Summary
kernel-uek
[3.8.13-118.19.10]
- mqueue: fix a use-after-free in sys_mq_notify() (Cong Wang) [Orabug: 26643556] {CVE-2017-11176}
[3.8.13-118.19.9]
- ipv6: avoid overflow of offset in ip6_find_1stfragopt (Sabrina Dubroca) [Orabug: 27011273] {CVE-2017-7542}
- packet: fix tp_reserve race in packet_set_ring (Willem de Bruijn) [Orabug: 27002450] {CVE-2017-1000111}
[3.8.13-118.19.8]
- mlx4_core: calculate log_num_mtt based on total system memory (Wei Lin Guay) [Orabug: 26883934]
- xen/x86: Add interface for querying amount of host memory (Boris Ostrovsky) [Orabug: 26883934]
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.19.10.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.19.10.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.19.10.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.19.10.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.19.10.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.19.10.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.19.10.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.19.10.el7uek |
Vulnerabilities 3
-
Unscored —
Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-865…
-
Unscored —CVE-2017-11176 Public exploit
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the ret…
-
Unscored —
The ip6_find_1stfragopt function in net/ipv6/output_core.c in the Linux kernel through 4.12.3 allows local users to cau…