ELSA-2023-12375

ELSA-2023-12375 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-06-07

Description

[4.1.12-124.75.3]
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) [Orabug: 35354791] {CVE-2023-2248}

[4.1.12-124.75.2]
- prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) [Orabug: 35354303] {CVE-2023-0458}
- kernel/sys.c: fix potential Spectre v1 issue (Gustavo A. R. Silva) [Orabug: 35354303]
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) [Orabug: 35250898] {CVE-2023-1670}
- net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983586] {CVE-2023-23454}

[4.1.12-124.75.1]
- media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) [Orabug: 35312830] {CVE-2023-28328}
- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) [Orabug: 35312683] {CVE-2023-2162}
- nvme: restrict management ioctls to admin (Keith Busch) [Orabug: 34619368] {CVE-2022-3169}

Related CVEs

CVE-2023-2162

CVE-2023-23454

CVE-2022-3169

CVE-2023-0458

CVE-2023-28328

CVE-2023-1670

CVE-2023-2248

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.75.3.el6uek.src.rpm	459b87742efd2f72445d0f6db89eaff2174a8a5d091dc340e5fccbe9414ab646	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-4.1.12-124.75.3.el6uek.x86_64.rpm	4758c0a10225bb010431d3179db3872fe19bce4a816d1429dda3b4b9cc9240c0	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-debug-4.1.12-124.75.3.el6uek.x86_64.rpm	587efd3658b07db030a4fed8bd7de9538fd21839e4df39a12015f9db6761c63d	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-debug-devel-4.1.12-124.75.3.el6uek.x86_64.rpm	dc99ac55f34da4dbbfb3dc095edbf40f3b3d10f3933f1ee53e68153e82a0a100	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-devel-4.1.12-124.75.3.el6uek.x86_64.rpm	66b15d71c7e422f358d856645f4043c6f8ea7b8da9aee815a521bc34736adeec	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-doc-4.1.12-124.75.3.el6uek.noarch.rpm	f9835b5959aaa59f82a0d5d841195258d7972c07eeda99aac8ccb2926905b2b2	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-firmware-4.1.12-124.75.3.el6uek.noarch.rpm	6fcdd4fa54127a4497922e2db22ee7a18946947cdecd98efc1eb77ff1ecb76db	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
Oracle Linux 7 (x86_64)	kernel-uek-4.1.12-124.75.3.el7uek.src.rpm	c4f0e41f2c9c3b1927492285823cee81ef16330fb0b36b286b7b0fb60823f6d7	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-4.1.12-124.75.3.el7uek.x86_64.rpm	14c68f4018b4e3c6bb160fd66c032d2a60869aabfe72a56697bc2b20aba29445	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-debug-4.1.12-124.75.3.el7uek.x86_64.rpm	60d47f512347035529b5c0dc7891e974abc643474e1af9c9cb2b174a7c81cafe	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-debug-devel-4.1.12-124.75.3.el7uek.x86_64.rpm	fa5cd8985d208c4d4db41bb7c84de52d09548ccde1cac6a78b3bb3c650f56655	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-devel-4.1.12-124.75.3.el7uek.x86_64.rpm	c74d7b7431f3aee42189d1392a16070e5b5fe9ee02470505156d28e12a3429c2	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-doc-4.1.12-124.75.3.el7uek.noarch.rpm	2362b301d0118866ff4317894d453790299e164879a26fb28a1cf50cc19d603e	ELSA-2025-20190	ol7_x86_64_UEKR4
	kernel-uek-firmware-4.1.12-124.75.3.el7uek.noarch.rpm	a0a38ac4e9924b6581d3ad8d0fc568cf7f5885c09d521c342707966cd1a2cfcf	ELSA-2025-20007	ol7_x86_64_UEKR4

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team