Synopsis: Important: kernel security, bug fix, and enhancement update Advisory ID: SLSA-2022:1198-1 Issue Date: 2022-04-06 CVE Numbers: CVE-2021-4028 CVE-2021-4083 -- Security Fix(es): * kernel: use-after-free in RDMA listen() (CVE-2021-4028) * kernel: fget: check that the fd still exists after getting a ref to it (CVE-2021-4083) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE Bug Fix(es): * Adding new kernel entry in grub configuration file only after generation of new initramfs * Cannot mount DFS shares on SL7 * SL7.9 - zcrypt DD: Toleration for new IBM Z Crypto Hardware * kernel panic at skb_free_datagram_locked on 3.10.0-1160.45.1.el7 * Lots of tasks are getting stuck in I/O wait waiting on the buffer_head locked by the task that is busy shrinking slab for freeing pages - 3 patches to fs/buffer.c * [SL 7.9 Bug] x86/platform/uv: Add more to secondary CPU kdump info * REGRESSION System panicking in __kmalloc+0x94 from a freelist issue introduced by a block patch. Enhancement(s): * SL7.9 - kernel: Add support for CPU-MF counter second version 7 -- SL7 x86_64 bpftool-3.10.0-1160.62.1.el7.x86_64.rpm bpftool-debuginfo-3.10.0-1160.62.1.el7.x86_64.rpm kernel-3.10.0-1160.62.1.el7.x86_64.rpm kernel-debug-3.10.0-1160.62.1.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-1160.62.1.el7.x86_64.rpm kernel-debug-devel-3.10.0-1160.62.1.el7.x86_64.rpm kernel-debuginfo-3.10.0-1160.62.1.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-1160.62.1.el7.x86_64.rpm kernel-devel-3.10.0-1160.62.1.el7.x86_64.rpm kernel-headers-3.10.0-1160.62.1.el7.x86_64.rpm kernel-tools-3.10.0-1160.62.1.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-1160.62.1.el7.x86_64.rpm kernel-tools-libs-3.10.0-1160.62.1.el7.x86_64.rpm perf-3.10.0-1160.62.1.el7.x86_64.rpm perf-debuginfo-3.10.0-1160.62.1.el7.x86_64.rpm python-perf-3.10.0-1160.62.1.el7.x86_64.rpm python-perf-debuginfo-3.10.0-1160.62.1.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-1160.62.1.el7.x86_64.rpm noarch kernel-abi-whitelists-3.10.0-1160.62.1.el7.noarch.rpm kernel-doc-3.10.0-1160.62.1.el7.noarch.rpm - Scientific Linux Development Team