[El-errata] ELBA-2024-12478 Oracle Linux 8 Unbreakable Enterprise kernel bug fix update

[Errata Announcements for Oracle Linux]

Oracle Linux Bug Fix Advisory ELBA-2024-12478

http://linux.oracle.com/errata/ELBA-2024-12478.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
kernel-uek-5.4.17-2136.333.5.el8uek.x86_64.rpm
kernel-uek-debug-5.4.17-2136.333.5.el8uek.x86_64.rpm
kernel-uek-debug-devel-5.4.17-2136.333.5.el8uek.x86_64.rpm
kernel-uek-devel-5.4.17-2136.333.5.el8uek.x86_64.rpm
kernel-uek-doc-5.4.17-2136.333.5.el8uek.noarch.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates//kernel-uek-5.4.17-2136.333.5.el8uek.src.rpm



Description of changes:

[5.4.17-2136.333.5.el8uek]
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka) 
- nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) 
- nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa) 
- ipv6: sr: fix incorrect unregister order (Hangbin Liu) 
- vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann) 
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) 
- fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) 
- speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) 
- md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai) 
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)

[5.4.17-2136.333.4.el8uek]
- PCI: pciehp: Add Solidigm NVMe to spurious DLLSC quirk (Alan Adamson)  [Orabug: 36622673]
- RDS/IB: Add counter to measure when RDS_IB_RX_LIMIT is reached (Hans Westgaard Ry)  [Orabug: 36696279]
- net/mlx5e: Fix a race in command alloc flow (Shifeng Li)  [Orabug: 36702071]
- Revert "net/mlx5: Add retry mechanism to the command entry index allocation" (Qing Huang)  [Orabug: 36702071]
- kallsyms: shuffle kallmodsyms writeout before symbol sort (Nick Alcock)  [Orabug: 36722084]

[5.4.17-2136.333.3.el8uek]
- LTS tag: v5.4.277 (Sherry Yang) 
- docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa) 
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson) 
- usb: typec: ucsi: displayport: Fix potential deadlock (Heikki Krogerus) 
- drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Srinivasan Shanmugam) 
- arm64: dts: qcom: Fix 'interrupt-map' parent address cells (Rob Herring) 
- firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi) 
- smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) 
- net: bcmgenet: synchronize UMAC_CMD access (Doug Berger) 
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() (Doug Berger) 
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access (Doug Berger) 
- net: bcmgenet: keep MAC in reset until PHY is up (Doug Berger) 
- Revert "net: bcmgenet: use RGMII loopback for MAC reset" (Doug Berger) 
- ext4: fix bug_on in __es_tree_search (Baokun Li) 
- pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (Sergey Shtylyov) 
- LTS tag: v5.4.276 (Sherry Yang) 
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (Chen-Yu Tsai) 
- pinctrl: mediatek: remove set but not used variable 'e' (YueHaibing) 
- pinctrl: mediatek: Fix some off by one bugs (Dan Carpenter) 
- pinctrl: mediatek: Fix fallback behavior for bias_set_combo (Hsin-Yi Wang) 
- regulator: core: fix debugfs creation regression (Johan Hovold) 
- net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) 
- drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) 
- dyndbg: fix old BUG_ON in >control parser (Jim Cromie) 
- tipc: fix UAF in error path (Paolo Abeni) 
- usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff) 
- usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard) 
- firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) 
- net: qede: use return from qede_parse_flow_attr() for flower (Asbjørn Sloth Tønnesen) 
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (Asbjørn Sloth Tønnesen) 
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) 
- net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau) 
- phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) 
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) 
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) 
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) 
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) 
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) 
- xfrm: Preserve vlan tags for transport mode software GRO (Paul Davey) 
- pinctrl: mediatek: Fix fallback call path (Hsin-Yi Wang) 
- net:usb:qmi_wwan: support Rolling modules (Vanillan Wang) 
- fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt) 
- clk: Don't hold prepare_lock when calling kref_put() (Stephen Boyd) 
- gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko) 
- gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko) 
- 9p: explicitly deny setlease attempts (Jeff Layton) 
- fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt) 
- fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) 
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz) 
- MIPS: scall: Save thread_info.syscall unconditionally on entry (Jiaxun Yang) 
- gpu: host1x: Do not setup DMA for virtual devices (Thierry Reding) 
- scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi) 
- btrfs: always clear PERTRANS metadata during commit (Boris Burkov) 
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve (Boris Burkov) 
- tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu) 
- tools/power turbostat: Fix added raw MSR output (Doug Smythies) 
- firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) 
- ata: sata_gemini: Check clk_enable() result (Chen Ni) 
- net: bcmgenet: Reset RBUF on first open (Phil Elwell) 
- ALSA: line6: Zero-initialize message buffers (Takashi Iwai) 
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) 
- net: mark racy access on sk->sk_rcvbuf (linke li) 
- wifi: cfg80211: fix rdev_dump_mpp() arguments order (Igor Artemiev) 
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson) 
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) 
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee) 
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) 
- tipc: fix a possible memleak in tipc_buf_append (Xin Long) 
- net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau) 
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún) 
- net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn) 
- net: qede: use return from qede_parse_flow_attr() for flow_spec (Asbjørn Sloth Tønnesen) 
- net l2tp: drop flow hash on forward (David Bauer) 
- nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) 
- bna: ensure the copied buf is NUL terminated (Bui Quang Minh) 
- s390/mm: Fix clearing storage keys for huge pages (Claudio Imbrenda) 
- s390/mm: Fix storage key clearing for guest huge pages (Claudio Imbrenda) 
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) 
- power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann) 
- nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) 
- nfs: make the rpc_stat per net namespace (Josef Bacik) 
- nfs: expose /proc/net/sunrpc/nfs in net namespaces (Josef Bacik) 
- sunrpc: add a struct rpc_stats arg to rpc_create_args (Josef Bacik) 
- pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (Chen-Yu Tsai) 
- pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic (Chen-Yu Tsai) 
- pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai) 
- pinctrl: mediatek: remove shadow variable declaration (Light Hsieh) 
- pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage (Light Hsieh) 
- pinctrl: mediatek: Refine mtk_pinconf_get() (Light Hsieh) 
- pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() (Light Hsieh) 
- pinctrl: mediatek: Supporting driving setting without mapping current to register value (Light Hsieh) 
- pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() (Light Hsieh) 
- pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) 
- wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) 
- dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul) 
- dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee) 
- LTS tag: v5.4.275 (Sherry Yang) 
- serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap) 
- udp: preserve the connected status if only UDP cmsg (Yick Xie) 
- dm: limit the number of targets and parameter size area (Mikulas Patocka) 
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) 
- i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) 
- idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko) 
- dmaengine: owl: fix register access functions (Arnd Bergmann) 
- tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() (Eric Dumazet) 
- tcp: Clean up kernel listener's reqsk in inet_twsk_purge() (Kuniyuki Iwashima) 
- mtd: diskonchip: work around ubsan link failure (Arnd Bergmann) 
- stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin) 
- net: b44: set pause params only when interface is up (Peter Münster) 
- ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu) 
- irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) 
- drm/amdgpu: Fix leak when GPU memory allocation fails (Mukul Joshi) 
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara) 
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) 
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (WangYuli) 
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor) 
- tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson) 
- tracing: Show size of requested perf buffer (Robin H. Johnson) 
- drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) 
- amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu) 
- drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj) 
- serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) 
- serial: core: Provide port lock wrappers (Thomas Gleixner) 
- af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima) 
- iavf: Fix TC config comparison with existing adapter TC config (Sudheer Mogilappagari) 
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) 
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Rate limit error message (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ido Schimmel) 
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ido Schimmel) 
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) 
- ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno) 
- net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) 
- net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet) 
- NFC: trf7970a: disable all regulators on removal (Paul Geurts) 
- mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel) 
- vxlan: drop packets from invalid src-address (David Bauer) 
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin) 
- arm64: dts: mediatek: mt2712: fix validation errors (Rafał Miłecki) 
- arm64: dts: mt2712: add ethernet device node (Biao Huang) 
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block (Rafał Miłecki) 
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible" (Rafał Miłecki) 
- arm64: dts: mediatek: mt7622: fix IR nodename (Rafał Miłecki) 
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz) 
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara) 
- KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov) 
- nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) 
- nouveau: fix instmem race condition around ptr stores (Dave Airlie) 
- fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) 
- speakup: Avoid crash on very long word (Samuel Thibault) 
- usb: Disable USB3 LPM at shutdown (Kai-Heng Feng) 
- USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas) 
- USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang) 
- USB: serial: option: support Quectel EM060K sub-models (Jerry Meng) 
- USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant) 
- USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo) 
- USB: serial: option: add Fibocom FM135-GL variants (bolan wang) 
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) 
- comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich) 
- binder: check offset alignment in binder_get_object() (Carlos Llamas) 
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (Eric Biggers) 
- clk: Get runtime PM before walking tree during disable_unused (Stephen Boyd) 
- clk: Initialize struct clk_core kref earlier (Stephen Boyd) 
- clk: Print an info line before disabling unused clocks (Konrad Dybcio) 
- clk: remove extra empty line (Claudiu Beznea) 
- clk: Mark 'all_lists' as const (Stephen Boyd) 
- clk: Remove prepare_lock hold assertion in __clk_release() (Stephen Boyd) 
- drm: nv04: Fix out of bounds access (Mikhail Kobuk) 
- RDMA/rxe: Fix the problem "mutex_destroy missing" (Yanjun.Zhu) 
- tun: limit printing rate when illegal packet received by tun dev (Lei Chen) 
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) 
- kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) 
- selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu) 
- btrfs: record delayed inode root in transaction (Boris Burkov) 
- x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap) 
- selftests: timers: Fix abs() warning in posix_timers test (John Stultz) 
- vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan) 
- drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) 
- btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov) 
- net: ena: Fix potential sign extension issue (David Arinzon) 
- af_unix: Fix garbage collector racing against connect() (Michal Luczaj) 
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima) 
- net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) 
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) 
- ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann) 
- ipv6: fib: hide unused 'pn' variable (Arnd Bergmann) 
- geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet) 
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (Petr Tesarik) 
- net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets) 
- nouveau: fix function cast warning (Arnd Bergmann) 
- Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) 
- batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)

