ELSA-2023-4377

ELSA-2023-4377 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2023-08-04

Description


[5.14.0-284.25.1.0.1_2]
- Fix KVM: x86/mmu: Fix race condition in direct_page_fault [Orabug: 35673032] {CVE-2022-45869}

[5.14.0-284.25.1_2]
- KVM: x86/mmu: Fix race condition in direct_page_fault
- prlimit: do_prlimit needs to have a speculation check {CVE-2023-0458}
- x86/speculation: Allow enabling STIBP with legacy IBRS {CVE-2023-1998}
- ipvlan: Fix out of bounds caused by unclear skb->cb {CVE-2023-3090}
- net/sched: flower: fix possible OOB write in fl_set_geneve_opt {CVE-2023-35788}


Related CVEs


CVE-2023-0458
CVE-2023-35788
CVE-2022-45869
CVE-2023-3090
CVE-2023-1998

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-284.25.1.0.1.el9_2.src.rpm73d127e830a753c298033798ca8d3b9a7b618fe6ee814efb0f923057e8c1ed13-ol9_aarch64_appstream
kernel-5.14.0-284.25.1.0.1.el9_2.src.rpm73d127e830a753c298033798ca8d3b9a7b618fe6ee814efb0f923057e8c1ed13-ol9_aarch64_baseos_latest
kernel-5.14.0-284.25.1.0.1.el9_2.src.rpm73d127e830a753c298033798ca8d3b9a7b618fe6ee814efb0f923057e8c1ed13-ol9_aarch64_codeready_builder
kernel-5.14.0-284.25.1.0.1.el9_2.src.rpm73d127e830a753c298033798ca8d3b9a7b618fe6ee814efb0f923057e8c1ed13-ol9_aarch64_u2_baseos_patch
bpftool-7.0.0-284.25.1.0.1.el9_2.aarch64.rpmc8871999d46292d4b081d7c89d561b048117cbcc6b2c3e040ea60d8c85617d17-ol9_aarch64_baseos_latest
bpftool-7.0.0-284.25.1.0.1.el9_2.aarch64.rpmc8871999d46292d4b081d7c89d561b048117cbcc6b2c3e040ea60d8c85617d17-ol9_aarch64_u2_baseos_patch
kernel-cross-headers-5.14.0-284.25.1.0.1.el9_2.aarch64.rpm3d274c93dcbc437b268b5db22055a405f5880b45bd65e0cea185a56015026b7a-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-284.25.1.0.1.el9_2.aarch64.rpm4a4055d0f9b42b1f52a8be28bf2cc7dfdc590d2e1391f5b330bff4a64ed4f37f-ol9_aarch64_appstream
kernel-tools-5.14.0-284.25.1.0.1.el9_2.aarch64.rpm576e13af5fbea0c7c8f390f6d7c81baf5ccbd6f3ac460cd20d947c91446acadc-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-284.25.1.0.1.el9_2.aarch64.rpm576e13af5fbea0c7c8f390f6d7c81baf5ccbd6f3ac460cd20d947c91446acadc-ol9_aarch64_u2_baseos_patch
kernel-tools-libs-5.14.0-284.25.1.0.1.el9_2.aarch64.rpm6c2d537e238ee062ffce6892d3e4e0b59669ff86ff5fd3eee00030735141f9a6-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-284.25.1.0.1.el9_2.aarch64.rpm6c2d537e238ee062ffce6892d3e4e0b59669ff86ff5fd3eee00030735141f9a6-ol9_aarch64_u2_baseos_patch
kernel-tools-libs-devel-5.14.0-284.25.1.0.1.el9_2.aarch64.rpm1da96b2bac816761ce02800716c60fcc04d0e9bbadd872e156f0a9d60d2fd53b-ol9_aarch64_codeready_builder
perf-5.14.0-284.25.1.0.1.el9_2.aarch64.rpme99758efa33567c9e148f55237e1c005ebc31d37b68572205b338382576fad4e-ol9_aarch64_appstream
python3-perf-5.14.0-284.25.1.0.1.el9_2.aarch64.rpmd9a090d5971e2495d7a6e1cf9406b986dea2939bf14648180e05741566426935-ol9_aarch64_baseos_latest
python3-perf-5.14.0-284.25.1.0.1.el9_2.aarch64.rpmd9a090d5971e2495d7a6e1cf9406b986dea2939bf14648180e05741566426935-ol9_aarch64_u2_baseos_patch
Oracle Linux 9 (x86_64) kernel-5.14.0-284.25.1.0.1.el9_2.src.rpm73d127e830a753c298033798ca8d3b9a7b618fe6ee814efb0f923057e8c1ed13-ol9_x86_64_appstream
kernel-5.14.0-284.25.1.0.1.el9_2.src.rpm73d127e830a753c298033798ca8d3b9a7b618fe6ee814efb0f923057e8c1ed13-ol9_x86_64_baseos_latest
kernel-5.14.0-284.25.1.0.1.el9_2.src.rpm73d127e830a753c298033798ca8d3b9a7b618fe6ee814efb0f923057e8c1ed13-ol9_x86_64_codeready_builder
kernel-5.14.0-284.25.1.0.1.el9_2.src.rpm73d127e830a753c298033798ca8d3b9a7b618fe6ee814efb0f923057e8c1ed13-ol9_x86_64_u2_baseos_patch
bpftool-7.0.0-284.25.1.0.1.el9_2.x86_64.rpmc79d468e01f4e005ed13d63764baa8fd5e92ce312fdc27a55b60f6eab4e4610c-ol9_x86_64_baseos_latest
bpftool-7.0.0-284.25.1.0.1.el9_2.x86_64.rpmc79d468e01f4e005ed13d63764baa8fd5e92ce312fdc27a55b60f6eab4e4610c-ol9_x86_64_u2_baseos_patch
kernel-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmf309c4f4d42d17ec5c55d7c32a8c7104f6a759c2abd97b754c481309456b7da7-ol9_x86_64_baseos_latest
kernel-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmf309c4f4d42d17ec5c55d7c32a8c7104f6a759c2abd97b754c481309456b7da7-ol9_x86_64_u2_baseos_patch
kernel-abi-stablelists-5.14.0-284.25.1.0.1.el9_2.noarch.rpm74f1f4a351ad51050f0fa19d3e006ae937c77887374b49f5c487c460012448f3-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-284.25.1.0.1.el9_2.noarch.rpm74f1f4a351ad51050f0fa19d3e006ae937c77887374b49f5c487c460012448f3-ol9_x86_64_u2_baseos_patch
kernel-core-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm826cea6ffe6d6676957189e15aaaaeff932de0cf1a6b6683a5283b55536b3e5a-ol9_x86_64_baseos_latest
kernel-core-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm826cea6ffe6d6676957189e15aaaaeff932de0cf1a6b6683a5283b55536b3e5a-ol9_x86_64_u2_baseos_patch
kernel-cross-headers-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmedbbce0c0794a60cc906c24ce6a5dac37e13960cb878440c9fc310518fafd447-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmab86385056395054cea7d987842f92f989e528b8080159a901a42dbc5ea6bf1f-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmab86385056395054cea7d987842f92f989e528b8080159a901a42dbc5ea6bf1f-ol9_x86_64_u2_baseos_patch
kernel-debug-core-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm9bb54d307b95837c901b0174faccfcca85389ad981cc292be2a8e09743026815-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm9bb54d307b95837c901b0174faccfcca85389ad981cc292be2a8e09743026815-ol9_x86_64_u2_baseos_patch
kernel-debug-devel-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm687ddbc9cbcc1ca31f11c9b4ae28756c435836e45eab6f5e2a516655ae4f8760-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm348df208760fea1925fd49245cfd72b2970168c59b01baead170411e9152a3a0-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm339d6c418f654f3570a31f822836a0afd155c562f1b47bbe40c7b0f8c742f20e-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm339d6c418f654f3570a31f822836a0afd155c562f1b47bbe40c7b0f8c742f20e-ol9_x86_64_u2_baseos_patch
kernel-debug-modules-core-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm5aeb5c7f9437613c76cf66ad348f3df3eb3d82269e966444f40348e9678679f9-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm5aeb5c7f9437613c76cf66ad348f3df3eb3d82269e966444f40348e9678679f9-ol9_x86_64_u2_baseos_patch
kernel-debug-modules-extra-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmaa81e80e22e68dd69cc2b58b1cf879bbe640808107520c5021218e18889714a8-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmaa81e80e22e68dd69cc2b58b1cf879bbe640808107520c5021218e18889714a8-ol9_x86_64_u2_baseos_patch
kernel-debug-uki-virt-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmf9eacb1adfc844d7bbb0e5c54bf7724036b5e712606cb50f3a536c9b43becdd7-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmf9eacb1adfc844d7bbb0e5c54bf7724036b5e712606cb50f3a536c9b43becdd7-ol9_x86_64_u2_baseos_patch
kernel-devel-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm23eb30c23f2b0563940a322386ac74d2ffba4af6fd1c1b926ee9b40268968a57-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm4858e5db144a23d378cffd8fbc8dc22ffb89e6ef6014d5d92480d7a53dae8bb2-ol9_x86_64_appstream
kernel-doc-5.14.0-284.25.1.0.1.el9_2.noarch.rpm0567e71c61162749641b1ef901c60e22a0047e3c8ecae618a8f858ef5556eda4-ol9_x86_64_appstream
kernel-headers-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmc8d1b542e74bd375b293a0c15583b63fea1f01b95015be71cd532e2c150e0eae-ol9_x86_64_appstream
kernel-modules-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmcdadc44e95f86ce930dda35dc6fc84018bef79816fad812fe40766585f03ddb3-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmcdadc44e95f86ce930dda35dc6fc84018bef79816fad812fe40766585f03ddb3-ol9_x86_64_u2_baseos_patch
kernel-modules-core-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmd194b5290069dcad893af680a3247b8fd5f70230728328d5e949f39bb25128cf-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmd194b5290069dcad893af680a3247b8fd5f70230728328d5e949f39bb25128cf-ol9_x86_64_u2_baseos_patch
kernel-modules-extra-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm7be412a1a97d20e108c30b3e1d12962e624c34b89eb084ea16b7bf96cd57430b-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm7be412a1a97d20e108c30b3e1d12962e624c34b89eb084ea16b7bf96cd57430b-ol9_x86_64_u2_baseos_patch
kernel-tools-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm3da2d897d24bfd04120de3478142c6f08f08dbf96840b64727a5a090d9d60d32-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm3da2d897d24bfd04120de3478142c6f08f08dbf96840b64727a5a090d9d60d32-ol9_x86_64_u2_baseos_patch
kernel-tools-libs-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm771cd92801064080869fbacc159142f163987cc2645f36495f50e155a21484de-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm771cd92801064080869fbacc159142f163987cc2645f36495f50e155a21484de-ol9_x86_64_u2_baseos_patch
kernel-tools-libs-devel-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm054bbc63ba15ab904368c618e6dfeb03e76a6bd1bbd83f94b553146fcaf3df2d-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-284.25.1.0.1.el9_2.x86_64.rpme8ee1e914a81ee1b61e6992068d451a91c949c81e73343ee6bdf8736c033aa7c-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-284.25.1.0.1.el9_2.x86_64.rpme8ee1e914a81ee1b61e6992068d451a91c949c81e73343ee6bdf8736c033aa7c-ol9_x86_64_u2_baseos_patch
perf-5.14.0-284.25.1.0.1.el9_2.x86_64.rpmcf2510eb951234d171c27729fc4f0aba15c104f582aab230b199d339f92ad1c4-ol9_x86_64_appstream
python3-perf-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm64535edaf98245c0fa85bb630b62899c2d08d3d8b7f7e20cd8d25c938fe52d55-ol9_x86_64_baseos_latest
python3-perf-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm64535edaf98245c0fa85bb630b62899c2d08d3d8b7f7e20cd8d25c938fe52d55-ol9_x86_64_u2_baseos_patch
rtla-5.14.0-284.25.1.0.1.el9_2.x86_64.rpm096d23b3a06f592d5ad8691c070bc7c3155459eb64ddd66d3314ac7d5d3e9ac9-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete