Skip to content
OpenAdvisories
High ELSA-2018-4307 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Dec 11, 2018 · Updated Dec 11, 2018

Summary

[4.1.12-124.23.2]
- n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Linus Torvalds) [Orabug: 28855335] {CVE-2018-18386}
- nfs: Don't take a reference on fl->fl_file for LOCK operation (Benjamin Coddington) [Orabug: 28887442]
- x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Samuel Neves) [Orabug: 28933009]
- ALSA: seq: Fix regression by incorrect ioctl_mutex usages (Takashi Iwai) [Orabug: 29005188] {CVE-2018-1000004}
- net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun) [Orabug: 29012346] {CVE-2018-8043}

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.1.12-124.23.2.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-124.23.2.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-124.23.2.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-124.23.2.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-124.23.2.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-124.23.2.el7uek

Vulnerabilities 3