{
  "cveId": "CVE-2017-6074",
  "url": "https://patchblox.com/security/cve/CVE-2017-6074",
  "summary": "CVE-2017-6074 is fixed in 11 products on 1 platform, first by ELSA-2021-9486, released October 14, 2021. It is not reported as exploited. Patch Radar priority: High.",
  "title": "kernel-uek: [5.4.17-2136.300.7]\n- KVM: SVM: Fix mismerge in svm_update_pi_irte() (Liam Merwick)  [Orabug: 33446526] \n- Revert KVM...",
  "description": "[5.4.17-2136.300.7]\n- KVM: SVM: Fix mismerge in svm_update_pi_irte() (Liam Merwick)  [Orabug: 33446526] \n- Revert KVM: x86: hyperv: Remove duplicate definitions of Reference TSC Page (Liam Merwick)  [Orabug: 33450675]\n\n[5.4.17-2136.300.6]\n- Revert scsi: core: Cap scsi_host cmd_per_lun at can_queue (Jack Vogel)  [Orabug: 33441404]\n\n[5.4.17-2136.300.5]\n- dccp: dont duplicate ccid when cloning dccp sock (Lin, Zhenpeng)  [Orabug: 33408808]  {CVE-2017-6074} {CVE-2020-16119} {CVE-2020-16119}\n- block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33396355] \n- uek-rpm: add ofb.ko and crypto_user.ko modules to nano kernel (Somasundaram Krishnasamy)  [Orabug: 31895743]\n\n[5.4.17-2136.300.4]\n- Reintroduce: certs: Add EFI_CERT_X509_GUID support for dbx entries (Konrad Rzeszutek Wilk)  [Orabug: 33382994] \n- bnxt_en: Update the driver version string (Jack Vogel)  [Orabug: 33392416]\n\n[5.4.17-2136.300.3]\n- net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33379543] \n- KVM: X86: MMU: Use the correct inherited permissions to get shadow page (Lai Jiangshan)  [Orabug: 33359297]  {CVE-2021-38198}\n- KVM: x86: adjust SEV for commit 7e8e6eed75e (Paolo Bonzini)  [Orabug: 33375655] \n- net/mlx5: Implement Oracle-only solution for mlx device names (Mikhael Goikhman)  [Orabug: 33247746]\n\n[5.4.17-2136.300.2]\n- btrfs: fix NULL pointer dereference when deleting device by invalid id (Qu Wenruo)  [Orabug: 33365609]  {CVE-2021-3739}\n- Revert uek-rpm: mark /etc/ld.so.conf.d/ files as %config (aloktiw)  [Orabug: 33359669] \n- bpf: provide BPF Type Format (BTF) info for kernel (Alan Maguire)  [Orabug: 33331233] \n- perf/x86/amd: Dont touch the AMD64_EVENTSEL_HOSTONLY bit inside the guest (Like Xu)  [Orabug: 33194216] \n- IB/core: Read subnet_prefix in ib_query_port via cache. (Anand Khoje)  [Orabug: 33283556] \n- IB/core: Shifting initialization of device-\u003Ecache_lock (Anand Khoje)  [Orabug: 33283556] \n- IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Anand Khoje)  [Orabug: 33283556] \n- IB/core: Shuffle locks in ib_port_data to save memory (Anand Khoje)  [Orabug: 33283556] \n- IB/core: Removed port validity check from ib_get_cached_subnet_prefix (Anand Khoje)  [Orabug: 33283556] \n- xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu\u003E=32 (Dongli Zhang)  [Orabug: 33106728]\n\n[5.4.17-2136.300.1]\n- net: qrtr: fix another OOB Read in qrtr_endpoint_post (Xiaolong Huang)  [Orabug: 33336805]  {CVE-2021-3743}\n- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Tso)  [Orabug: 33336785]  {CVE-2021-40490}\n- net/mlx5: E-Switch, Fix vlan or qos setting in legacy mode (Vu Pham)  [Orabug: 33291040] \n- rds: ib: Set SEND_SIGNALED on the last WR posted (Hakon Bugge)  [Orabug: 33331710] \n- RDMA/cma: Revert INIT-INIT patch (Mike Marciniszyn)  [Orabug: 33331640] \n- usb: hso: fix error handling code of hso_create_net_device (Dongliang Mu)  [Orabug: 33329086]  {CVE-2021-37159}\n- hso: fix bailout in error case of probe (Oliver Neukum)  [Orabug: 33329086]  {CVE-2021-37159}\n- uek-rpm: Set DEFAULTKERNEL in /etc/sysconfig/kernel correctly (Dave Kleikamp)  [Orabug: 33219604] \n- RDMA/mlx5: Fix crash when unbind multiport slave (Maor Gottlieb)  [Orabug: 33303425] \n- net/mlx5: Dont overwrite HCA capabilities when setting MSI-X count (Leon Romanovsky)  [Orabug: 33220810] \n- net/mlx5: Implement sriov_get_vf_total_msix/count() callbacks (Leon Romanovsky)  [Orabug: 33220810] \n- net/mlx5: Dynamically assign MSI-X vectors count (Leon Romanovsky)  [Orabug: 