Summary
kernel-uek
[4.1.12-61.1.17]
- sched: panic on corrupted stack end (Jann Horn) [Orabug: 24971921] {CVE-2016-1583}
- ecryptfs: forbid opening files without mmap handler (Jann Horn) [Orabug: 24971921] {CVE-2016-1583}
- proc: prevent stacking filesystems on top (Jann Horn) [Orabug: 24971921] {CVE-2016-1583}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-4.1.12-61.1.17.el6uek | 0:0.5.3-2.el6 |
| Oracle Linux · 7 | dtrace-modules-4.1.12-61.1.17.el7uek | 0:0.5.3-2.el7 |
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-61.1.17.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-61.1.17.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-61.1.17.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-61.1.17.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-61.1.17.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-61.1.17.el7uek |
Vulnerabilities 1
-
Unscored —CVE-2016-1583 Public exploit
The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to g…