Scientific Linux alert SLSA-2019:3979-1 (kernel)

From:
             
 
Farhan Ahmed <fahmed@fnal.gov> 
To:
             
 
scientific-linux-errata@listserv.fnal.gov 
Subject:
             
 
Security ERRATA Important: kernel on SL7.x x86_64 
Date:
             
 
Fri, 06 Dec 2019 14:10:25 -0000
Message-ID:
             
 
<20191206141025.32534.22143@slpackages.fnal.gov>
Synopsis: Important: kernel security and bug fix update
Advisory ID:       SLSA-2019:3979-1
Issue Date:        2019-12-05
CVE Numbers:       CVE-2019-14821
                   CVE-2019-15239
--

Security Fix(es):

* Kernel: KVM: OOB memory access via mmio ring buffer (CVE-2019-14821)

* kernel: local attacker can trigger multiple use-after-free conditions
results in privilege escalation (CVE-2019-15239)

Bug Fix(es):

* On SL 7.7 kernel SCSI VPD information for NVMe drives is missing (breaks
InfoScale)

* SL7 fnic spamming logs: Current vnic speed set to : 40000

* kernel build: parallelize redhat/mod-sign.sh

* kernel build: speed up module compression step

* Nested VirtualBox VMs on Windows guest has the potential of impacting
memory region allocated to other KVM guests

* NULL pointer dereference at check_preempt_wakeup+0x109

* Regression: panic in pick_next_task_rt

* ixgbe reports "Detected Tx Unit Hang" with adapter reset on SL 7

* [Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not
enabled in VM.

* nvme: dead loop in blk_mq_tagset_wait_completed_request() when it is
called from timeout handler

* [mlx5] VF Representer naming is not consistent/persistent through
reboots with OSPD deployment

* OS getting restarted because of driver issue with QLogic Corp.
ISP2532-based 8Gb Fibre Channel to PCI Express HBA [1077:2532] (rev 02).

* mlx5: Load balancing not working over VF LAG configuration

* SL7.8 - ISST-LTE: vimlp1: Running LTP af_alg04.c (crypto) crash the LPAR

* SL7.5 - Fix security issues on crypto vmx

* SL 7.7 RC1 - Host crashes about 4.5 hours into switch port bounce test

* SL7.6 - cacheinfo code unsafe vs LPM

* xfs hangs on acquiring xfs_buf semaphore

* single CPU VM hangs during open_posix_testsuite

* rcu_sched self-detected stall on CPU while booting with nohz_full
--

SL7
  x86_64
    bpftool-3.10.0-1062.7.1.el7.x86_64.rpm
    bpftool-debuginfo-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-debug-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-debug-debuginfo-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-debug-devel-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-debuginfo-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-debuginfo-common-x86_64-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-devel-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-headers-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-tools-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-tools-debuginfo-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-tools-libs-3.10.0-1062.7.1.el7.x86_64.rpm
    perf-3.10.0-1062.7.1.el7.x86_64.rpm
    perf-debuginfo-3.10.0-1062.7.1.el7.x86_64.rpm
    python-perf-3.10.0-1062.7.1.el7.x86_64.rpm
    python-perf-debuginfo-3.10.0-1062.7.1.el7.x86_64.rpm
    kernel-tools-libs-devel-3.10.0-1062.7.1.el7.x86_64.rpm
  noarch
    kernel-abi-whitelists-3.10.0-1062.7.1.el7.noarch.rpm
    kernel-doc-3.10.0-1062.7.1.el7.noarch.rpm

- Scientific Linux Development Team