Summary
kernel-uek
[3.8.13-118.15.2]
- x86/iopl/64: properly context-switch IOPL on Xen PV (Andy Lutomirski) [Orabug: 25269176] {CVE-2016-3157} {CVE-2016-3157}
- net: Fix use after free in the recvmmsg exit path (Arnaldo Carvalho de Melo) [Orabug: 25298611] {CVE-2016-7117}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.15.2.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.15.2.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.15.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.15.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.15.2.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.15.2.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.15.2.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.15.2.el7uek |
Vulnerabilities 2
-
Unscored —
The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly context-switch IOPL on 6…
-
Unscored —CVE-2016-7117 EPSS 24%
Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows rem…