Summary
kernel-uek
[3.8.13-118.23.1]
- xen/blkback: free requests on disconnection (Dongli Zhang) [Orabug: 22111941]
- RDS: null pointer dereference in rds_atomic_free_op (Mohamed Ghannam) [Orabug: 27986376] {CVE-2018-5333}
- ACPI: sbshc: remove raw pointer from printk() message (Greg Kroah-Hartman) [Orabug: 27986392] {CVE-2018-5750}
- futex: Prevent overflow by strengthen input validation (Li Jinyue) [Orabug: 27986395] {CVE-2018-6927}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.23.1.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.23.1.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.23.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.23.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.23.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.23.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.23.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.23.1.el7uek |
Vulnerabilities 3
-
Unscored —CVE-2018-5333 Public exploit
In the Linux kernel through 4.14.13, the rds_cmsg_atomic function in net/rds/rdma.c mishandles cases where page pinning…
-
Unscored —
The acpi_smbus_hc_add function in drivers/acpi/sbshc.c in the Linux kernel through 4.14.15 allows local users to obtain…
-
Unscored —
The futex_requeue function in kernel/futex.c in the Linux kernel before 4.14.15 might allow attackers to cause a denial…