[5.4.17-2136.333.2.el8uek]
- slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang)  [Orabug: 36655469]
- slub: introduce count_partial_free_approx() (Jianfeng Wang)  [Orabug: 36655469]

[5.4.17-2136.333.1.el8uek]
- net/rds: Get RDS statistics for each possible CPU (Anand Khoje)  [Orabug: 35830449]
- net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36307093]
- net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36307093]
- RDMA/cm: Use RCU synchronization mechanism to protect cm_id_private xa_load() (Danit Goldberg)  [Orabug: 36375215]
- uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK6 (Jianfeng Wang)  [Orabug: 36460675]
- fgraph: Add declaration of "struct fgraph_ret_regs" (Steven Rostedt (Google))  [Orabug: 36460675]
- x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675]
- arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675]
- tracing: Add documentation for funcgraph-retval and funcgraph-retval-hex (Donglin Peng)  [Orabug: 36460675]
- function_graph: Support recording and printing the return value of function (Donglin Peng)  [Orabug: 36460675]
- fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware))  [Orabug: 36460675]
- block: fix io util% for exadata disk with 1 hw queue (Gulam Mohamed)  [Orabug: 36511453]
- Revert "Use inflight IO in io acct of high latency devices" (Gulam Mohamed)  [Orabug: 36511453]
- kprobe/ftrace: bail out if ftrace was killed (Stephen Brennan)  [Orabug: 36572635]
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang)  [Orabug: 36592398]
- x86/returnthunk: Allow different return thunks (Peter Zijlstra)  [Orabug: 36628382]
- tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima)  [Orabug: 36637454]
- tcp: disable TFO blackhole logic by default (Wei Wang)  [Orabug: 36637454]