Summary
kernel-uek
[3.8.13-55.1.1]
- ALSA: control: Protect user controls against concurrent access (Lars-Peter Clausen) [Orabug: 20192540] {CVE-2014-4652}
- target/rd: Refactor rd_build_device_space + rd_release_device_space (Nicholas Bellinger) [Orabug: 20192516] {CVE-2014-4027}
- HID: logitech: perform bounds checking on device_id early enough (Jiri Kosina) [Orabug: 20192477] {CVE-2014-3182}
- udf: Avoid infinite loop when processing indirect ICBs (Jan Kara) [Orabug: 20192448] {CVE-2014-6410}
- ALSA: control: Make sure that id->index does not overflow (Lars-Peter Clausen) [Orabug: 20192416] {CVE-2014-4656}
- ALSA: control: Handle numid overflow (Lars-Peter Clausen) [Orabug: 20192367] {CVE-2014-4656}
- HID: picolcd: sanity check report size in raw_event() callback (Jiri Kosina) [Orabug: 20192208] {CVE-2014-3186}
- net: sctp: fix remote memory pressure from excessive queueing (Daniel Borkmann) [Orabug: 20192058] {CVE-2014-3688}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-55.1.1.el6uek | 0:0.4.3-4.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-55.1.1.el7uek | 0:0.4.3-4.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-55.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-55.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-55.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-55.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-55.1.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-55.1.1.el7uek |
Vulnerabilities 7
-
Unscored —
Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 …
-
Unscored —
Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in…
-
Unscored —
The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory …
-
Unscored —
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly…
-
Unscored —
Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the AL…
-
Unscored —
Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2…
-
Unscored —
The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB …