Summary
kernel-uek
[4.1.12-61.1.27]
- vfio/pci: Fix integer overflows, bitmask check (Vlad Tsyrklevich) [Orabug: 25164094] {CVE-2016-9083} {CVE-2016-9084}
- Don't feed anything but regular iovec's to blk_rq_map_user_iov (Linus Torvalds) [Orabug: 25231931] {CVE-2016-9576}
- kvm: x86: Check memopp before dereference (CVE-2016-8630) (Owen Hofmann) [Orabug: 25417387] {CVE-2016-8630}
- crypto: algif_hash - Only export and import on sockets with data (Herbert Xu) [Orabug: 25417799] {CVE-2016-8646}
- USB: usbfs: fix potential infoleak in devio (Kangjie Lu) [Orabug: 25462755] {CVE-2016-4482}
- net: fix infoleak in llc (Kangjie Lu) [Orabug: 25462799] {CVE-2016-4485}
[4.1.12-61.1.26]
- xen-netback: fix extra_info handling in xenvif_tx_err() (Paul Durrant) [Orabug: 25445336]
- net: Documentation: Fix default value tcp_limit_output_bytes (Niklas Cassel) [Orabug: 25458076]
- tcp: double default TSQ output bytes limit (Wei Liu) [Orabug: 25458076]
- xenbus: fix deadlock on writes to /proc/xen/xenbus (David Vrabel) [Orabug: 25430143]
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-4.1.12-61.1.27.el6uek | 0:0.5.3-2.el6 |
| Oracle Linux · 7 | dtrace-modules-4.1.12-61.1.27.el7uek | 0:0.5.3-2.el7 |
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-61.1.27.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-61.1.27.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-61.1.27.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-61.1.27.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-61.1.27.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-61.1.27.el7uek |
Vulnerabilities 7
-
Unscored —
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain…
-
Unscored —
The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data struc…
-
Unscored —
The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows lo…
-
Unscored —
The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial o…
-
Unscored —
drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.11 allows local users to bypass integer overflow checks, an…
-
Unscored —
drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel through 4.8.11 misuses the kzalloc function, which allows local u…
-
Unscored —
The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 4.8.14 does not properly restrict the ty…