ELSA-2020-5710

ELSA-2020-5710 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2020-06-05

Description

[2.6.39-400.323.1]
- USB: adutux: fix use-after-free on disconnect (Johan Hovold) [Orabug: 31240297] {CVE-2019-19523}
- USB: core: Fix races in character device registration and deregistraion (Alan Stern) [Orabug: 31317669] {CVE-2019-19537}
- USB: iowarrior: fix use-after-free on disconnect (Johan Hovold) [Orabug: 31351064] {CVE-2019-19528}
- usb: iowarrior: fix deadlock on disconnect (Oliver Neukum) [Orabug: 31351064] {CVE-2019-19528}

[2.6.39-400.322.1]
- ipvs: reset ipvs pointer in netns (Julian Anastasov) [Orabug: 31027196]
- ipvs: prefer NETDEV_DOWN event to free cached dsts (Julian Anastasov) [Orabug: 31027196]
- HID: hiddev: do cleanup in failure of opening a device (Hillf Danton) [Orabug: 31206362] {CVE-2019-19527}
- HID: hiddev: avoid opening a disconnected device (Hillf Danton) [Orabug: 31206362] {CVE-2019-19527}
- HID: Fix assumption that devices have inputs (Alan Stern) [Orabug: 31208624] {CVE-2019-19532}

Related CVEs

CVE-2019-19523

CVE-2019-19528

CVE-2019-19537

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 5 (i386)	kernel-uek-2.6.39-400.323.1.el5uek.src.rpm	9ae88598986f9f9ab223f01ef26c211b	ELSA-2020-5936
	kernel-uek-2.6.39-400.323.1.el5uek.i686.rpm	f96509095413330c5534e580d02542ae	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.323.1.el5uek.i686.rpm	8b01aa5c761a7350fc7a781abb3e6f54	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.323.1.el5uek.i686.rpm	35ca0fb757aa01b2fcc5fab81166dd0e	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.323.1.el5uek.i686.rpm	a62530c91c52a7c51bbc745fd6ea1318	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.323.1.el5uek.noarch.rpm	c77f2801076239700781e7ca7815d2e7	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.323.1.el5uek.noarch.rpm	a700c87dae73a6a9f5fc3783de4dc7e7	ELSA-2020-5936
Oracle Linux 5 (x86_64)	kernel-uek-2.6.39-400.323.1.el5uek.src.rpm	9ae88598986f9f9ab223f01ef26c211b	ELSA-2020-5936
	kernel-uek-2.6.39-400.323.1.el5uek.x86_64.rpm	9be947e126f01ba371c7794bf83060d4	ELSA-2020-5936
	kernel-uek-debug-2.6.39-400.323.1.el5uek.x86_64.rpm	bfc88bc15d051911fc24d589cfd71137	ELSA-2020-5936
	kernel-uek-debug-devel-2.6.39-400.323.1.el5uek.x86_64.rpm	727ec0bc526e4d7c7aea3f9e9be10b56	ELSA-2020-5936
	kernel-uek-devel-2.6.39-400.323.1.el5uek.x86_64.rpm	96a58e324b4641a6f4030bb261d160c9	ELSA-2020-5936
	kernel-uek-doc-2.6.39-400.323.1.el5uek.noarch.rpm	c77f2801076239700781e7ca7815d2e7	ELSA-2020-5936
	kernel-uek-firmware-2.6.39-400.323.1.el5uek.noarch.rpm	a700c87dae73a6a9f5fc3783de4dc7e7	ELSA-2020-5936
Oracle Linux 6 (i386)	kernel-uek-2.6.39-400.323.1.el6uek.src.rpm	d4b0450f759172fbf94391ae49ef98df	ELSA-2021-9215
	kernel-uek-2.6.39-400.323.1.el6uek.i686.rpm	d9e625e67b3e93f87cacf17dc8f86d83	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.323.1.el6uek.i686.rpm	4765a4fcbd62a2399266f22b46f13feb	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.323.1.el6uek.i686.rpm	f23526ea7e027dab6118ae4c8d0be5b5	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.323.1.el6uek.i686.rpm	2fe298b7ca71876044975428f0a3081f	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.323.1.el6uek.noarch.rpm	c6ae176accad9c209d51bc6c5c98b081	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.323.1.el6uek.noarch.rpm	54f483299d9b75ac38f9735cb8dbef3d	ELSA-2021-9215
Oracle Linux 6 (x86_64)	kernel-uek-2.6.39-400.323.1.el6uek.src.rpm	d4b0450f759172fbf94391ae49ef98df	ELSA-2021-9215
	kernel-uek-2.6.39-400.323.1.el6uek.x86_64.rpm	196c1e0ae406f17d6ac282034bd1f152	ELSA-2021-9215
	kernel-uek-debug-2.6.39-400.323.1.el6uek.x86_64.rpm	a88ad641cf2b7c318251012bc47e7a91	ELSA-2021-9215
	kernel-uek-debug-devel-2.6.39-400.323.1.el6uek.x86_64.rpm	11fdb9365fa34435a13ec379def81441	ELSA-2021-9215
	kernel-uek-devel-2.6.39-400.323.1.el6uek.x86_64.rpm	d0b3ba0842f673a887b4c62ecff98431	ELSA-2021-9215
	kernel-uek-doc-2.6.39-400.323.1.el6uek.noarch.rpm	c6ae176accad9c209d51bc6c5c98b081	ELSA-2021-9215
	kernel-uek-firmware-2.6.39-400.323.1.el6uek.noarch.rpm	54f483299d9b75ac38f9735cb8dbef3d	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team