ELSA-2021-9458

ELSA-2021-9458 - Unbreakable Enterprise kernel-container security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2021-09-22

Description


[4.14.35-2047.507.7.5.el7]
- Bluetooth: defer cleanup of resources in hci_unregister_dev() (Tetsuo Handa) [Orabug: 33369947] {CVE-2021-3573}
- Bluetooth: use correct lock to prevent UAF of hdev object (Lin Ma) [Orabug: 33369947]
- Bluetooth: fix the erroneous flush_work() order (Lin Ma) [Orabug: 33369947] {CVE-2021-3564}
- ext4: fix race writing to an inline_data file while its xattrs are changing (Theodore Ts'o) [Orabug: 33369956] {CVE-2021-40490}
- fuse: fix bad inode (Miklos Szeredi) [Orabug: 33369955] {CVE-2020-36322}
- tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. (Haoran Luo) [Orabug: 33369954] {CVE-2021-3679}
- virtio_console: Assure used length from device is limited (Xie Yongji) [Orabug: 33369953] {CVE-2021-38160}
- sctp: validate from_addr_param return (Marcelo Ricardo Leitner) [Orabug: 33369952] {CVE-2021-3655}


Related CVEs


CVE-2021-3564
CVE-2020-36322
CVE-2021-3679
CVE-2021-40490
CVE-2021-3655
CVE-2021-38160
CVE-2021-3573

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 7 (x86_64) kernel-uek-container-4.14.35-2047.507.7.5.el7.src.rpm5419c2073fd8f4e177ac8a02e1e7556e51144b001564b70223f0f8a216c2d694ELSA-2025-20190ol7_x86_64_olcne
kernel-uek-container-4.14.35-2047.507.7.5.el7.src.rpm5419c2073fd8f4e177ac8a02e1e7556e51144b001564b70223f0f8a216c2d694ELSA-2025-20190ol7_x86_64_olcne11
kernel-uek-container-4.14.35-2047.507.7.5.el7.x86_64.rpm28bacb60dab7f16228d154b272a58a0b6486891d7cc74e148d796c7ff2837869ELSA-2025-20190ol7_x86_64_olcne
kernel-uek-container-4.14.35-2047.507.7.5.el7.x86_64.rpm28bacb60dab7f16228d154b272a58a0b6486891d7cc74e148d796c7ff2837869ELSA-2025-20190ol7_x86_64_olcne11



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete