{ "cves": [ "CVE-2010-1187", "CVE-2010-1437", "CVE-2010-1088", "CVE-2010-0622", "CVE-2010-1087", "CVE-2010-1173", "CVE-2010-1436", "CVE-2010-1641", "CVE-2010-0291" ], "cvss": 0.0, "database_specific": { "severity": "IMPORTANT" }, "description": "[2.6.18-194.8.1.0.1.el5]\n- [xen] check to see if hypervisor supports memory reservation change\n (Chuck Anderson) [orabug 7556514]\n- Add entropy support to igb (John Sobecki) [orabug 7607479]\n- [nfs] convert ENETUNREACH to ENOTCONN [orabug 7689332]\n- [NET] Add xen pv/bonding netconsole support (Tina Yang) [orabug 6993043]\n [bz 7258]\n- [mm] shrink_zone patch (John Sobecki,Chris Mason) [orabug 6086839]\n- fix aacraid not to reset during kexec (Joe Jin) [orabug 8516042]\n- [nfsd] fix failure of file creation from hpux client (Wen gang Wang)\n [orabug 7579314]\n- [qla] fix qla not to query hccr (Guru Anbalagane) [Orabug 8746702]\n- [net] bonding: fix xen+bonding+netconsole panic issue (Joe Jin) [orabug 9504524]\n- [rds] Patch rds to 1.4.2-14 (Andy Grover) [orabug 9471572, 9344105]\n RDS: Fix BUG_ONs to not fire when in a tasklet\n ipoib: Fix lockup of the tx queue\n RDS: Do not call set_page_dirty() with irqs off (Sherman Pun)\n RDS: Properly unmap when getting a remote access error (Tina Yang)\n RDS: Fix locking in rds_send_drop_to()\n- [mm] Enahance shrink_zone patch allow full swap utilization, and also be\n NUMA-aware (John Sobecki, Chris Mason, Herbert van den Bergh)\n [orabug 9245919]\n\n[2.6.18-194.8.1.el5]\n- [net] cnic: fix bnx2x panic w/multiple interfaces enabled (Stanislaw Gruszka) [607087 602402]\n\n[2.6.18-194.7.1.el5]\n- [virt] don't compute pvclock adjustments if we trust tsc (Glauber Costa) [601080 570824]\n- [virt] add a global synchronization point for pvclock (Glauber Costa) [601080 570824]\n- [virt] enable pvclock flags in vcpu_time_info structure (Glauber Costa) [601080 570824]\n- [misc] add atomic64_cmpxcgh to x86_64 include files (Glauber Costa) [601080 570824]\n- [x86] grab atomic64 types from upstream (Glauber Costa) [601080 570824]\n\n[2.6.18-194.6.1.el5]\n- [fs] gfs2: fix permissions checking for setflags ioctl (Steven Whitehouse) [595580 595399] {CVE-2010-1641}\n- [mm] clear page errors when issuing a fresh read of page (Rik van Riel) [599739 590763]\n- [misc] keys: do not find already freed keyrings (Vitaly Mayatskikh) [585099 585100] {CVE-2010-1437}\n- [net] sctp: file must be valid before setting timeout (Jiri Pirko) [598355 578261]\n- [net] tg3: fix panic in tg3_interrupt (John Feeney) [600498 569106]\n- [net] e1000/e1000e: implement simple interrupt moderation (Andy Gospodarek) [599332 586416]\n- [net] cnic: Fix crash during bnx2x MTU change (Stanislaw Gruszka) [596385 582367]\n- [net] bxn2x: add dynamic lro disable support (Stanislaw Gruszka) [596385 582367]\n- [net] implement dev_disable_lro api for RHEL5 (Stanislaw Gruszka) [596385 582367]\n- [x86_64] fix time drift due to faulty lost tick tracking (Ulrich Obergfell) [601090 579711]\n- [net] neigh: fix state transitions via Netlink request (Jiri Pirko) [600215 485903]\n- [mm] fix hugepage corruption using vm.drop_caches (Larry Woodman) [599737 579469]\n- [nfs] don't unhash dentry in nfs_lookup_revalidate (Jeff Layton) [596384 582321]\n- [fs] remove unneccessary f_ep_lock from fasync_helper (Lachlan McIlroy) [599730 567479]\n- [xen] set hypervisor present CPUID bit (Paolo Bonzini) [599734 573771]\n\n[2.6.18-194.5.1.el5]\n- [net] bonding: fix broken multicast with round-robin mode (Andy Gospodarek) [594057 570645]\n- [net] tg3: fix INTx fallback when MSI fails (Steve Best) [592844 587666]\n- [net] sched: fix SFQ qdisc crash w/limit of 2 packets (Jiri Pirko) [594054 579774]\n- [nfs] revert retcode check in nfs_revalidate_mapping() (Jeff Layton) [594061 557423]\n- [misc] futex: handle futex value corruption gracefully (Jerome Marchand) [563093 480396] {CVE-2010-0622}\n- [misc] futex: handle user space corruption gracefully (Jerome Marchand) [563093 480396] {CVE-2010-0622}\n- [misc] futex: fix fault handling in futex_lock_pi (Jerome Marchand) [563093 480396] {CVE-2010-0622}\n- [net] e1000: fix WoL init when WoL disabled in EEPROM (Dean Nelson) [591493 568561]\n- [virtio] fix GFP flags passed by virtio balloon driver (Amit Shah) [591611 584683]\n- [net] sctp: fix skb_over_panic w/too many unknown params (Neil Horman) [584657 584658] {CVE-2010-1173}\n- [acpi] fix WARN on unregister in power meter driver (Matthew Garrett) [592846 576246]\n- [mm] keep get_unmapped_area_prot functional (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] switch do_brk to get_unmapped_area (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] take arch_mmap_check into get_unmapped_area (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] get rid of open-coding in ia64_brk (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] unify sys_mmap* functions (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] kill ancient cruft in s390 compat mmap (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] fix pgoff in have to relocate case of mremap (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] fix the arch checks in MREMAP_FIXED case (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] fix checks for expand-in-place mremap (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] add new vma_expandable helper function (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] move MREMAP_FIXED into its own header (Danny Feng) [556709 556710] {CVE-2010-0291}\n- [mm] move locating vma code and checks on it (Danny Feng) [556709 556710] {CVE-2010-0291}\n\n[2.6.18-194.4.1.el5]\n- [acpi] warn on hot-add of memory exceeding 4G boundary (Prarit Bhargava) [587957 571544]\n- [net] tipc: fix various oopses in uninitialized code (Neil Horman) [578058 558693] {CVE-2010-1187}\n- [block] cfq-iosched: fix IOPRIO_CLASS_IDLE accounting (Jeff Moyer) [588219 574285]\n- [block] cfq-iosched: async queue allocation per priority (Jeff Moyer) [588219 574285]\n- [block] cfq-iosched: fix async queue behaviour (Jeff Moyer) [588219 574285]\n- [block] cfq-iosched: propagate down request sync flag (Jeff Moyer) [588219 574285]\n- [block] introduce the rq_is_sync macro (Jeff Moyer) [588219 574285]\n- [fs] vfs: fix LOOKUP_FOLLOW on automount symlinks (Jeff Layton) [567815 567816] {CVE-2010-1088}\n- [nfs] fix an oops when truncating a file (Jeff Layton) [567194 567195] {CVE-2010-1087}\n- [fs] fix kernel oops while copying from ext3 to gfs2 (Abhijith Das) [586008 555754] {CVE-2010-1436}", "id": "ELSA-2010-0504", "ovalId": "oval:com.oracle.elsa:def:20100504", "source": "oracle_linux", "title": "ELSA-2010-0504: kernel security and bug fix update (IMPORTANT)", "url": "https://linux.oracle.com/errata/ELSA-2010-0504.html" }