Summary
kernel-uek
[3.8.13-44.1.4.el7uek]
- USB: whiteheat: Added bounds checking for bulk command response (James Forshaw) [Orabug: 19849334] {CVE-2014-3185}
- HID: fix a couple of off-by-ones (Jiri Kosina) [Orabug: 19849317] {CVE-2014-3181}
- kvm: vmx: handle invvpid vm exit gracefully (Petr Matousek) [Orabug: 19906300] {CVE-2014-3646}
- nEPT: Nested INVEPT (Nadav Har'El) [Orabug: 19906267] {CVE-2014-3645}
- KVM: x86: Improve thread safety in pit (Andy Honig) [Orabug: 19905686] {CVE-2014-3611}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-44.1.4.el6uek | 0:0.4.3-4.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-44.1.4.el7uek | 0:0.4.3-4.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-44.1.4.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-44.1.4.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-44.1.4.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-44.1.4.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-44.1.4.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-44.1.4.el7uek |
Vulnerabilities 5
-
Unscored —
Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic…
-
Unscored —
Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat…
-
Unscored —
Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel…
-
Unscored —
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT in…
-
Unscored —
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPI…