ELSA-2023-12232

ELSA-2023-12232 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2023-04-04

Description

[4.1.12-124.73.2]
- netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [Orabug: 35181628] {CVE-2023-1095}
- sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [Orabug: 35181461] {CVE-2023-1074}
- HID: check empty report_list in hid_validate_values() (Pietro Borrello) [Orabug: 35181168] {CVE-2023-1073}
- media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (Will Deacon) [Orabug: 35180270] {CVE-2020-0404}

[4.1.12-124.73.1]
- mm/mincore.c: make mincore() more conservative (Jiri Kosina) [Orabug: 35133279] {CVE-2019-5489}
- mm: introduce vma_is_anonymous(vma) helper (Oleg Nesterov) [Orabug: 35133279]
- Revert 'Change mincore() to count 'mapped' pages rather than 'cached' pages' (Linus Torvalds) [Orabug: 35124616]
- ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005831] {CVE-2023-0394}

Related CVEs

CVE-2023-1095

CVE-2023-0394

CVE-2019-5489

CVE-2020-0404

CVE-2023-1073

CVE-2023-1074

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.73.2.el6uek.src.rpm	347670a1d18fabc0a7b528f5e40b4668	-
	kernel-uek-4.1.12-124.73.2.el6uek.x86_64.rpm	53fcf51c02827ea68bc9aa71abd46260	-
	kernel-uek-debug-4.1.12-124.73.2.el6uek.x86_64.rpm	d7b8a78b83b813014a2a3e43abe147f2	-
	kernel-uek-debug-devel-4.1.12-124.73.2.el6uek.x86_64.rpm	65d8fb4bd1f18ad59ed7294cf1af340a	-
	kernel-uek-devel-4.1.12-124.73.2.el6uek.x86_64.rpm	246ca94e2a33dec617afacfcdf83d9b4	-
	kernel-uek-doc-4.1.12-124.73.2.el6uek.noarch.rpm	ba68be9224fb2256cb551629056c8bcc	-
	kernel-uek-firmware-4.1.12-124.73.2.el6uek.noarch.rpm	09b8dbf9cfa187d37097c6e0dc6df772	-
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.73.2.el7uek.src.rpm	a327829eb56e2b79cde431b12dc6c6b9	-
	kernel-uek-4.1.12-124.73.2.el7uek.x86_64.rpm	f7991d8f6d6471d90a4ea630cd1b864c	-
	kernel-uek-debug-4.1.12-124.73.2.el7uek.x86_64.rpm	3f79fa71529290526c72a25e88accf64	-
	kernel-uek-debug-devel-4.1.12-124.73.2.el7uek.x86_64.rpm	e9aad47f98b0ea85c52f7d1adf8e39bb	-
	kernel-uek-devel-4.1.12-124.73.2.el7uek.x86_64.rpm	4452ba41a5eebd2fd4ddd6a9293fd4fa	-
	kernel-uek-doc-4.1.12-124.73.2.el7uek.noarch.rpm	08729785fdafaf167de651cd52301867	-
	kernel-uek-firmware-4.1.12-124.73.2.el7uek.noarch.rpm	551600d00364262dfc6eabde81571076	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team