Stay Connected:

ELSA-2023-5069

ELSA-2023-5069 - kernel security, bug fix, and enhancement update

Type:SECURITY
Impact:IMPORTANT
Release Date:2023-09-15

Description


- [5.14.0-284.30.0.1_2.OL9]
- x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637}
- x86/speculation: Restore speculation related MSRs {CVE-2023-1637}
- x86/pm: Save the MSR validity status at context setup {CVE-2023-1637}
- x86/pm: Fix false positive kmemleak report in msr_build_context() {CVE-2023-1637}
- x86/cpu: Restore AMD's DE_CFG MSR after resume {CVE-2023-1637}
- x86/pm: Add enumeration check before spec MSRs {CVE-2023-1637}
- arm64: efi: Execute runtime services from a dedicated {CVE-2023-21102}
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3390}
- netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain {CVE-2023-3390}
- netfilter: nf_tables: unbind non-anonymous set if rule construction fails {CVE-2023-3390}
- netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID {CVE-2023-4147}
- netfilter: nf_tables: do not ignore genmask when looking up chain by id {CVE-2023-31248}
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001}
- netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004}
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}


Related CVEs


CVE-2023-1637
CVE-2023-3776
CVE-2023-21102
CVE-2023-4147
CVE-2023-3390
CVE-2023-31248
CVE-2023-4004
CVE-2023-35001

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-284.30.0.1.el9_2.src.rpm54f93134cc1671b78c552650721530d16e4dfeb67005c263d828cd3ca49abcec-ol9_aarch64_appstream
kernel-5.14.0-284.30.0.1.el9_2.src.rpm54f93134cc1671b78c552650721530d16e4dfeb67005c263d828cd3ca49abcec-ol9_aarch64_baseos_latest
kernel-5.14.0-284.30.0.1.el9_2.src.rpm54f93134cc1671b78c552650721530d16e4dfeb67005c263d828cd3ca49abcec-ol9_aarch64_codeready_builder
kernel-5.14.0-284.30.0.1.el9_2.src.rpm54f93134cc1671b78c552650721530d16e4dfeb67005c263d828cd3ca49abcec-ol9_aarch64_u2_baseos_patch
bpftool-7.0.0-284.30.0.1.el9_2.aarch64.rpm1ed41486209f6e9e9674316d4db1a68f1cff91b29173690f320a6c0e1a04e4ab-ol9_aarch64_baseos_latest
bpftool-7.0.0-284.30.0.1.el9_2.aarch64.rpm1ed41486209f6e9e9674316d4db1a68f1cff91b29173690f320a6c0e1a04e4ab-ol9_aarch64_u2_baseos_patch
kernel-cross-headers-5.14.0-284.30.0.1.el9_2.aarch64.rpm0f4ba7924bc89ffb343081401b5de753ee9a44c99b3f5ad74f56395a4bf6a2a4-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-284.30.0.1.el9_2.aarch64.rpm970a85ab4db7650ad438766b98353c908db146cd589c6bb89c96b5bf1d08b315-ol9_aarch64_appstream
kernel-tools-5.14.0-284.30.0.1.el9_2.aarch64.rpm04e91d96b910fea86ff6bd6bee79aae033c501516f855c13c9454495b0b63dae-ol9_aarch64_baseos_latest
kernel-tools-5.14.0-284.30.0.1.el9_2.aarch64.rpm04e91d96b910fea86ff6bd6bee79aae033c501516f855c13c9454495b0b63dae-ol9_aarch64_u2_baseos_patch
kernel-tools-libs-5.14.0-284.30.0.1.el9_2.aarch64.rpma66ea59764df1e48fe3b001018d236806f68f364e7bc92f823891b2e8aadb173-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-284.30.0.1.el9_2.aarch64.rpma66ea59764df1e48fe3b001018d236806f68f364e7bc92f823891b2e8aadb173-ol9_aarch64_u2_baseos_patch
kernel-tools-libs-devel-5.14.0-284.30.0.1.el9_2.aarch64.rpme1eb0b87ec52b856c7abe04a90ab401a42582c88f923bc7e3bb7e4a1853a141f-ol9_aarch64_codeready_builder
perf-5.14.0-284.30.0.1.el9_2.aarch64.rpmba99e4e657c339f06593c72e8cf512c209042bef5c6308dfaef710d49251239f-ol9_aarch64_appstream
python3-perf-5.14.0-284.30.0.1.el9_2.aarch64.rpm789cafee3d9dada18b9bd11e4ef320a706dbf7eccd51f930524421566217497f-ol9_aarch64_baseos_latest
