ELSA-2018-4096

ELSA-2018-4096 - Unbreakable Enterprise kernel security update

Type:SECURITY
Severity:IMPORTANT
Release Date:2018-05-08

Description


[4.1.12-124.14.5]
- vhost/scsi: fix reuse of &vq->iov[out] in response (Benjamin Coddington) [Orabug: 27928330]

[4.1.12-124.14.4]
- kernel.spec: add requires system-release for OL7 (Brian Maly) [Orabug: 27955380]
- x86/kernel/traps.c: fix trace_die_notifier return value (Kris Van Hees) {CVE-2018-8897}
- x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski) {CVE-2018-8897}
- kvm/x86: fix icebp instruction handling (gregkh@linuxfoundation.org) {CVE-2018-1087}


Related CVEs


CVE-2018-8897
CVE-2018-1087

Updated Packages


Release/ArchitectureFilenameMD5sumSuperseded By Advisory
Oracle Linux 6 (x86_64) kernel-uek-4.1.12-124.14.5.el6uek.src.rpm9a3ddb999b569fd2b142891d237ce013-
kernel-uek-4.1.12-124.14.5.el6uek.x86_64.rpm24aa09d70b0166594662261791ae2226-
kernel-uek-debug-4.1.12-124.14.5.el6uek.x86_64.rpm8e43e4b232582e58fd61254c1bf8795b-
kernel-uek-debug-devel-4.1.12-124.14.5.el6uek.x86_64.rpmb2eb23dd41c55d40a48964366797022b-
kernel-uek-devel-4.1.12-124.14.5.el6uek.x86_64.rpm10bd701db368a281c0924487feb714af-
kernel-uek-doc-4.1.12-124.14.5.el6uek.noarch.rpm6d382ad88ff5b213083245aeb99a7f1b-
kernel-uek-firmware-4.1.12-124.14.5.el6uek.noarch.rpm65a385c7792605528cc2a9b3a7969fb3-
Oracle Linux 7 (x86_64) kernel-uek-4.1.12-124.14.5.el7uek.src.rpm3ffbf1e7b004b6d72e9e91d416f006ef-
kernel-uek-4.1.12-124.14.5.el7uek.x86_64.rpm1d549a52ec1dbe2bc080861be26031a7-
kernel-uek-debug-4.1.12-124.14.5.el7uek.x86_64.rpm090e3b60edbc74203fbb98e792f56246-
kernel-uek-debug-devel-4.1.12-124.14.5.el7uek.x86_64.rpm486a424cdab370c6b88553256e45d5bc-
kernel-uek-devel-4.1.12-124.14.5.el7uek.x86_64.rpm60600be46c5538a983584c061048a4a6-
kernel-uek-doc-4.1.12-124.14.5.el7uek.noarch.rpma23f618214c0514a83ee8f5b4a0450a6-
kernel-uek-firmware-4.1.12-124.14.5.el7uek.noarch.rpm67f313dbe29a731ef65e3a8174704a1e-



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete