Summary
[4.1.12-124.16.2]
- netlink: add a start callback for starting a netlink dump (Tom Herbert) [Orabug: 27169581] {CVE-2017-16939}
- ipsec: Fix aborted xfrm policy dump crash (Herbert Xu) [Orabug: 27169581] {CVE-2017-16939}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.16.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.16.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.16.2.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.16.2.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.16.2.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.16.2.el7uek |
Vulnerabilities 1
-
Unscored —CVE-2017-16939 Public exploit
The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to ga…