Summary
[4.1.12-124.14.5]
- vhost/scsi: fix reuse of &vq->iov[out] in response (Benjamin Coddington) [Orabug: 27928330]
[4.1.12-124.14.4]
- kernel.spec: add requires system-release for OL7 (Brian Maly) [Orabug: 27955380]
- x86/kernel/traps.c: fix trace_die_notifier return value (Kris Van Hees) {CVE-2018-8897}
- x86/entry/64: Dont use IST entry for #BP stack (Andy Lutomirski) {CVE-2018-8897}
- kvm/x86: fix icebp instruction handling (gregkh@linuxfoundation.org) {CVE-2018-1087}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.14.5.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.14.5.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.14.5.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.14.5.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.14.5.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.14.5.el7uek |
Vulnerabilities 2
-
High 8.0
kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulner…
-
Unscored —
A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) w…