Stay Connected:

ELSA-2023-5622

ELSA-2023-5622 - kernel security and bug fix update

Type:SECURITY
Impact:IMPORTANT
Release Date:2023-10-11

Description


[3.10.0-1160.102.1.0.1.OL7]
- debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499}

[3.10.0-1160.102.1.OL7]
- Update Oracle Linux certificates (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com)
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15-2.0.9
- Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin)

[3.10.0-1160.102.1]
- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]

[3.10.0-1160.101.1]
- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}

[3.10.0-1160.100.1]
- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]


Related CVEs


CVE-2023-3609
CVE-2023-35001
CVE-2023-32233

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 7 (x86_64) kernel-3.10.0-1160.102.1.0.1.el7.src.rpm9384b0c4b9e4b0fcdb0b5b94d26d6242037c13ded4f675991c0ae414341bf497ELSA-2025-1281ol7_x86_64_latest
kernel-3.10.0-1160.102.1.0.1.el7.src.rpm9384b0c4b9e4b0fcdb0b5b94d26d6242037c13ded4f675991c0ae414341bf497ELSA-2025-1281ol7_x86_64_optional_latest
kernel-3.10.0-1160.102.1.0.1.el7.src.rpm9384b0c4b9e4b0fcdb0b5b94d26d6242037c13ded4f675991c0ae414341bf497ELSA-2025-1281ol7_x86_64_u9_patch
bpftool-3.10.0-1160.102.1.0.1.el7.x86_64.rpm8bd95a9ca3b9077e70762d0cc05afc84d87ddd33e8b6b8a3117c566868c30855ELSA-2025-1281ol7_x86_64_latest
bpftool-3.10.0-1160.102.1.0.1.el7.x86_64.rpm8bd95a9ca3b9077e70762d0cc05afc84d87ddd33e8b6b8a3117c566868c30855ELSA-2025-1281ol7_x86_64_u9_patch
kernel-3.10.0-1160.102.1.0.1.el7.x86_64.rpm7dd9b7be715bb0669b78ba95ef049a75c52f5a24e566a5aebac4ae4a404f0f4fELSA-2025-1281ol7_x86_64_latest
kernel-3.10.0-1160.102.1.0.1.el7.x86_64.rpm7dd9b7be715bb0669b78ba95ef049a75c52f5a24e566a5aebac4ae4a404f0f4fELSA-2025-1281ol7_x86_64_u9_patch
kernel-abi-whitelists-3.10.0-1160.102.1.0.1.el7.noarch.rpm87450959959abe2328968e98550574c27b5167db84fffe692deaa512c84e7f8eELSA-2025-1281ol7_x86_64_latest
kernel-abi-whitelists-3.10.0-1160.102.1.0.1.el7.noarch.rpm87450959959abe2328968e98550574c27b5167db84fffe692deaa512c84e7f8eELSA-2025-1281ol7_x86_64_u9_patch
kernel-debug-3.10.0-1160.102.1.0.1.el7.x86_64.rpme49813ccf2043ee3b57c8ae626fac88b98cdb915e8e999135c8b04c83edb5b4cELSA-2025-1281ol7_x86_64_latest
kernel-debug-3.10.0-1160.102.1.0.1.el7.x86_64.rpme49813ccf2043ee3b57c8ae626fac88b98cdb915e8e999135c8b04c83edb5b4cELSA-2025-1281ol7_x86_64_u9_patch
kernel-debug-devel-3.10.0-1160.102.1.0.1.el7.x86_64.rpmc1ba98c6a2ac1fa22cb2d9f3c661385b40f170fde146903bf3219818cd34bf38ELSA-2025-1281ol7_x86_64_latest
kernel-debug-devel-3.10.0-1160.102.1.0.1.el7.x86_64.rpmc1ba98c6a2ac1fa22cb2d9f3c661385b40f170fde146903bf3219818cd34bf38ELSA-2025-1281ol7_x86_64_u9_patch
kernel-devel-3.10.0-1160.102.1.0.1.el7.x86_64.rpm1161336c75143c8c15a32bfb50df9d51fd18c281a7fe473b4321ab6189718119ELSA-2025-1281ol7_x86_64_latest
kernel-devel-3.10.0-1160.102.1.0.1.el7.x86_64.rpm1161336c75143c8c15a32bfb50df9d51fd18c281a7fe473b4321ab6189718119ELSA-2025-1281ol7_x86_64_u9_patch
kernel-doc-3.10.0-1160.102.1.0.1.el7.noarch.rpm15da5e6627a94a7e726d5ce1e3e0787f05a6d684d5ccf334c1ab324a2909386dELSA-2025-1281ol7_x86_64_latest
kernel-doc-3.10.0-1160.102.1.0.1.el7.noarch.rpm15da5e6627a94a7e726d5ce1e3e0787f05a6d684d5ccf334c1ab324a2909386dELSA-2025-1281ol7_x86_64_u9_patch
kernel-headers-3.10.0-1160.102.1.0.1.el7.x86_64.rpm7aa0dab8a0332fb5f749b214778cf0ed86fca5af98d6f28dfd3e4ba2a92fe518ELSA-2025-1281exadata_dbserver_22.1.17.0.0_x86_64_base
kernel-headers-3.10.0-1160.102.1.0.1.el7.x86_64.rpm7aa0dab8a0332fb5f749b214778cf0ed86fca5af98d6f28dfd3e4ba2a92fe518ELSA-2025-1281ol7_x86_64_latest
kernel-headers-3.10.0-1160.102.1.0.1.el7.x86_64.rpm7aa0dab8a0332fb5f749b214778cf0ed86fca5af98d6f28dfd3e4ba2a92fe518ELSA-2025-1281ol7_x86_64_u9_patch
kernel-tools-3.10.0-1160.102.1.0.1.el7.x86_64.rpm98a7d18f5fc5a5d34a0f0ca603e963165b64976d37f5f163f9edbff3b6f6154eELSA-2025-1281exadata_dbserver_22.1.17.0.0_x86_64_base
kernel-tools-3.10.0-1160.102.1.0.1.el7.x86_64.rpm98a7d18f5fc5a5d34a0f0ca603e963165b64976d37f5f163f9edbff3b6f6154eELSA-2025-1281ol7_x86_64_latest
kernel-tools-3.10.0-1160.102.1.0.1.el7.x86_64.rpm98a7d18f5fc5a5d34a0f0ca603e963165b64976d37f5f163f9edbff3b6f6154eELSA-2025-1281ol7_x86_64_u9_patch
kernel-tools-libs-3.10.0-1160.102.1.0.1.el7.x86_64.rpm2dd55af87240ada2e3561ea30e8c7ec204e5634fcdc8d03fd8a570f1710377abELSA-2025-1281exadata_dbserver_22.1.17.0.0_x86_64_base
kernel-tools-libs-3.10.0-1160.102.1.0.1.el7.x86_64.rpm2dd55af87240ada2e3561ea30e8c7ec204e5634fcdc8d03fd8a570f1710377abELSA-2025-1281ol7_x86_64_latest
kernel-tools-libs-3.10.0-1160.102.1.0.1.el7.x86_64.rpm2dd55af87240ada2e3561ea30e8c7ec204e5634fcdc8d03fd8a570f1710377abELSA-2025-1281ol7_x86_64_u9_patch
kernel-tools-libs-devel-3.10.0-1160.102.1.0.1.el7.x86_64.rpm70a9a96d579a9b8b5154ab5cec3b67ae929ed9bb3fb367bc12f9ca62b753040dELSA-2025-1281ol7_x86_64_optional_latest
perf-3.10.0-1160.102.1.0.1.el7.x86_64.rpmda90048b915328a0fb9f6405d8c38184869408efd28d5c9f7ca5dfff1191bf64ELSA-2025-20019ol7_x86_64_latest
perf-3.10.0-1160.102.1.0.1.el7.x86_64.rpmda90048b915328a0fb9f6405d8c38184869408efd28d5c9f7ca5dfff1191bf64ELSA-2025-20019ol7_x86_64_u9_patch
python-perf-3.10.0-1160.102.1.0.1.el7.x86_64.rpmaff0c444240892572381d8a22a947c2c2c427937f614b12dbbd72b6cc4c01af7ELSA-2025-20019ol7_x86_64_latest
python-perf-3.10.0-1160.102.1.0.1.el7.x86_64.rpmaff0c444240892572381d8a22a947c2c2c427937f614b12dbbd72b6cc4c01af7ELSA-2025-20019ol7_x86_64_u9_patch



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete
Subscribe | Careers | Contact Us | Legal Notices | Terms of Use | Your Privacy Rights