ELSA-2023-12565

ELSA-2023-12565 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-07-04

Description

[4.1.12-124.76.2]
- firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [Orabug: 35493606] {CVE-2023-3159}
- ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [Orabug: 35448003] {CVE-2022-1679}
- dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) [Orabug: 35354880] {CVE-2023-2269}
- media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [Orabug: 35181652] {CVE-2023-1118}
- misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) [Orabug: 35180779] {CVE-2022-3424}

[4.1.12-124.76.1]
- ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) [Orabug: 35457204] {CVE-2023-34256}
- igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian) [Orabug: 35448048] {CVE-2022-20141}

Related CVEs

CVE-2023-3159

CVE-2023-2269

CVE-2023-1118

CVE-2022-3424

CVE-2023-34256

CVE-2022-1679

CVE-2022-20141

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (x86_64)	kernel-uek-4.1.12-124.76.2.el6uek.src.rpm	1f3998eb4bee4d8a512e8ee9ce4d4325e08fcaaead0e99c5916d49501579ab44	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-4.1.12-124.76.2.el6uek.x86_64.rpm	baab245f1ce95e647457fec1974d505ee18ac966016233d7ada63de976c717df	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-debug-4.1.12-124.76.2.el6uek.x86_64.rpm	326eabaeb4c4489ea152b85d93bfe64527e01abcc9f53420bd56b4424906e169	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-debug-devel-4.1.12-124.76.2.el6uek.x86_64.rpm	1ec79c97174c7098f849db77cf8ef9480c6bcd1c759c418c168ed3a70be450de	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-devel-4.1.12-124.76.2.el6uek.x86_64.rpm	f8b0376ed4b4ac7fd53cc0fe028ba03233d0cc174abb5d13cecf5d4b3b5cc0b7	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-doc-4.1.12-124.76.2.el6uek.noarch.rpm	77a73695a44f0a7082dce46daa11010cb90b4e262e6ecf942412b08c40de38d3	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS
	kernel-uek-firmware-4.1.12-124.76.2.el6uek.noarch.rpm	8bb7f2eb8b8879e4ed41676f41c1b86a937ceb07e30b90d2ff95aa5b6da49dc2	ELSA-2025-20007	ol6_x86_64_UEKR4_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team