OVMSA-2024-0015

OVMSA-2024-0015 - Unbreakable Enterprise kernel security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2024-11-05

Description


[4.1.12-124.91.3]
- nfs_atomic_open(): prevent parallel nfs_lookup() on a negative hashed (Al Viro) [Orabug: 37006239]

[4.1.12-124.91.2]
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang) [Orabug: 37035560]

[4.1.12-124.91.1]
- vt_ioctl: fix array_index_nospec in vt_setactivate (Jakob Koschel) [Orabug: 37101899] {CVE-2022-48804}
- tty: vt_ioctl: fix potential Spectre v1 (Gustavo A. R. Silva) [Orabug: 37101899] {CVE-2022-48804}
- USB: core: Fix hang in usb_kill_urb by adding memory barriers (Alan Stern) [Orabug: 37101883] {CVE-2022-48760}
- smb: client: fix OOB in smbCalcSize() (Paulo Alcantara) [Orabug: 36165420] {CVE-2023-6606}


Related CVEs


CVE-2023-6606
CVE-2022-48760
CVE-2022-48804

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle VM 3 (x86_64) kernel-uek-4.1.12-124.91.3.el6uek.src.rpma4d7612ed122aeebb00e17c005dd3a5223ba013b7605014fe40d267e5f2453f0OVMSA-2025-0001ovm3_x86_64_ELS
kernel-uek-4.1.12-124.91.3.el6uek.x86_64.rpmad823d27cd7e48e3f87b97203812b3af8efd178e9c24e640705de046916433bbOVMSA-2025-0001ovm3_x86_64_ELS
kernel-uek-firmware-4.1.12-124.91.3.el6uek.noarch.rpmc72f9cda4352039181b3fbb40d05083c08261ac645724cfaffe9775afe79b8cbOVMSA-2025-0001ovm3_x86_64_ELS



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete