Synopsis:          Moderate: kernel security and bug fix update
Advisory ID:       SLSA-2020:5023-1
Issue Date:        2020-11-10
CVE Numbers:       None
--

Security Fix(es):

* kernel: buffer over write in vgacon_scroll (CVE-2020-14331)

* kernel: net-sysfs: *_queue_add_kobject refcount issue (CVE-2019-20811)

Bug Fix(es):

* [OSP13,mlx5] SRIOV VF still sending traffic when PF is down (BZ#1733181)

* gpf panic in virtio_check_driver_offered_fxature+6 when running sg_inq on
a dm map for a lost virtio_blk (BZ#1811893)

* GPF panic in qlt_free_session_done+626 (BZ#1826127)

* [ Brazos ] "Core(s) per socket" and "Socket" values are interchanged in
lscpu output. (kernel) (BZ#1826306)

* megaraid Aero: call trace observed during reboots (BZ#1828312)

* Crash in mptscsih_io_done() due to buffer overrun in sense_buf_pool
(BZ#1829803)

* The qedf driver fails to re-establish the online F/C port state when the
downstream F/C port is toggled unless a LIP is forced (BZ#1836443)

* tcp_fragment() limit causes packet drop under normal TCP load
(BZ#1847765)

* ip link command shows state as UNKNOWN for MACVLAN interface (BZ#1848950)

* Lenovo TS 7Z60 Cooper Lake: PCI BAR firmware bug (BZ#1849223)

* [RHEL-7/mlx4]  ipoib_flush ipoib_ib_dev_flush_light [ib_ipoib]
(BZ#1858707)

* Uprobes crashes processes under GDB - SIGTRAP and SIGSEGV (BZ#1861396)

* kernel-3.10.0-1127.19.1.el7.x86_64 crashes after an SSH connection
attempt when running as a Xen PV guest on AMD Epyc Rome (BZ#1882468)

* Null ptr deref after nf_reinject->nf_queue_entry_release_refs hits
Attempt to release error doing inet_sock_destruct() (BZ#1885682)
--

SL7
  x86_64
    bpftool-3.10.0-1160.6.1.el7.x86_64.rpm
    bpftool-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-debug-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-debug-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-debug-devel-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-debuginfo-common-x86_64-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-devel-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-headers-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-tools-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-tools-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-tools-libs-3.10.0-1160.6.1.el7.x86_64.rpm
    perf-3.10.0-1160.6.1.el7.x86_64.rpm
    perf-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
    python-perf-3.10.0-1160.6.1.el7.x86_64.rpm
    python-perf-debuginfo-3.10.0-1160.6.1.el7.x86_64.rpm
    kernel-tools-libs-devel-3.10.0-1160.6.1.el7.x86_64.rpm
  noarch
    kernel-abi-whitelists-3.10.0-1160.6.1.el7.noarch.rpm
    kernel-doc-3.10.0-1160.6.1.el7.noarch.rpm

- Scientific Linux Development Team