33220810] \n- net/mlx5: Add dynamic MSI-X capabilities bits (Leon Romanovsky)  [Orabug: 33220810] \n- PCI/IOV: Add sysfs MSI-X vector assignment interface (Leon Romanovsky)  [Orabug: 33220810] \n- net/mlx5: Check that driver was probed prior attaching the device (Leon Romanovsky)  [Orabug: 33286656]\n\n[5.4.17-2136.300.0]\n- misc/pvpanic: fix set driver data (Mihai Carabas)  [Orabug: 33290806] \n- btrfs: fix race between marking inode needs to be logged and log syncing (Filipe Manana)  [Orabug: 33265208] \n- vdpa/mlx5: fix feature negotiation across device reset (Si-Wei Liu)  [Orabug: 33247045] \n- net/mlx5: E-switch, When eswitch is unsupported, return -EOPNOTSUPP (Parav Pandit)  [Orabug: 33241452] \n- xen-acpi-processor: fix coordination type mismatch (Elena Ufimtseva)  \n- net/mlx5: E-switch, Use eswitch total_vports (Parav Pandit)  [Orabug: 33213269] \n- net/mlx5: E-switch, Reuse total_vports and avoid duplicate nvports (Parav Pandit)  [Orabug: 33213269] \n- net/mlx5: E-switch, Consider maximum vf vports for steering init (Parav Pandit)  [Orabug: 33213269] \n- RDMA/mlx5: Fix NULL pointer dereference in destroy_prefetch_work (Maor Gottlieb)  [Orabug: 33303297] \n- rds: fix statistics counters and check for memory leak (Hans Westgaard Ry)  [Orabug: 31372378] \n- KVM: X86: Micro-optimize IPI fastpath delay (Wanpeng Li)  [Orabug: 33119431] \n- net/mlx5_core: Restore driver version (Roy Novich)  [Orabug: 33112151] \n- RDMA/umem: Use ib_dma_max_seg_size instead of dma_get_max_seg_size (Christoph Hellwig)  [Orabug: 33107202] \n- lib/scatterlist: Do not limit max_segment to PAGE_ALIGNED values (Jason Gunthorpe)  [Orabug: 33107202] \n- RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 33107202] \n- lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 33107202] \n- uek-rpm: update kABI lists for new symbols (Saeed Mirzamohammadi)  [Orabug: 33246580] \n- rdmaip: trace message buffer size too small for rdmaip debug tracepoints (Alan Maguire)  [Orabug: 33267573] \n- driver core: auxiliary bus: Fix memory leak when driver_register() fail (Peter Ujfalusi)  [Orabug: 32461425] \n- driver core: auxiliary bus: Remove unneeded module bits (Dave Jiang)  [Orabug: 32461425] \n- driver core: auxiliary bus: Fix calling stage for auxiliary bus init (Dave Jiang)  [Orabug: 32461425] \n- driver core: auxiliary bus: Fix auxiliary bus shutdown null auxdrv ptr (Dave Jiang)  [Orabug: 32461425] \n- bnxt_en: Use register window 6 instead of 5 to read the PHC (Michael Chan)  [Orabug: 33181761] \n- bnxt_en: Update firmware call to retrieve TX PTP timestamp (Michael Chan)  [Orabug: 33181761] \n- bnxt_en: Update firmware interface to 1.10.2.52 (Michael Chan)  [Orabug: 33181761]\n\n[5.4.17-2122.305.7]\n- ice: implement device flash update via devlink (Jacob Keller)  [Orabug: 33236075] \n- ice: add board identifier info to devlink .info_get (Jacob Keller)  [Orabug: 33236075] \n- ice: add basic handler for devlink .info_get (Jacob Keller)  [Orabug: 33236075] \n- ice: enable initial devlink support (Jacob Keller)  [Orabug: 33236075] \n- bitops: introduce the for_each_set_clump8 macro (William Breathitt Gray)  [Orabug: 33236075] \n- Add pldmfw library for PLDM firmware update (Jacob Keller)  [Orabug: 33236075] \n- devlink: expand the devlink-info documentation (Jakub Kicinski)  [Orabug: 33236075] \n- devlink: promote fw.bundle_id to a generic info version (Jacob Keller)  [Orabug: 33236075] \n- devlink: remove trigger command from devlink-region.rst (Jacob Keller)  [Orabug: 33236075] \n- devlink: add trap metadata type for cookie (Jiri Pirko)  [Orabug: 33236075] \n- devlink: add ACL generic packet traps (Jiri Pirko)  [Orabug: 33236075] \n- devlink: Force enclosing array on binary fmsg data (Aya Levin)  [Orabug: 33236075] \n- devlink: document devlink info versions reported by bnxt_en driver (Vasundhara Volam)  [Orabug: 33236075] \n- devlink: add macro for fw.roce (Vasundhara Volam)  [Orabug: 33236075] \n- devlink: Add health