ELSA-2021-9030

ELSA-2021-9030 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2021-02-03

Description

[4.1.12-124.47.3]
- sysctl: handle overflow in proc_get_long (Christian Brauner) [Orabug: 31588015]

[4.1.12-124.47.2]
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu) [Orabug: 31350932] {CVE-2020-12653}
- lockd: don't use interval-based rebinding over TCP (Calum Mackay) [Orabug: 31435700]
- ALSA: rawmidi: Fix racy buffer resize under concurrent accesses (Takashi Iwai) [Orabug: 32240688] {CVE-2020-27786}
- xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park) [Orabug: 32247942] {CVE-2020-29568}
- xen/xenbus: Count pending messages for each watch (SeongJae Park) [Orabug: 32247942] {CVE-2020-29568}
- xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park) [Orabug: 32247942] {CVE-2020-29568}
- xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park) [Orabug: 32247942] {CVE-2020-29568}
- xen/xenbus: Allow watches discard events before queueing (SeongJae Park) [Orabug: 32247942] {CVE-2020-29568}
- KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson) [Orabug: 32251907]
- tty: Fix ->session locking (Jann Horn) [Orabug: 32266682] {CVE-2020-29660}
- tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn) [Orabug: 32266682] {CVE-2020-29660}
- tty: core: Use correct spinlock flavor in tiocspgrp() (Peter Hurley) [Orabug: 32266682] {CVE-2020-29660}
- mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui) [Orabug: 32349208] {CVE-2020-36158}

[4.1.12-124.47.1]
- target: fix XCOPY NAA identifier lookup (Mike Christie) [Orabug: 32374139] {CVE-2020-28374}

Related CVEs

CVE-2020-12653

CVE-2020-29568

CVE-2020-27786

CVE-2020-29660

CVE-2020-36158

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.47.3.el6uek.src.rpm	64cc9d3a0a4ab1aece65ebf0262bb7ea	ELSA-2021-9215
	kernel-uek-4.1.12-124.47.3.el6uek.x86_64.rpm	bf17ab02a64940bcb69897abab1b4f3a	ELSA-2021-9215
	kernel-uek-debug-4.1.12-124.47.3.el6uek.x86_64.rpm	e4047a4d85137223b545147235d7a57a	ELSA-2021-9215
	kernel-uek-debug-devel-4.1.12-124.47.3.el6uek.x86_64.rpm	93aa78db54b0fd2eefd9446797e7f423	ELSA-2021-9215
	kernel-uek-devel-4.1.12-124.47.3.el6uek.x86_64.rpm	ed810f1e4b775521a425194299fa6028	ELSA-2021-9215
	kernel-uek-doc-4.1.12-124.47.3.el6uek.noarch.rpm	926019cb47cd4e80cff555df1c2bf9f4	ELSA-2021-9215
	kernel-uek-firmware-4.1.12-124.47.3.el6uek.noarch.rpm	6b2c3345c091c94e8be4e973bddd888f	ELSA-2021-9215
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.47.3.el7uek.src.rpm	6f5c9dcbaef09a90ba251603f1251b75	ELSA-2021-9220
	kernel-uek-4.1.12-124.47.3.el7uek.x86_64.rpm	dce0299427fe73813521fc1ab86dea3c	ELSA-2021-9220
	kernel-uek-debug-4.1.12-124.47.3.el7uek.x86_64.rpm	7d0dcbaf376cd53a0f90a1dce4a55aae	ELSA-2021-9220
	kernel-uek-debug-devel-4.1.12-124.47.3.el7uek.x86_64.rpm	60ea5db6fd28ef50a369c3e0ce0fa73e	ELSA-2021-9220
	kernel-uek-devel-4.1.12-124.47.3.el7uek.x86_64.rpm	34a5906271d5089c809dfacf73e986fd	ELSA-2021-9220
	kernel-uek-doc-4.1.12-124.47.3.el7uek.noarch.rpm	7edd55d103ceb9889e4e69d6957e820a	ELSA-2021-9220
	kernel-uek-firmware-4.1.12-124.47.3.el7uek.noarch.rpm	a28870eecc0e46ac77232a73afa5f7c0	ELSA-2021-9215

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team