Summary
kernel-uek
[4.1.12-61.1.28]
- dccp: fix freeing skb too early for IPV6_RECVPKTINFO (Andrey Konovalov) [Orabug: 25598257] {CVE-2017-6074}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-4.1.12-61.1.28.el6uek | 0:0.5.3-2.el6 |
| Oracle Linux · 7 | dtrace-modules-4.1.12-61.1.28.el7uek | 0:0.5.3-2.el7 |
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-61.1.28.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-61.1.28.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-61.1.28.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-61.1.28.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-61.1.28.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-61.1.28.el7uek |
Vulnerabilities 1
-
Unscored —CVE-2017-6074 Public exploit
The dccp_rcv_state_process function in net/dccp/input.c in the Linux kernel through 4.9.11 mishandles DCCP_PKT_REQUEST …