ELSA-2023-12825

ELSA-2023-12825 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-09-23

Description

[5.4.17-2136.323.8.2]
- netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307]
- netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307]
- netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824307]
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824307] {CVE-2023-42753}

Related CVEs

CVE-2023-42753

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	kernel-uek-5.4.17-2136.323.8.2.el7uek.src.rpm	f698a191306d7f6bbbb2a449a32bc34b233d4dcad0c78e3b14ed9f05265c827c	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-5.4.17-2136.323.8.2.el7uek.aarch64.rpm	17a9d25a7f0c85da7202beea4fa481626d9da77e93b063c352ac0781e4af3ae2	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-debug-5.4.17-2136.323.8.2.el7uek.aarch64.rpm	2049cbb31f6e9ceb5d6f4a8accf8c51e52139095a5b999c0b46897c3ff6d5954	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-debug-devel-5.4.17-2136.323.8.2.el7uek.aarch64.rpm	5892349a6fcf7dfac46850f9a8bc89f54e7282d92c17877b13de5e9d6dafa9e3	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-devel-5.4.17-2136.323.8.2.el7uek.aarch64.rpm	10e084fc23767b3e8d73411ac2d5a970f953569850d97fb2ff06759bb4417e6c	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-doc-5.4.17-2136.323.8.2.el7uek.noarch.rpm	7697b6cee1653dd76694cbe883035a95b1513e234b216e70e0cc837b6f1578ed	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-tools-5.4.17-2136.323.8.2.el7uek.aarch64.rpm	da30322b1e5d68339b66581206785a82277e9d7c4817890f0453ff6a556897f8	ELSA-2025-20190	ol7_aarch64_UEKR6
	kernel-uek-tools-libs-5.4.17-2136.323.8.2.el7uek.aarch64.rpm	51f69fbd58899ac7d6eef47b3559edb45c082c550f3900aa1beb39fa3ec98e81	ELSA-2025-20019	ol7_aarch64_UEKR6
	perf-5.4.17-2136.323.8.2.el7uek.aarch64.rpm	511da1e5223f495343ca5b2e6b441222c66e7af325cb3cd1fe870c1f4b1b6787	ELSA-2025-20019	ol7_aarch64_UEKR6
	python-perf-5.4.17-2136.323.8.2.el7uek.aarch64.rpm	8c70a393d69bb6ff1407d0c923464360a4b9cc1c113368fba01375a1b0e0c5b3	ELSA-2025-20019	ol7_aarch64_UEKR6
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2136.323.8.2.el7uek.src.rpm	f698a191306d7f6bbbb2a449a32bc34b233d4dcad0c78e3b14ed9f05265c827c	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-5.4.17-2136.323.8.2.el7uek.x86_64.rpm	70837c46441eb8cd79f3da67ab1cbd3686f0f1f156465c9bcf95c5869ec7a729	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2136.323.8.2.el7uek.x86_64.rpm	1d8d923ba0e1839d11742e1d5e25532e4183e212e44f24634cedc0eddd74f508	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2136.323.8.2.el7uek.x86_64.rpm	0cd2df8db2d8920eb95f4b35e86715b97601a1140f87de1250ba72122f275200	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2136.323.8.2.el7uek.x86_64.rpm	1df476b64881c36884d1f7da132e6b434dfcf090ae35b6d4ed6649ae0b0c1e80	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2136.323.8.2.el7uek.noarch.rpm	7697b6cee1653dd76694cbe883035a95b1513e234b216e70e0cc837b6f1578ed	ELSA-2025-20190	ol7_x86_64_UEKR6
	kernel-uek-tools-5.4.17-2136.323.8.2.el7uek.x86_64.rpm	a3ef7681131e92f2e2ee0d4da3ac3c5f06d98a21fb961c9527372520efd0da58	ELSA-2025-20190	ol7_x86_64_UEKR6
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2136.323.8.2.el8uek.src.rpm	a5c8302114a59947b98c330743f0df977f60c3451e0ab65e9dea63c999f9981b	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.323.8.2.el8uek.src.rpm	a5c8302114a59947b98c330743f0df977f60c3451e0ab65e9dea63c999f9981b	-	ol8_aarch64_u8_baseos_patch
	kernel-uek-5.4.17-2136.323.8.2.el8uek.aarch64.rpm	084d296ffa1dda0ed767b91cd83e28463af3e9a3086929a216ab497891c7a4a8	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.323.8.2.el8uek.aarch64.rpm	084d296ffa1dda0ed767b91cd83e28463af3e9a3086929a216ab497891c7a4a8	-	ol8_aarch64_u8_baseos_patch
	kernel-uek-debug-5.4.17-2136.323.8.2.el8uek.aarch64.rpm	5673d12614cace197d2819c4f817c83a0436abf0f179d754faa8497423e1f719	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-5.4.17-2136.323.8.2.el8uek.aarch64.rpm	5673d12614cace197d2819c4f817c83a0436abf0f179d754faa8497423e1f719	-	ol8_aarch64_u8_baseos_patch
	kernel-uek-debug-devel-5.4.17-2136.323.8.2.el8uek.aarch64.rpm	cbefd87e64d9283abfc284c0d42d81719e81e6df12e2f1b1323c4d3b058a34a4	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-devel-5.4.17-2136.323.8.2.el8uek.aarch64.rpm	cbefd87e64d9283abfc284c0d42d81719e81e6df12e2f1b1323c4d3b058a34a4	-	ol8_aarch64_u8_baseos_patch
	kernel-uek-devel-5.4.17-2136.323.8.2.el8uek.aarch64.rpm	645c90f12b51f70e033552fb516dd2ad8025a1743dd623da852315bba6e2e47e	-	ol8_aarch64_baseos_latest
	kernel-uek-devel-5.4.17-2136.323.8.2.el8uek.aarch64.rpm	645c90f12b51f70e033552fb516dd2ad8025a1743dd623da852315bba6e2e47e	-	ol8_aarch64_u8_baseos_patch
	kernel-uek-doc-5.4.17-2136.323.8.2.el8uek.noarch.rpm	b070eda3855b93b16fb4a3ff0de2c611b7675f6da19ca66430f11b300480c4ae	-	ol8_aarch64_baseos_latest
	kernel-uek-doc-5.4.17-2136.323.8.2.el8uek.noarch.rpm	b070eda3855b93b16fb4a3ff0de2c611b7675f6da19ca66430f11b300480c4ae	-	ol8_aarch64_u8_baseos_patch
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2136.323.8.2.el8uek.src.rpm	a5c8302114a59947b98c330743f0df977f60c3451e0ab65e9dea63c999f9981b	-	ol8_x86_64_UEKR6
	kernel-uek-5.4.17-2136.323.8.2.el8uek.x86_64.rpm	ec2753a837fbe4696fdd78abe79d5bdcd141933ad7750fb7159537bd929a1b07	-	ol8_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2136.323.8.2.el8uek.x86_64.rpm	639263f64cf65f32a1b34e7d4b197cfe8b687c6c5d6d3f7decb78b1688255438	-	ol8_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2136.323.8.2.el8uek.x86_64.rpm	a6f675271dec2e86a637f46930157ae0ec912634a64571b93521c290bac20c0b	-	ol8_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2136.323.8.2.el8uek.x86_64.rpm	2d547fb22f01edc574c9e67a1075aa93f9bb612353c7a65ff7f91fc78eb55800	-	ol8_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2136.323.8.2.el8uek.noarch.rpm	b070eda3855b93b16fb4a3ff0de2c611b7675f6da19ca66430f11b300480c4ae	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team