ELSA-2022-9852

ELSA-2022-9852 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2022-10-04

Description

[4.1.12-124.67.3]
- media: imon: Fix null-ptr-deref in imon_probe (Arvind Yadav) [Orabug: 31225377] {CVE-2017-16537}
- fbcon: remove soft scrollback code (Linus Torvalds) [Orabug: 31914703] {CVE-2020-14390}
- inet: use bigger hash table for IP ID generation (Eric Dumazet) [Orabug: 33778986] {CVE-2021-45486}
- ipv4: speedup ip_idents_reserve() (Eric Dumazet) [Orabug: 33778986]

[4.1.12-124.67.2]
- media: v4l: ioctl: Fix memory leak in video_usercopy (Sakari Ailus) [Orabug: 32759975] {CVE-2021-30002}
- usbnet: silence an unnecessary warning (Oliver Neukum) [Orabug: 23589045]
- futex: Remove requirement for lock_page() in get_futex_key() (Mel Gorman) [Orabug: 29048998] {CVE-2018-9422}
- mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (Zekun Shen) [Orabug: 33784271] {CVE-2021-43976}
- af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu) [Orabug: 34566754] {CVE-2022-3028}
- ext4: fix kernel infoleak via ext4_extent_header (Anirudh Rayabharam) [Orabug: 34579226] {CVE-2022-0850}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jann Horn) [Orabug: 34594265] {CVE-2022-2964}
- net: usb: ax88179_178a: initialize local variables before use (Phillip Potter) [Orabug: 34594265]
- net: usb: ax88179_178a: fix packet alignment padding (Jeremy Kerr) [Orabug: 34594265]
- ax88179_178a: Check for supported Wake-on-LAN modes (Florian Fainelli) [Orabug: 34594265]
- Net Driver: Add Cypress GX3 VID=04b4 PID=3610. (Allan Chou) [Orabug: 34594265]

[4.1.12-124.67.1]
- KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings (Eric Biggers) [Orabug: 27902747] {CVE-2017-7472}
- KEYS: prevent creating a different user's keyrings (Eric Biggers) [Orabug: 29013653] {CVE-2017-18270}
- scsi: sg: add sg_remove_request in sg_write (Wu Bo) [Orabug: 31350699] {CVE-2020-12770}
- xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua) [Orabug: 34503626] {CVE-2022-36879}
- ext4: verify dir block before splitting it (Jan Kara) [Orabug: 34555416] {CVE-2022-1184}
- dm verity: set DM_TARGET_IMMUTABLE feature flag (Sarthak Kukreti) [Orabug: 34555434] {CVE-2022-2503}

Related CVEs

CVE-2020-12770

CVE-2017-7472

CVE-2021-45486

CVE-2017-16537

CVE-2022-3028

CVE-2022-0850

CVE-2022-2503

CVE-2021-43976

CVE-2022-2964

CVE-2017-18270

CVE-2018-9422

CVE-2020-14390

CVE-2021-30002

CVE-2022-1184

CVE-2022-36879

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.67.3.el6uek.src.rpm	9a7c122aba0e637fb29de2158e7bc58eb30f3e7011f7ca081f29f7b03c846543	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-4.1.12-124.67.3.el6uek.x86_64.rpm	a88e4f6c87ce549e91794156ff2d2723238ebe90b2d7b3b2d8339f29651350f5	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-debug-4.1.12-124.67.3.el6uek.x86_64.rpm	00ab75fb0713f04789f34b2ee41fe71016bce7132e4394fde608658b42a3ccbf	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-debug-devel-4.1.12-124.67.3.el6uek.x86_64.rpm	f68c90c22534b32296daa4e66974276551da155132435eca4badb671f0d1879b	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-devel-4.1.12-124.67.3.el6uek.x86_64.rpm	e7ab1eeaa94859fe062a44e4eef6729d1eab9048fc463338cdb9dad96da45164	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-doc-4.1.12-124.67.3.el6uek.noarch.rpm	58323034cc37de71cf94ddc0e9197dbf049726bbb64e5d98076271f2f86ef93f	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-firmware-4.1.12-124.67.3.el6uek.noarch.rpm	aab49da13743bf2c67e4f10ddb0ab63f911e35575d5e743c4e51e2bef9412151	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.67.3.el7uek.src.rpm	df07489134829337c520cd0784dbcb4faa6b5d4fe231e56253e4a8b37f4e717b	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-4.1.12-124.67.3.el7uek.x86_64.rpm	f724506d97cd1b041ecbacd3fdf344fdfe93837909a36a0fb75cd7fb376684cb	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-debug-4.1.12-124.67.3.el7uek.x86_64.rpm	3b31266e00e2477b69b5ec3debaa1787193504732d4fadc87dba5c241afbff64	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-debug-devel-4.1.12-124.67.3.el7uek.x86_64.rpm	614d22f2c167f08adb17f3c73ba56871b2ec72c9a34e56547ae64ec8993f43c9	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-devel-4.1.12-124.67.3.el7uek.x86_64.rpm	54135232c6c8b917e77e9b54c1ef99ec7699b669b8bfdf9b258d4353a0cf511f	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-doc-4.1.12-124.67.3.el7uek.noarch.rpm	cd3c55287b6d9165a775ba3dac75ef2fd706532c06895382a13d275820775783	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-firmware-4.1.12-124.67.3.el7uek.noarch.rpm	5a93baf0ddfc309fb16285aa2e90807d5a16e64e0e00bb7834903a6c2df6954e	ELSA-2025-20007	ol7_x86_64_UEKR4

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team