Summary
kernel-uek
[3.8.13-118.16.3]
- crypto: algif_hash - Only export and import on sockets with data (Herbert Xu) [Orabug: 25417805] {CVE-2016-8646}
- USB: usbfs: fix potential infoleak in devio (Kangjie Lu) [Orabug: 25462760] {CVE-2016-4482}
- net: fix infoleak in llc (Kangjie Lu) [Orabug: 25462807] {CVE-2016-4485}
- af_unix: Guard against other == sk in unix_dgram_sendmsg (Rainer Weikusat) [Orabug: 25463996] {CVE-2013-7446}
- unix: avoid use-after-free in ep_remove_wait_queue (Rainer Weikusat) [Orabug: 25463996] {CVE-2013-7446}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.16.3.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.16.3.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.16.3.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.16.3.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.16.3.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.16.3.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.16.3.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.16.3.el7uek |
Vulnerabilities 4
-
Unscored —
Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel before 4.3.3 allows local users to bypass intend…
-
Unscored —
The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain…
-
Unscored —
The llc_cmsg_rcv function in net/llc/af_llc.c in the Linux kernel before 4.5.5 does not initialize a certain data struc…
-
Unscored —
The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial o…