ELSA-2024-12265

ELSA-2024-12265 - kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2024-04-03

Description


- [5.14.0-362.24.1.0.1_3.OL9]
- netfilter: nf_tables: reject QUEUE/DROP verdict parameters [Orabug: 36461940 ] {CVE-2024-1086}

- [5.14.0-362.24.1_3.OL9]
- Update Oracle Linux certificates (Kevin Lyons)
- Disable signing for aarch64 (Ilya Okomin)
- Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
- Update x509.genkey [Orabug: 24817676]
- Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5
- Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944]
- Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
- Disable unified kernel image package build
- Add Oracle Linux IMA certificates


Related CVEs


CVE-2024-1086

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 9 (aarch64) kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm4f3cc1d918cf347b697ef99070954e9f740b7222d178b1c187c2f9561335b631-ol9_aarch64_appstream
kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm4f3cc1d918cf347b697ef99070954e9f740b7222d178b1c187c2f9561335b631-ol9_aarch64_baseos_latest
kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm4f3cc1d918cf347b697ef99070954e9f740b7222d178b1c187c2f9561335b631-ol9_aarch64_codeready_builder
bpftool-7.2.0-362.24.1.0.1.el9_3.aarch64.rpm144ed74e99f619121676732e90d4df26af2a5244fee71853749e79e7b6a02058-ol9_aarch64_baseos_latest
kernel-cross-headers-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm0601f2072fac15eef27ae3e5d1a471b3d63f1eaa7268a1322d2aef05b28d0e20-ol9_aarch64_codeready_builder
kernel-headers-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm74e242811f36beea3beba45ff3fb4b03076f5e74177f6b230205c88856ea4df9-ol9_aarch64_appstream
kernel-tools-5.14.0-362.24.1.0.1.el9_3.aarch64.rpme5a2c066e0c5afd876f156cc124fd7cf5e98c314b3680ee37be9ea80ec97515e-ol9_aarch64_baseos_latest
kernel-tools-libs-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm02b1500c9238b62ef915ae4914d1169cc4be56669ca2f092a4e576338924903a-ol9_aarch64_baseos_latest
kernel-tools-libs-devel-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm1ce65e5c44f9067658bd251331ed333afa228c2cf85abfcef77b1f111b2ff901-ol9_aarch64_codeready_builder
perf-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm2368e9c70c841c66ada668b52015c93898481245775d5ca0b345cc1a23fc1294-ol9_aarch64_appstream
python3-perf-5.14.0-362.24.1.0.1.el9_3.aarch64.rpm24ab4672cbeb5842009ccee10f0e4364c0b94d808aa6b0bb51d716b822d9ce6f-ol9_aarch64_baseos_latest
Oracle Linux 9 (x86_64) kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm4f3cc1d918cf347b697ef99070954e9f740b7222d178b1c187c2f9561335b631-ol9_x86_64_appstream
kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm4f3cc1d918cf347b697ef99070954e9f740b7222d178b1c187c2f9561335b631-ol9_x86_64_baseos_latest
kernel-5.14.0-362.24.1.0.1.el9_3.src.rpm4f3cc1d918cf347b697ef99070954e9f740b7222d178b1c187c2f9561335b631-ol9_x86_64_codeready_builder
bpftool-7.2.0-362.24.1.0.1.el9_3.x86_64.rpm344ffff164e96c2c5f714a1f09714028db3a974064f6c23342b3866fc52bbabe-ol9_x86_64_baseos_latest
kernel-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm52e6adce9fcbe4ece4f4d12f5242e74f4c3744223f99c0cdcf1a7f70102c80c0-ol9_x86_64_baseos_latest
kernel-abi-stablelists-5.14.0-362.24.1.0.1.el9_3.noarch.rpm544d38b04eaf5588634089f3fad6ed904c1b20a2f452276ec6ffa0bdba2bb7d7-ol9_x86_64_baseos_latest
kernel-core-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm4aef460f7ce0af70f171c1a81dc95ac2cb052c548bdf0e53b48e3e95313371f7-ol9_x86_64_baseos_latest
kernel-cross-headers-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmea2c705089f09798056d47fb70b052c7127aa11c1a326ed0abc62236f6608df6-ol9_x86_64_codeready_builder
kernel-debug-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm09a8a7d2d1b1b9ef9a45df875151c86e18e245192c66dc86ee934deec194f216-ol9_x86_64_baseos_latest
kernel-debug-core-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm6b635a8c2c222b03c1cd0d1f780deb83d23ee390f95eee9fd59f5c0806255bb4-ol9_x86_64_baseos_latest
kernel-debug-devel-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmb60d5e4699bae55740c3eacbf4dc1d6ef95e59d642081933f56b0a04cc9f8b7c-ol9_x86_64_appstream
kernel-debug-devel-matched-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm31c048afa5aa892808c366ae4d9abeb7c941cbc0286b0495566ce648d0e7d1c6-ol9_x86_64_appstream
kernel-debug-modules-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm70f2e0444b55bc1aee4b4246fa0c8ddecfe119da366479675207ba641828785b-ol9_x86_64_baseos_latest
kernel-debug-modules-core-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm27e3a71a23763d640a3af7323e731b6a0ad1c88e8279e994d3b5c966a3d66303-ol9_x86_64_baseos_latest
kernel-debug-modules-extra-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm8b3d8ea7ef071f4fa36f06cd53564948b04748e51fac1d7ec4bb1dac4e721b64-ol9_x86_64_baseos_latest
kernel-devel-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm7918ff1f3d346abdd969919042260088d8e2beb196b6658b0f77195918bc522a-ol9_x86_64_appstream
kernel-devel-matched-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmee05f1e47b49f9eea6d6a0814aa2143ae22d9ddc21342cb542a90d951270f7ed-ol9_x86_64_appstream
kernel-doc-5.14.0-362.24.1.0.1.el9_3.noarch.rpm9a1d0dd90241411765e31fa921dd77c1c22e49c9f7223e7e3a69ca01aa824103-ol9_x86_64_appstream
kernel-headers-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm0570ece0247802c85eec05533cf43a160f52f494a45338ebbce568a74279cd97-ol9_x86_64_appstream
kernel-modules-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmbdf9460b9af88319beac87646dfb0a1369cc1cf716baa2e7b208acc0f20fe88a-ol9_x86_64_baseos_latest
kernel-modules-core-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmc650df85993edfd43e4c2b7694b8e09ae21bee35647630a57f85bb7c017d293a-ol9_x86_64_baseos_latest
kernel-modules-extra-5.14.0-362.24.1.0.1.el9_3.x86_64.rpmc42123a3075fa18c5b56efd260f2490b50d4c3cbdd9ad2f1acdeed1c9df9f8c4-ol9_x86_64_baseos_latest
kernel-tools-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm734038a00e48c54fed75ca45f858ee2bba4ced2b3c326dbec7ae7775b3310047-ol9_x86_64_baseos_latest
kernel-tools-libs-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm8af3533d32979dcc5968efbdca01074ea594da0d5b7202e8e413cd3f8d56c2b4-ol9_x86_64_baseos_latest
kernel-tools-libs-devel-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm2d89ea89178341cb291629b70410834f9366d90b2ce07859ad5bacb810abd0a6-ol9_x86_64_codeready_builder
libperf-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm8c5aa167a31ed3b7fd2613f0d7c5288d61752e4cce518c691af2e320eda279ed-ol9_x86_64_codeready_builder
perf-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm8c8aa93cfd9acc5adb987d8e57f7e004be965c2563703b9d68c5f72ee03c91fe-ol9_x86_64_appstream
python3-perf-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm36ca712d19d3141af7cbe832d647554f8b0704239473685c2c7b989a1b92e16a-ol9_x86_64_baseos_latest
rtla-5.14.0-362.24.1.0.1.el9_3.x86_64.rpm812e1a0eaf6169e69c2c26888f1817720d7cb5250b12f94524f37f0387016e0f-ol9_x86_64_appstream
rv-5.14.0-362.24.1.0.1.el9_3.x86_64.rpma23237f0fb810680444a0f2cbf373d792ec9d993ab5fc7647292626b82a9a63b-ol9_x86_64_appstream



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete