ELSA-2023-13047

ELSA-2023-13047 - kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-12-14

Description

- [5.14.0-362.13.0.1_3.OL9]
- cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) (Steve French) {CVE-2023-1192}
- fs/smb/client: Reset password pointer to NULL (Quang Le) (Steve French) {CVE-2023-5345}
- igb: set max size RX buffer when store bad packet is enabled (Tony Nguyen) (David S. Miller) {CVE-2023-45871}

- [5.14.0-362.8.1_3.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Disable unified kernel image package build
- Add Oracle Linux IMA certificates

- 5.14.0
- Debranding patches copied from Rocky Linux (Louis Abel and Sherif Nagy from RESF)

Related CVEs

CVE-2023-1192

CVE-2023-5345

CVE-2023-45871

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	kernel-5.14.0-362.13.0.1.el9_3.src.rpm	7c5c388ab660f144e41680e9ec279818	-	ol9_aarch64_appstream
	kernel-5.14.0-362.13.0.1.el9_3.src.rpm	7c5c388ab660f144e41680e9ec279818	-	ol9_aarch64_baseos_latest
	kernel-5.14.0-362.13.0.1.el9_3.src.rpm	7c5c388ab660f144e41680e9ec279818	-	ol9_aarch64_codeready_builder
	bpftool-7.2.0-362.13.0.1.el9_3.aarch64.rpm	dee80b7a481e4db0385a29300b9db512	-	ol9_aarch64_baseos_latest
	kernel-cross-headers-5.14.0-362.13.0.1.el9_3.aarch64.rpm	e4dbdc1810ebe54fc624e2e3fcd32079	-	ol9_aarch64_codeready_builder
	kernel-headers-5.14.0-362.13.0.1.el9_3.aarch64.rpm	6ba261a3d30c4ed1a9606af3de462288	-	ol9_aarch64_appstream
	kernel-tools-5.14.0-362.13.0.1.el9_3.aarch64.rpm	488dae90965579280379740c67d9a314	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-5.14.0-362.13.0.1.el9_3.aarch64.rpm	39dc0c5da367f93c2418818df4c2841d	-	ol9_aarch64_baseos_latest
	kernel-tools-libs-devel-5.14.0-362.13.0.1.el9_3.aarch64.rpm	01e8ce671c24aa742df49fbb34935e87	-	ol9_aarch64_codeready_builder
	perf-5.14.0-362.13.0.1.el9_3.aarch64.rpm	504ce8e5a15106ccf65661285326df84	-	ol9_aarch64_appstream
	python3-perf-5.14.0-362.13.0.1.el9_3.aarch64.rpm	930b2eceb8789ecd1839c2249a79dc30	-	ol9_aarch64_baseos_latest
Oracle Linux 9 (x86_64)	kernel-5.14.0-362.13.0.1.el9_3.src.rpm	7c5c388ab660f144e41680e9ec279818	-	ol9_x86_64_appstream
	kernel-5.14.0-362.13.0.1.el9_3.src.rpm	7c5c388ab660f144e41680e9ec279818	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-362.13.0.1.el9_3.src.rpm	7c5c388ab660f144e41680e9ec279818	-	ol9_x86_64_codeready_builder
	bpftool-7.2.0-362.13.0.1.el9_3.x86_64.rpm	f44268bb27625308f7699aad9fa29bc1	-	ol9_x86_64_baseos_latest
	kernel-5.14.0-362.13.0.1.el9_3.x86_64.rpm	99471fb0b484a462ffe7bdbaedd2e090	-	ol9_x86_64_baseos_latest
