Skip to content
OpenAdvisories
High ELSA-2015-3013 6 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Mar 13, 2015 · Updated Mar 13, 2015

Summary

kernel-uek
[3.8.13-55.1.8]
- kvm: fix excessive pages un-pinning in kvm_iommu_map error path. (Quentin Casasnovas) [Orabug: 20687313] {CVE-2014-3601} {CVE-2014-8369} {CVE-2014-3601}

[3.8.13-55.1.7]
- ttusb-dec: buffer overflow in ioctl (Dan Carpenter) [Orabug: 20673376] {CVE-2014-8884}
- mm: Fix NULL pointer dereference in madvise(MADV_WILLNEED) support (Kirill A. Shutemov) [Orabug: 20673281] {CVE-2014-8173}
- netfilter: conntrack: disable generic tracking for known protocols (Florian Westphal) [Orabug: 20673239] {CVE-2014-8160}
- tracing/syscalls: Ignore numbers outside NR_syscalls' range (Rabin Vincent) [Orabug: 20673163] {CVE-2014-7826}

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 dtrace-modules-3.8.13-55.1.8.el6uek 0:0.4.3-4.el6
Oracle Linux · 7 dtrace-modules-3.8.13-55.1.8.el7uek 0:0.4.3-4.el7
Oracle Linux · 7 kernel-uek 0:3.8.13-55.1.8.el7uek
Oracle Linux · 7 kernel-uek-debug 0:3.8.13-55.1.8.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:3.8.13-55.1.8.el7uek
Oracle Linux · 7 kernel-uek-devel 0:3.8.13-55.1.8.el7uek
Oracle Linux · 7 kernel-uek-doc 0:3.8.13-55.1.8.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:3.8.13-55.1.8.el7uek

Vulnerabilities 6