Skip to content
OpenAdvisories
High ELSA-2014-3052 3 CVEs

Important: unbreakable enterprise kernel security update (Oracle Linux 7)

Published Jul 29, 2014 · Updated Jul 29, 2014

Ecosystem: Oracle Linux

Summary

kernel-uek
[3.8.13-35.3.3.el7uek]
- filter: prevent nla extensions to peek beyond the end of the message (Mathias Krause) [Orabug: 19315781] {CVE-2014-3144} {CVE-2014-3145}
- mac80211: fix AP powersave TX vs. wakeup race (Emmanuel Grumbach) [Orabug: 19316457] {CVE-2014-2706}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-35.3.3.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-35.3.3.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-35.3.3.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-35.3.3.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-35.3.3.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-35.3.3.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-35.3.3.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-35.3.3.el7uek

Vulnerabilities 3

  • Unscored —
    CVE-2014-2706

    Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of…

    linux Debian
  • Unscored —
    CVE-2014-3144

    The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/c…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-3145

    The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kern…

    linux linux Debian Ubuntu