Summary
kernel-uek
[3.8.13-118.24.1]
- mm/mempolicy: fix use after free when calling get_mempolicy (zhong jiang) [Orabug: 28022108] {CVE-2018-10675}
- Fix up non-directory creation in SGID directories (Linus Torvalds) [Orabug: 28459478] {CVE-2018-13405}
- ALSA: seq: Make ioctls race-free (Takashi Iwai) [Orabug: 28459729] {CVE-2018-7566}
- ALSA: seq: Fix racy pool initializations (Takashi Iwai) [Orabug: 28459729] {CVE-2018-7566}
- posix-timer: Properly check sigevent->sigev_notify (Thomas Gleixner) [Orabug: 28481409] {CVE-2017-18344}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.24.1.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.24.1.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.24.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.24.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.24.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.24.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.24.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.24.1.el7uek |
Vulnerabilities 4
-
Unscored —CVE-2017-18344 Public exploit
The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properl…
-
Unscored —
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial …
-
Unscored —CVE-2018-13405 Public exploit
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an…
-
Unscored —
The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/se…