	kernel-abi-stablelists-5.14.0-362.13.0.1.el9_3.noarch.rpm	5e35e498ea7e817d6cbc1f90c8d14706	-	ol9_x86_64_baseos_latest
	kernel-core-5.14.0-362.13.0.1.el9_3.x86_64.rpm	a6249e980cc6d74d05676f5c41d8d45b	-	ol9_x86_64_baseos_latest
	kernel-cross-headers-5.14.0-362.13.0.1.el9_3.x86_64.rpm	14b187f4198bfc43709bb175a1ddc166	-	ol9_x86_64_codeready_builder
	kernel-debug-5.14.0-362.13.0.1.el9_3.x86_64.rpm	59478d2b330e26cb5a49e3d935a14f2e	-	ol9_x86_64_baseos_latest
	kernel-debug-core-5.14.0-362.13.0.1.el9_3.x86_64.rpm	004348e5fe93714abf88f032cf336cc8	-	ol9_x86_64_baseos_latest
	kernel-debug-devel-5.14.0-362.13.0.1.el9_3.x86_64.rpm	50bc5e75bc89e7c074f7cbc98d9c821d	-	ol9_x86_64_appstream
	kernel-debug-devel-matched-5.14.0-362.13.0.1.el9_3.x86_64.rpm	5c9eb56fb2cb95aa1340c96601d0d35c	-	ol9_x86_64_appstream
	kernel-debug-modules-5.14.0-362.13.0.1.el9_3.x86_64.rpm	95a8faca9702d7ee34ff41f8d998c37a	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-core-5.14.0-362.13.0.1.el9_3.x86_64.rpm	4bf1b613a6db3150214cbe65089f14a5	-	ol9_x86_64_baseos_latest
	kernel-debug-modules-extra-5.14.0-362.13.0.1.el9_3.x86_64.rpm	9f68bb90352a8a1c982ca352bd7b2b4c	-	ol9_x86_64_baseos_latest
	kernel-devel-5.14.0-362.13.0.1.el9_3.x86_64.rpm	5f5c4e99b280734641ab7d75b90433cc	-	ol9_x86_64_appstream
	kernel-devel-matched-5.14.0-362.13.0.1.el9_3.x86_64.rpm	750e65d6c413fff1ef59793dc505fc67	-	ol9_x86_64_appstream
	kernel-doc-5.14.0-362.13.0.1.el9_3.noarch.rpm	5b2667bee1fbc8dc8c253d66270dae2a	-	ol9_x86_64_appstream
	kernel-headers-5.14.0-362.13.0.1.el9_3.x86_64.rpm	f3eaaa36bf57afc18f3215bc88a133ab	-	ol9_x86_64_appstream
	kernel-modules-5.14.0-362.13.0.1.el9_3.x86_64.rpm	768b741fde63199d376114678d999198	-	ol9_x86_64_baseos_latest
	kernel-modules-core-5.14.0-362.13.0.1.el9_3.x86_64.rpm	dbee3da8709ebb5f24af335ea2ce405b	-	ol9_x86_64_baseos_latest
	kernel-modules-extra-5.14.0-362.13.0.1.el9_3.x86_64.rpm	e920893aee408d809722f23ca33ef31d	-	ol9_x86_64_baseos_latest
	kernel-tools-5.14.0-362.13.0.1.el9_3.x86_64.rpm	b805f4078fbeda8c85d049be1c68d38c	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-5.14.0-362.13.0.1.el9_3.x86_64.rpm	1752bb4dfb86d03a3fc01938457fbd4e	-	ol9_x86_64_baseos_latest
	kernel-tools-libs-devel-5.14.0-362.13.0.1.el9_3.x86_64.rpm	54ce6483944b642f299a31b2e80eda89	-	ol9_x86_64_codeready_builder
	perf-5.14.0-362.13.0.1.el9_3.x86_64.rpm	47796474a63f885b145b27165216f0fe	-	ol9_x86_64_appstream
	python3-perf-5.14.0-362.13.0.1.el9_3.x86_64.rpm	8a47cc1eb67a9cba73f7f3dda86785ba	-	ol9_x86_64_baseos_latest
	rtla-5.14.0-362.13.0.1.el9_3.x86_64.rpm	6ca96a3334fceefaace73f51c2880a32	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team