python3-perf-5.14.0-284.30.0.1.el9_2.aarch64.rpm789cafee3d9dada18b9bd11e4ef320a706dbf7eccd51f930524421566217497f-ol9_aarch64_u2_baseos_patch
Oracle Linux 9 (x86_64) kernel-5.14.0-284.30.0.1.el9_2.src.rpm54f93134cc1671b78c552650721530d16e4dfeb67005c263d828cd3ca49abcec-ol9_x86_64_appstream
kernel-5.14.0-284.30.0.1.el9_2.src.rpm54f93134cc1671b78c552650721530d16e4dfeb67005c263d828cd3ca49abcec-ol9_x86_64_baseos_latest
kernel-5.14.0-284.30.0.1.el9_2.src.rpm54f93134cc1671b78c552650721530d16e4dfeb67005c263d828cd3ca49abcec-ol9_x86_64_codeready_builder
kernel-5.14.0-284.30.0.1.el9_2.src.rpm54f93134cc1671b78c552650721530d16e4dfeb67005c263d828cd3ca49abcec-ol9_x86_64_u2_baseos_patch
bpftool-7.0.0-284.30.0.1.el9_2.x86_64.rpm67350e50eeae5cd27482b15e809295930247bdeb07097b0ac923209b10a4e6ea-ol9_x86_64_baseos_latest
bpftool-7.0.0-284.30.0.1.el9_2.x86_64.rpm67350e50eeae5cd27482b15e809295930247bdeb07097b0ac923209b10a4e6ea-ol9_x86_64_u2_baseos_patch
kernel-5.14.0-284.30.0.1.el9_2.x86_64.rpm84a687cafd9971a3280a85bc0d0bcbc8d5e8c9fc50b6c7539499f088d0230239-ol9_x86_64_baseos_latest
kernel-5.14.0-284.30.0.1.el9_2.x86_64.rpm84a687cafd9971a3280a85bc0d0bcbc8d5e8c9fc50b6c7539499f088d0230239-ol9_x86_64_u2_baseos_patch
kernel-abi-stablelists-5.14.0-284.30.0.1.el9_2.noarch.rpm3e8e5998abd2fc790044a82f4c8205364fa9ce50453821a4ca12f9c2c52cfcce-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-284.30.0.1.el9_2.noarch.rpm3e8e5998abd2fc790044a82f4c8205364fa9ce50453821a4ca12f9c2c52cfcce-ol9_x86_64_u2_baseos_patch
kernel-core-5.14.0-284.30.0.1.el9_2.x86_64.rpmb1cc664606138dea97ff9442437978d9441c19a0ffd6d81e8c03a05758f9a9f7-ol9_x86_64_baseos_latest
kernel-core-5.14.0-284.30.0.1.el9_2.x86_64.rpmb1cc664606138dea97ff9442437978d9441c19a0ffd6d81e8c03a05758f9a9f7-ol9_x86_64_u2_baseos_patch
kernel-cross-headers-5.14.0-284.30.0.1.el9_2.x86_64.rpm043f4425b44b6b38b191ca9a188906d8f1d609ab0801feff5946be5f504c8540-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-284.30.0.1.el9_2.x86_64.rpmc1e0194ab9a7d2ae5cf95f991a28743b2dcc028baae7460b372db4689c0bf288-ol9_x86_64_baseos_latest
kernel-debug-5.14.0-284.30.0.1.el9_2.x86_64.rpmc1e0194ab9a7d2ae5cf95f991a28743b2dcc028baae7460b372db4689c0bf288-ol9_x86_64_u2_baseos_patch
kernel-debug-core-5.14.0-284.30.0.1.el9_2.x86_64.rpm22a0a0d9b38da7a62195cb5907f83ff090cb66b3171815c435a7495f5abaea98-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-284.30.0.1.el9_2.x86_64.rpm22a0a0d9b38da7a62195cb5907f83ff090cb66b3171815c435a7495f5abaea98-ol9_x86_64_u2_baseos_patch
kernel-debug-devel-5.14.0-284.30.0.1.el9_2.x86_64.rpmc1b44bfe762e455d3b2479a33be3d3a72eb48dd0449a9ac8aa867cb3ab8fa68d-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-284.30.0.1.el9_2.x86_64.rpmb1913e72b12e22096e8a6abcc88635f97fcd9a472171fe119057edcdc94c733d-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-284.30.0.1.el9_2.x86_64.rpmd2da96b85f26a8d52489aca5cf799161e28dce935c60c45adc3ea0375d1c24dc-ol9_x86_64_baseos_latest
kernel-debug-modules-5.14.0-284.30.0.1.el9_2.x86_64.rpmd2da96b85f26a8d52489aca5cf799161e28dce935c60c45adc3ea0375d1c24dc-ol9_x86_64_u2_baseos_patch
kernel-debug-modules-core-5.14.0-284.30.0.1.el9_2.x86_64.rpmd4b4071f80e9817b0be76d85705db46b1462fbd058fdbd8463ecfa166c7d7f88-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-284.30.0.1.el9_2.x86_64.rpmd4b4071f80e9817b0be76d85705db46b1462fbd058fdbd8463ecfa166c7d7f88-ol9_x86_64_u2_baseos_patch
