Summary
kernel-uek
[3.8.13-118.21.4]
- x86/fpu: Make eager FPU default (Mihai Carabas) [Orabug: 28156176] {CVE-2018-3665}
[3.8.13-118.21.3]
- KVM: Fix stack-out-of-bounds read in write_mmio (Wanpeng Li) [Orabug: 27951287] {CVE-2017-17741} {CVE-2017-17741}
- xfs: set format back to extents if xfs_bmap_extents_to_btree (Eric Sandeen) [Orabug: 27989498] {CVE-2018-10323}
- Bluetooth: Prevent stack info leak from the EFS element. (Ben Seri) [Orabug: 28030520] {CVE-2017-1000410} {CVE-2017-1000410}
- ALSA: hrtimer: Fix stall by hrtimer_cancel() (Takashi Iwai) [Orabug: 28058229] {CVE-2016-2549}
- ALSA: timer: Harden slave timer list handling (Takashi Iwai) [Orabug: 28058229] {CVE-2016-2547} {CVE-2016-2548}
- ALSA: timer: Fix double unlink of active_list (Takashi Iwai) [Orabug: 28058229] {CVE-2016-2545}
- ALSA: seq: Fix missing NULL check at remove_events ioctl (Takashi Iwai) [Orabug: 28058229] {CVE-2016-2543}
- ALSA: seq: Fix race at timer setup and close (Takashi Iwai) [Orabug: 28058229] {CVE-2016-2544}
- ALSA: usb-audio: avoid freeing umidi object twice (Andrey Konovalov) [Orabug: 28058229] {CVE-2016-2384}
[3.8.13-118.21.2]
- perf/hwbp: Simplify the perf-hwbp code, fix documentation (Linus Torvalds) [Orabug: 27947608] {CVE-2018-1000199}
- Revert 'perf/hwbp: Simplify the perf-hwbp code, fix documentation' (Brian Maly) [Orabug: 27947608]
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.21.4.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.21.4.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.21.4.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.21.4.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.21.4.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.21.4.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.21.4.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.21.4.el7uek |
Vulnerabilities 12
-
Unscored —CVE-2016-2384 Public exploit
Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows …
-
Unscored —
The snd_seq_ioctl_remove_events function in sound/core/seq/seq_clientmgr.c in the Linux kernel before 4.4.1 does not ve…
-
Unscored —
Race condition in the queue_delete function in sound/core/seq/seq_queue.c in the Linux kernel before 4.4.1 allows local…
-
Unscored —
The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a ce…
-
Unscored —
sound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not consider slave timer insta…
-
Unscored —
sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which al…
-
Unscored —
sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local us…
-
Unscored —
The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…
-
Unscored —
The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information …
-
Unscored —CVE-2018-1000199 Public exploit
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result…
-
Unscored —
The xfs_bmap_extents_to_btree function in fs/xfs/libxfs/xfs_bmap.c in the Linux kernel through 4.16.3 allows local user…
-
Unscored —
System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potenti…