.el7uek.noarch.rpm
kernel-uek-4.1.12-124.57.1.el7uek.x86_64.rpm
kernel-uek-devel-4.1.12-124.57.1.el7uek.x86_64.rpm
kernel-uek-debug-4.1.12-124.57.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.1.12-124.57.1.el7uek.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-4.1.12-124.57.1.el7uek.src.rpm

Related CVEs:

CVE-2018-1000026
CVE-2019-10207
CVE-2019-19813
CVE-2021-3564




Description of changes:

[4.1.12-124.57.1.el7uek]
- target; fix print statement warning (John Donnelly)  [Orabug: 33495661]
- enic;: fix warning on module_param disable_vlan0, (John Donnelly)  [Orabug: 33495661]
- bnx2fc: correct BNX2FC_TM_TIMEOUT to be 60 sec (John Donnelly)  [Orabug: 33495661]
- target: Fix linux-4.1.y specific compile warning (Nicholas Bellinger)  [Orabug: 33495661]
- net/mlx4: Fixing warning in mlx4_get_module_info() (John Donnelly)  [Orabug: 33495661]
- rds: Avoid compiler warning in ib_send.c: opcode (John Donnelly)  [Orabug: 33495661]
- RDMA/mad: correct build warning (John Donnelly)  [Orabug: 33495661]
- dtrace: Fix warning in dtrace_sync() (Tomas Jedlicka)  [Orabug: 33495661]
- virtio: Silence uninitialized variable warning (Dan Carpenter)  [Orabug: 33495661]
- scsi: correct uninitialized variable (John Donnelly)  [Orabug: 33495661]
- media: smsusb: better handle optional alignment (Mauro Carvalho Chehab)  [Orabug: 33495661]
- media: usb: siano: Fix false-positive "uninitialized variable" warning (Alan Stern)  [Orabug: 33495661]
- toshiba_acpi: correct build warning (John Donnelly)  [Orabug: 33495661]
- RDS/IB: corrects build warning (John Donnelly)  [Orabug: 33495661]
- x86/mce: correct return warning (John Donnelly)  [Orabug: 33495661]
- x86/asm/msr: Make wrmsrl_safe() a function (Andy Lutomirski)  [Orabug: 33495661]
- x86/mitigations: fix warnings in taa_select_mitigation() (John Donnelly)  [Orabug: 33495661]
- mm: correct build warning with pgprot (John Donnelly)  [Orabug: 33495661]
- Thermal: remove unused variable (John Donnelly)  [Orabug: 33495661]
- ixgbe: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]
- i40e: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]
- mlx4: remove unused variables and functions, (John Donnelly)  [Orabug: 33495661]
- nvme: remove unused variables and functions (John Donnelly)  [Orabug: 33495661]
- ocfs2: remove unused function: ocfs2_prepare_inode_for_refcount() (John Donnelly)  [Orabug: 33495661]
- ipv6: remove unused variable: payload_len (John Donnelly)  [Orabug: 33495661]
- Revert "efi: Fix out-of-bounds read in variable_matches()" (John Donnelly)  [Orabug: 33495661]
- dtrace: remove unused variable "iph" (John Donnelly)  [Orabug: 33495661]
- ext4: remove unused function ext4_init_inode_bitmap() (John Donnelly)  [Orabug: 33495661]
- cpuidle: remove unused function: call_cpuidle() (John Donnelly)  [Orabug: 33495661]
- cifs: remove unused label (John Donnelly)  [Orabug: 33495661]
- block: remove unused out: label (John Donnelly)  [Orabug: 33495661]
- Bluetooth: hci_uart: check for missing tty operations (Vladis Dronov)  [Orabug: 30244627]  {CVE-2019-10207} {CVE-2019-10207}
- Bluetooth: hci_uart: Add basic support for Intel Lightning Peak devices (Loic Poulain)  [Orabug: 30244627]  {CVE-2019-10207}
- Bluetooth: hci_uart: Add new line discipline enhancements (Ilya Faenson)  [Orabug: 30244627]  {CVE-2019-10207}
- Bluetooth: hci_uart: Support operational speed during setup (Frederic Danis)  [Orabug: 30244627]  {CVE-2019-10207}

[4.1.12-124.56.2.el7uek]
- btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)  [Orabug: 31864610]  {CVE-2019-19813}
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference (Qu Wenruo)  [Orabug: 31864610]  {CVE-2019-19813}
- net: create skb_gso_validate_mac_len() (Daniel Axtens)  [Orabug: 28094432]  {CVE-2018-1000026}
- bnx2x: disable GSO where gso_size is too big for hardware (Daniel Axtens)  [Orabug: 28094432]  {CVE-2018-1000026}
- Bluetooth: fix the erroneous flush_work() order (Lin Ma)  [Orabug: 33014035]  {CVE-2021-3564} {CVE-2021-3564}
- l2tp: Avoid schedule while atomic in exit_net (Ridge Kennedy)  [Orabug: 33360013]
- l2tp: remove skb_dst_set() from l2tp_xmit_skb() (Xin Long)  [Orabug: 33360013]
- dtrace: remove unused variables (John Donnelly)  [Orabug: 33387203]
- scsi: treat lun as 64-bit in scsi_report_lun_scan() error message (Henry Willard)  [Orabug: 33387203]