OVMSA-2024-0015

OVMSA-2024-0015 - Unbreakable Enterprise kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2024-11-05

Description

[4.1.12-124.91.3]
- nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed (Al Viro) [Orabug: 37006239]

[4.1.12-124.91.2]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37035560]

[4.1.12-124.91.1]
- vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel) [Orabug: 37101899] {CVE-2022-48804}
- tty: vt_ioctl: fix potential Spectre v1 (Gustavo A. R. Silva) [Orabug: 37101899] {CVE-2022-48804}
- USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern) [Orabug: 37101883] {CVE-2022-48760}
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) [Orabug: 36165420] {CVE-2023-6606}

Related CVEs

CVE-2023-6606

CVE-2022-48760

CVE-2022-48804

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle VM 3 (x86_64)	kernel-uek-4.1.12-124.91.3.el6uek.src.rpm	7f9298139d2ee447fc45127c509676f3	-	ovm3_x86_64_ELS
	kernel-uek-4.1.12-124.91.3.el6uek.x86_64.rpm	4bf1750c7081cdab5c44a48251ffc112	-	ovm3_x86_64_ELS
	kernel-uek-firmware-4.1.12-124.91.3.el6uek.noarch.rpm	b987bb92b01d9c3b71fc4a183a7f8f7e	-	ovm3_x86_64_ELS