recover notifications on devlink flows (Moshe Shemesh)  [Orabug: 33236075] \n- devlink: Add overlay source MAC is multicast trap (Amit Cohen)  [Orabug: 33236075] \n- devlink: Add tunnel generic packet traps (Amit Cohen)  [Orabug: 33236075] \n- devlink: Add non-routable packet trap (Amit Cohen)  [Orabug: 33236075] \n- devlink: fix typos in qed documentation (Jacob Keller)  [Orabug: 33236075] \n- devlink: correct misspelling of snapshot (Jacob Keller)  [Orabug: 33236075] \n- devlink: document region snapshot triggering from userspace (Jacob Keller)  [Orabug: 33236075] \n- devlink: introduce devlink-dpipe.rst documentation file (Jacob Keller)  [Orabug: 33236075] \n- devlink: add a devlink-resource.rst documentation file (Jacob Keller)  [Orabug: 33236075] \n- devlink: rename and expand devlink-trap-netdevsim.rst (Jacob Keller)  [Orabug: 33236075] \n- devlink: add documentation for ionic device driver (Jacob Keller)  [Orabug: 33236075] \n- devlink: add a file documenting devlink regions (Jacob Keller)  [Orabug: 33236075] \n- devlink: add a driver-specific file for the qed driver (Jacob Keller)  [Orabug: 33236075] \n- devlink: add parameter documentation for the mlx4 driver (Jacob Keller)  [Orabug: 33236075] \n- devlink: document info versions for each driver (Jacob Keller)  [Orabug: 33236075] \n- devlink: convert driver-specific files to reStructuredText (Jacob Keller)  [Orabug: 33236075] \n- devlink: mention reloading in devlink-params.rst (Jacob Keller)  [Orabug: 33236075] \n- devlink: add documentation for generic devlink parameters (Jacob Keller)  [Orabug: 33236075] \n- devlink: convert devlink-params.txt to reStructuredText (Jacob Keller)  [Orabug: 33236075] \n- devlink: rename devlink-info-versions.rst and add a header (Jacob Keller)  [Orabug: 33236075] \n- devlink: convert devlink-health.txt to rst format (Jacob Keller)  [Orabug: 33236075] \n- devlink: move devlink documentation to subfolder (Jacob Keller)  [Orabug: 33236075] \n- devlink: add macro for fw.psid (Jacob Keller)  [Orabug: 33236075] \n- devlink: add devink notification when reporter update health state (Vikas Gupta)  [Orabug: 33236075] \n- rds_rdma: add missing rds_ib_cm_handle_connect tracepoint (Alan Maguire)  [Orabug: 33243559]\n\n[5.4.17-2122.305.6]\n- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33396682]  {CVE-2021-28950}\n- fuse: fix live lock in fuse_iget() (Amir Goldstein)  [Orabug: 33396682]  {CVE-2021-28950}\n- block: workaround to avoid self-deadlock in del_gendisk (Junxiao Bi)  [Orabug: 33392821]\n- net: bonding: add new option arp_allslaves for arp_ip_target (Venkat Venkatsubra)  [Orabug: 33352735]",
  "published": "2021-10-14T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 7.8,
  "epss": 0.0596,
  "epssPercentile": 0.93321,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el8uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el8",
      "fix": "ELSA-2021-9487",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9487",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-container-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el8",
      "fix": "ELSA-2021-9487",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9487",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el8uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el8uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el8uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el8uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el7uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools-libs",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el7uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el7uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python-perf",
      "release": "ol 8",
      "fixedVersion": "0:5.4.17-2136.300.7.el7uek",
      "fix": "ELSA-2021-9486",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9486",
      "released": "2021-10-14T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}