ELSA-2025-20190

ELSA-2025-20190 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-03-20

Description

[5.4.17-2136.341.3.3]
- ima: Fix use-after-free on a dentry's dname.name (Stefan Berger) [Orabug: 37727037] {CVE-2024-39494}

[5.4.17-2136.341.3.2]
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [Orabug: 37707634] {CVE-2024-57892}
- ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi) [Orabug: 37707634]

Related CVEs

CVE-2024-57892

CVE-2024-39494

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	kernel-uek-5.4.17-2136.341.3.3.el7uek.src.rpm	4a7d298ff14420a8e850c2c1572890f7	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-5.4.17-2136.341.3.3.el7uek.x86_64.rpm	bb3fdb416fa49ba4365703de72f5e0a8	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-container-5.4.17-2136.341.3.3.el7uek.x86_64.rpm	ea740de2bcb1c3476e284b7c48366048	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-container-debug-5.4.17-2136.341.3.3.el7uek.x86_64.rpm	40060d6a3eccb78b2e0c551806f1e585	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-debug-5.4.17-2136.341.3.3.el7uek.x86_64.rpm	caee456497bbd7cd17f5336d6bed2a5e	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-debug-devel-5.4.17-2136.341.3.3.el7uek.x86_64.rpm	c1a49c9108731e10dcf6c82f107a4b00	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-devel-5.4.17-2136.341.3.3.el7uek.x86_64.rpm	d907d317615ff99a538524dd0519ed31	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-doc-5.4.17-2136.341.3.3.el7uek.noarch.rpm	5b51573f05d8b22e7ea0834b63c47df4	-	ol7_x86_64_UEKR6_ELS
	kernel-uek-tools-5.4.17-2136.341.3.3.el7uek.x86_64.rpm	10ec60aa05c92e4b4cba26f423249875	-	ol7_x86_64_UEKR6_ELS
Oracle Linux 8 (aarch64)	kernel-uek-5.4.17-2136.341.3.3.el8uek.src.rpm	4eb1ff49be710672b0679e67f94b46d7	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.341.3.3.el8uek.src.rpm	4eb1ff49be710672b0679e67f94b46d7	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-5.4.17-2136.341.3.3.el8uek.aarch64.rpm	d4b4d5e082a92a5d9618941164442635	-	ol8_aarch64_baseos_latest
	kernel-uek-5.4.17-2136.341.3.3.el8uek.aarch64.rpm	d4b4d5e082a92a5d9618941164442635	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-debug-5.4.17-2136.341.3.3.el8uek.aarch64.rpm	9f61bbb58c227f9b650c973e25f07adc	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-5.4.17-2136.341.3.3.el8uek.aarch64.rpm	9f61bbb58c227f9b650c973e25f07adc	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-debug-devel-5.4.17-2136.341.3.3.el8uek.aarch64.rpm	30f6b6a5bdb1dd4cd562f04dcdbbb75e	-	ol8_aarch64_baseos_latest
	kernel-uek-debug-devel-5.4.17-2136.341.3.3.el8uek.aarch64.rpm	30f6b6a5bdb1dd4cd562f04dcdbbb75e	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-devel-5.4.17-2136.341.3.3.el8uek.aarch64.rpm	742cd8a227fdaeb694ee4a232f1bad90	-	ol8_aarch64_baseos_latest
	kernel-uek-devel-5.4.17-2136.341.3.3.el8uek.aarch64.rpm	742cd8a227fdaeb694ee4a232f1bad90	-	ol8_aarch64_u10_baseos_patch
	kernel-uek-doc-5.4.17-2136.341.3.3.el8uek.noarch.rpm	3df59a202df1037cd5010a185b722950	-	ol8_aarch64_baseos_latest
	kernel-uek-doc-5.4.17-2136.341.3.3.el8uek.noarch.rpm	3df59a202df1037cd5010a185b722950	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	kernel-uek-5.4.17-2136.341.3.3.el8uek.src.rpm	4eb1ff49be710672b0679e67f94b46d7	-	ol8_x86_64_UEKR6
	kernel-uek-5.4.17-2136.341.3.3.el8uek.x86_64.rpm	dbd67f13661e9754dc59b7220c72becb	-	ol8_x86_64_UEKR6
	kernel-uek-container-5.4.17-2136.341.3.3.el8uek.x86_64.rpm	4cfba1c879119034f0d612b7c9044743	-	ol8_x86_64_UEKR6
	kernel-uek-container-debug-5.4.17-2136.341.3.3.el8uek.x86_64.rpm	e1d9e03dbb7c6dd72ee2ada08ad09025	-	ol8_x86_64_UEKR6
	kernel-uek-debug-5.4.17-2136.341.3.3.el8uek.x86_64.rpm	19ea728ddaac1f5037524be89244ed21	-	ol8_x86_64_UEKR6
	kernel-uek-debug-devel-5.4.17-2136.341.3.3.el8uek.x86_64.rpm	1e1c3d72ff6981c4cff70f94001d3a49	-	ol8_x86_64_UEKR6
	kernel-uek-devel-5.4.17-2136.341.3.3.el8uek.x86_64.rpm	f464cb32de453b6de94527a6d896fc56	-	ol8_x86_64_UEKR6
	kernel-uek-doc-5.4.17-2136.341.3.3.el8uek.noarch.rpm	3df59a202df1037cd5010a185b722950	-	ol8_x86_64_UEKR6

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team