[El-errata] ELBA-2023-12729 Oracle Linux 7 Unbreakable Enterprise kernel bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2023-12729

http://linux.oracle.com/errata/ELBA-2023-12729.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-4.14.35-2047.528.2.1.el7uek.x86_64.rpm
kernel-uek-debug-4.14.35-2047.528.2.1.el7uek.x86_64.rpm
kernel-uek-debug-devel-4.14.35-2047.528.2.1.el7uek.x86_64.rpm
kernel-uek-devel-4.14.35-2047.528.2.1.el7uek.x86_64.rpm
kernel-uek-tools-4.14.35-2047.528.2.1.el7uek.x86_64.rpm
kernel-uek-doc-4.14.35-2047.528.2.1.el7uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates//kernel-uek-4.14.35-2047.528.2.1.el7uek.src.rpm



Description of changes:

[4.14.35-2047.528.2.1.el7uek]
- uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35698204]
- x86/microcode/AMD: Clean up per-family patch size checks (Borislav Petkov)  [Orabug: 35698200]
- Revert "sched/fair: sanitize vruntime of entity being placed" (Saeed Mirzamohammadi)  [Orabug: 35698196]
- Revert "sched/fair: Sanitize vruntime of entity being migrated" (Saeed Mirzamohammadi)  [Orabug: 35698196]
- uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35698191]

[4.14.35-2047.528.2.el7uek]
- uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang)  [Orabug: 35616811]

[4.14.35-2047.528.1.el7uek]
- LTS version: v4.14.320 (Saeed Mirzamohammadi) 
- i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang) 
- x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) 
- drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li) 
- drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li) 
- drm/exynos: vidi: fix a wrong error return (Inki Dae) 
- s390/cio: unregister device when the only path is gone (Vineeth Vijayan) 
- usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter) 
- fbdev: imsttfb: Release framebuffer and dealloc cmap on error path (Helge Deller) 
- nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad) 
- arm64: Add missing Set/Way CMO encodings (Marc Zyngier) 
- HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev) 
- scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi) 
- netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso) 
- be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall) 
- mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov) 
- mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov) 
- mmc: omap: fix deferred probing (Sergey Shtylyov) 
- mmc: mtk-sd: fix deferred probing (Sergey Shtylyov) 
- net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren) 
- xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior) 
- nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi) 
- cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) 
- Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley) 
- nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi) 
- nilfs2: reject devices with insufficient block count (Ryusuke Konishi) 
- serial: lantiq: add missing interrupt ack (Bernhard Seibold) 
- LTS version: v4.14.319 (Saeed Mirzamohammadi) 
- mmc: block: ensure error propagation for non-blk (Christian Loehle) 
- powerpc: Fix defconfig choice logic when cross compiling (Michael Ellerman) 
- neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) 
- neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui) 
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei) 
- net: tipc: resize nlattr array to correct size (Lin Ma) 
- net: lapbether: only support ethernet devices (Eric Dumazet) 
- drm/nouveau/dp: check for NULL nv_connector->native_mode (Natalia Petrova) 
- igb: fix nvm.ops.read() error handling (Aleksandr Loktionov) 
- sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter) 
- IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel) 
- IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel) 
- IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel) 
- ping6: Fix send to link-local addresses with VRF. (Guillaume Nault) 
- netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso) 
- USB: serial: option: add Quectel EM061KGL series (Jerry Meng) 
- Remove DECnet support from kernel (Stephen Hemminger) 
- net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang) 
- nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi) 
- nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi) 
- nios2: dts: Fix tse_mac "max-frame-size" property (Janne Grunau) 
- ocfs2: check new file size on fallocate call (Luis Henriques) 
- ocfs2: fix use-after-free when unmounting read-only filesystem (Luis Henriques) 
- xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall) 
- mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau) 
- MIPS: Alchemy: fix dbdma2 (Manuel Lauss) 
- power: supply: Fix logic checking if system is running from battery (Mario Limonciello) 
- regulator: Fix error checking for debugfs_create_dir (Osama Muhammad) 
- power: supply: Ratelimit no data debug output (Marek Vasut) 
- ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski) 
- power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede) 
- power: supply: ab8500: Fix external_power_changed race (Hans de Goede) 
- LTS version: v4.14.318 (Saeed Mirzamohammadi) 
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) 
- btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) 
- ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o) 
- i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-Konig) 
- Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz) 
- ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li) 
- drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu) 
- Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov) 
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas) 
- batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov) 
- bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur) 
- net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet) 
- rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet) 
- rfs: annotate lockless accesses to sk->sk_rxhash (Eric Dumazet) 
- Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim) 
- Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu) 
- spi: qup: Request DMA before enabling clocks (Stephan Gerhold) 
- i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman) 
- i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman) 
- LTS version: v4.14.317 (Saeed Mirzamohammadi) 
- wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih) 
- Fix double fget() in vhost_net_set_backend() (Al Viro) 
- net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) 
- cdc_ncm: Fix the build warning (Alexander Bersenev) 
- cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev) 
- scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings) 
- scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings) 
- fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller) 
- ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o) 
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun) 
- mmc: vub300: fix invalid response handling (Deren Wu) 
- regulator: da905{2,5}: Remove unnecessary array check (Nathan Chancellor) 
- wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski) 
- lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor) 
- kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor) 
- eth: sun: cassini: remove dead code (Martin Liska) 
- gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds) 
- ACPI: thermal: drop an always true check (Adam Borowski) 
- x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook) 
- ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal) 
- scsi: stex: Fix gcc 13 warnings (Bart Van Assche) 
- usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal) 
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak) 
- iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut) 
- HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich) 
- iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo) 
- mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter) 
- atm: hide unused procfs functions (Arnd Bergmann) 
- ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann) 
- netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix) 
- wifi: b43: fix incorrect __packed annotation (Arnd Bergmann) 
- scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao) 
- wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu) 
- media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) 
- media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) 
- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) 
- media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen) 
- media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen) 
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen) 
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong) 
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen) 
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen) 
- media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen) 
- ASoC: ssm2602: Add workaround for playback distortions (Pawel Anikiel) 
- ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov) 
- nbd: Fix debugfs_create_dir error checking (Ivan Orlov) 
- fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller) 
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller) 
- ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li) 
- mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones) 
- net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson) 
- udp6: Fix race condition in udp6_sendmsg & connect (Vladislav Efanov) 
- tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu) 
- af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet) 
- af_packet: Fix data-races of pkt_sk(sk)->num. (Kuniyuki Iwashima) 
- netrom: fix info-leak in nr_write_internal() (Eric Dumazet) 
- dmaengine: pl330: rename _start to prevent build error (Randy Dunlap) 
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li) 
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski) 
- power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede)