ELSA-2024-12851

ELSA-2024-12851 - Unbreakable Enterprise kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2024-11-27

Description


[4.1.12-124.92.3]
- memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070674] {CVE-2024-45021}
- ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [Orabug: 36835819] {CVE-2024-40943}

[4.1.12-124.92.2]
- fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [Orabug: 36984058] {CVE-2024-39475}
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [Orabug: 36897888] {CVE-2024-42148}
- vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [Orabug: 36835584] {CVE-2024-39499}
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee) [Orabug: 36544953] {CVE-2024-26898}

[4.1.12-124.92.1]
- Input: MT - limit max slots (Tetsuo Handa) [Orabug: 37029139] {CVE-2024-45008}
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [Orabug: 36897642] {CVE-2024-42101}
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [Orabug: 36835737] {CVE-2024-40912}
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [Orabug: 36835711] {CVE-2024-40904}
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [Orabug: 36825250] {CVE-2024-39487}
- jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [Orabug: 36753653] {CVE-2024-38599}
- scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753475] {CVE-2024-38560}
- ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson) [Orabug: 36642150] {CVE-2024-27436}
- USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [Orabug: 36598221] {CVE-2024-27059}
- fat: fix uninitialized field in nostale filehandles (Jan Kara) [Orabug: 36597870] {CVE-2024-26973}
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf) [Orabug: 36544941] {CVE-2024-26894}


Related CVEs


CVE-2024-26894
CVE-2024-26898
CVE-2024-38599
CVE-2024-40912
CVE-2024-45021
CVE-2024-38560
CVE-2024-39487
CVE-2024-40904
CVE-2024-40943
CVE-2024-42148
CVE-2024-27059
CVE-2024-42101
CVE-2024-39475
CVE-2024-39499
CVE-2024-45008
CVE-2024-26973
CVE-2024-27436

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 6 (x86_64) kernel-uek-4.1.12-124.92.3.el6uek.src.rpm08a4fdb21e13803a3174fd9f42d53c1adabc0c41ce1d3d1513bcfc519bc5fda6ELSA-2025-20007ol6_x86_64_UEKR4_ELS
kernel-uek-4.1.12-124.92.3.el6uek.x86_64.rpm20697c573d21832c57b45aeaa52f92b41a745d499094f83b433dbebb27e5d946ELSA-2025-20007ol6_x86_64_UEKR4_ELS
kernel-uek-debug-4.1.12-124.92.3.el6uek.x86_64.rpm504785a49707043a447ef312387bf3fdc6ccd03fa8a9793d3213ab33a28019d5ELSA-2025-20007ol6_x86_64_UEKR4_ELS
kernel-uek-debug-devel-4.1.12-124.92.3.el6uek.x86_64.rpma9b099b6445ceac28e10933fcbbb6e0e34c4f4fa5398a998756fbb642f29a088ELSA-2025-20007ol6_x86_64_UEKR4_ELS
kernel-uek-devel-4.1.12-124.92.3.el6uek.x86_64.rpmecfe4de0c18b91937c42ca27bf74983a7e4108697278b4bfd52f088a157671eeELSA-2025-20007ol6_x86_64_UEKR4_ELS
kernel-uek-doc-4.1.12-124.92.3.el6uek.noarch.rpm295d403097eca829c20e9245be2a59339282f6d77e43fdd7d0e35ab80d20beecELSA-2025-20007ol6_x86_64_UEKR4_ELS
kernel-uek-firmware-4.1.12-124.92.3.el6uek.noarch.rpm361ac9e0e02aff37847dc8efe474334565d50cd6f2aa10a1226117be48829ea8ELSA-2025-20007ol6_x86_64_UEKR4_ELS
Oracle Linux 7 (x86_64) kernel-uek-4.1.12-124.92.3.el7uek.src.rpm3f90aa9935454848f1638deeff33b5473e7a36ac5e201de4d91c68118b7fce37ELSA-2025-20190ol7_x86_64_UEKR4
kernel-uek-4.1.12-124.92.3.el7uek.x86_64.rpme9ea740d2e18781be453b65a661e68efa028db8a6ecf93dfcdd566088d0ea693ELSA-2025-20190ol7_x86_64_UEKR4
kernel-uek-debug-4.1.12-124.92.3.el7uek.x86_64.rpm7b2771512ce1337d25a807ac115d96cc1bb8904f557acc2a3496acd7847eaad1ELSA-2025-20190ol7_x86_64_UEKR4
kernel-uek-debug-devel-4.1.12-124.92.3.el7uek.x86_64.rpm4770a2c2be1a3076ff3cd6daf07037d07e9054847be220a846725d12f112e1cfELSA-2025-20190ol7_x86_64_UEKR4
kernel-uek-devel-4.1.12-124.92.3.el7uek.x86_64.rpmaf91b107c0bb6ae66777db153c1367e0791c4c57dd6d5d0d9e376e7aa2bb003dELSA-2025-20190ol7_x86_64_UEKR4
kernel-uek-doc-4.1.12-124.92.3.el7uek.noarch.rpm421e8a34fa2644c462f422efd1edc1ed8371fc332fe234d168ab835146b5f512ELSA-2025-20190ol7_x86_64_UEKR4
kernel-uek-firmware-4.1.12-124.92.3.el7uek.noarch.rpmfb52695104fd37195a71bed307d987785955f58659e80ef2d168fac93e1b4713ELSA-2025-20007ol7_x86_64_UEKR4



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete