Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-abi-whitelists | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-debug | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-debug-devel | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-devel | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-doc | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-headers | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-tools | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-tools-libs | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | kernel-tools-libs-devel | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | perf | 0:3.10.0-693.el7 |
| Oracle Linux · 7 | python-perf | 0:3.10.0-693.el7 |
Vulnerabilities 32
-
Medium 4.4
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as …
-
Unscored —
The pivot_root implementation in fs/namespace.c in the Linux kernel through 3.17 does not properly interact with certai…
-
Unscored —
The do_umount function in fs/namespace.c in the Linux kernel through 3.17 does not require the CAP_SYS_ADMIN capability…
-
Unscored —
Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to caus…
-
Unscored —
crypto/algif_skcipher.c in the Linux kernel before 4.4.2 does not verify that a setkey operation has been performed on …
-
Unscored —
The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where t…
-
Unscored —
crypto/mcryptd.c in the Linux kernel before 4.8.15 allows local users to cause a denial of service (NULL pointer derefe…
-
Unscored —
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain priv…
-
Unscored —
fs/namespace.c in the Linux kernel before 4.9 does not restrict how many mounts may exist in a mount namespace, which a…
-
Unscored —
The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection…
-
Unscored —
The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which …
-
Unscored —
The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial o…
-
Unscored —
The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the ty…
-
Unscored —
arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users t…
-
Unscored —
Multiple memory leaks in error paths in fs/xfs/xfs_attr_list.c in the Linux kernel before 4.5.1 allow local users to ca…
-
Unscored —
Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local u…
-
Unscored —
The nested_vmx_check_vmptr function in arch/x86/kvm/vmx.c in the Linux kernel through 4.9.8 improperly emulates the VMX…
-
Unscored —
The KEYS subsystem in the Linux kernel before 3.18 allows local users to gain privileges or cause a denial of service (…
-
Unscored —CVE-2017-2671 Public exploit
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock …
-
Unscored —
The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel through 4.9.9 allows attackers to cause…
-
Unscored —
Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via a cra…
-
Unscored —
The keyring_search_aux function in security/keys/keyring.c in the Linux kernel through 3.14.79 allows local users to ca…
-
Unscored —
The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of s…
-
Unscored —
Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4…
-
Unscored —
The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanis…
-
Unscored —
The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4…
-
Unscored —CVE-2017-8890 Public exploit
The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attacker…
-
Unscored —
The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may b…
-
Unscored —
The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…
-
Unscored —
The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, wh…
-
Unscored —
The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, whi…
-
Unscored —
The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whet…