kernel-debug-modules-extra-5.14.0-284.30.0.1.el9_2.x86_64.rpm197f48c42afa1ccb8fba267e1cdbc719af150c510d0ca514d32a3cd9d54adce3-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-284.30.0.1.el9_2.x86_64.rpm197f48c42afa1ccb8fba267e1cdbc719af150c510d0ca514d32a3cd9d54adce3-ol9_x86_64_u2_baseos_patch
kernel-debug-uki-virt-5.14.0-284.30.0.1.el9_2.x86_64.rpmeef0661348a49037399aa4104e4953990bc428c2ebe4ebb8e8b8da0b72bf47b3-ol9_x86_64_baseos_latest
kernel-debug-uki-virt-5.14.0-284.30.0.1.el9_2.x86_64.rpmeef0661348a49037399aa4104e4953990bc428c2ebe4ebb8e8b8da0b72bf47b3-ol9_x86_64_u2_baseos_patch
kernel-devel-5.14.0-284.30.0.1.el9_2.x86_64.rpm16ae7a0e6d7d115fe28ef2b95cea79e3a2324b90bf17c3707523261dd14079a1-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-284.30.0.1.el9_2.x86_64.rpm2cdffda2b3c2304aa05136b6d359cdb0d8d8ea4282f271b1c29342b160bbcb7a-ol9_x86_64_appstream
kernel-doc-5.14.0-284.30.0.1.el9_2.noarch.rpmafd319901bdbb84011a4d999d085c5995f79ff02e75017866a6084798604b7dc-ol9_x86_64_appstream
kernel-headers-5.14.0-284.30.0.1.el9_2.x86_64.rpm39cacca63c3af9972f09619df56513a4163c1d215b2b98bf16fa21a20673b526-ol9_x86_64_appstream
kernel-modules-5.14.0-284.30.0.1.el9_2.x86_64.rpm4e62f680457eb2c1334638f43f1453dc3d82977fecf7d0ffc58413ee4df7d9f7-ol9_x86_64_baseos_latest
kernel-modules-5.14.0-284.30.0.1.el9_2.x86_64.rpm4e62f680457eb2c1334638f43f1453dc3d82977fecf7d0ffc58413ee4df7d9f7-ol9_x86_64_u2_baseos_patch
kernel-modules-core-5.14.0-284.30.0.1.el9_2.x86_64.rpmb2d626c20a8c8b16f3368031c8ec9c2c3e78e3015db67280db3a634c4556e3ef-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-284.30.0.1.el9_2.x86_64.rpmb2d626c20a8c8b16f3368031c8ec9c2c3e78e3015db67280db3a634c4556e3ef-ol9_x86_64_u2_baseos_patch
kernel-modules-extra-5.14.0-284.30.0.1.el9_2.x86_64.rpm8268eb852568d7a905921561629f4a639c9d6d6022e7b10147480aa81722e71b-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-284.30.0.1.el9_2.x86_64.rpm8268eb852568d7a905921561629f4a639c9d6d6022e7b10147480aa81722e71b-ol9_x86_64_u2_baseos_patch
kernel-tools-5.14.0-284.30.0.1.el9_2.x86_64.rpm2fa24cf2eb717776b0b8113d3e1942406e7f3015f4512509574b4f9ee2d34882-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-284.30.0.1.el9_2.x86_64.rpm2fa24cf2eb717776b0b8113d3e1942406e7f3015f4512509574b4f9ee2d34882-ol9_x86_64_u2_baseos_patch
kernel-tools-libs-5.14.0-284.30.0.1.el9_2.x86_64.rpma85ee35e54aff13db3e4cfc1cdc614480c36d49e126a35713c10709dae8a55cd-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-284.30.0.1.el9_2.x86_64.rpma85ee35e54aff13db3e4cfc1cdc614480c36d49e126a35713c10709dae8a55cd-ol9_x86_64_u2_baseos_patch
kernel-tools-libs-devel-5.14.0-284.30.0.1.el9_2.x86_64.rpm92d9fa347b028377c4eb19703b2f1107180531383ed440561f492f614b642e70-ol9_x86_64_codeready_builder
kernel-uki-virt-5.14.0-284.30.0.1.el9_2.x86_64.rpm447cb3fc2bded29db421757967f98efb3982801de3a023aaa0f4452e4be94df9-ol9_x86_64_baseos_latest
kernel-uki-virt-5.14.0-284.30.0.1.el9_2.x86_64.rpm447cb3fc2bded29db421757967f98efb3982801de3a023aaa0f4452e4be94df9-ol9_x86_64_u2_baseos_patch
perf-5.14.0-284.30.0.1.el9_2.x86_64.rpm793c54f26e5cc96c99df9541ca8fb3f3a0b97298635df7d242b7841394c36f0d-ol9_x86_64_appstream
python3-perf-5.14.0-284.30.0.1.el9_2.x86_64.rpmd95fd671bf6f540739c47b8094cdbfe808c2e82138f4a006ecb443dacec78c5c-ol9_x86_64_baseos_latest
python3-perf-5.14.0-284.30.0.1.el9_2.x86_64.rpmd95fd671bf6f540739c47b8094cdbfe808c2e82138f4a006ecb443dacec78c5c-ol9_x86_64_u2_baseos_patch
rtla-5.14.0-284.30.0.1.el9_2.x86_64.rpm362e654b6233f42c35b68c1d3ada31d21260d7536ae95c398a028739fd5a5f15-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights