Summary
[4.1.12-124.23.2]
- n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD) (Linus Torvalds) [Orabug: 28855335] {CVE-2018-18386}
- nfs: Don't take a reference on fl->fl_file for LOCK operation (Benjamin Coddington) [Orabug: 28887442]
- x86/topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Samuel Neves) [Orabug: 28933009]
- ALSA: seq: Fix regression by incorrect ioctl_mutex usages (Takashi Iwai) [Orabug: 29005188] {CVE-2018-1000004}
- net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() (Wei Yongjun) [Orabug: 29012346] {CVE-2018-8043}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.23.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.23.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.23.2.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.23.2.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.23.2.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.23.2.el7uek |
Vulnerabilities 3
-
Unscored —
In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound sy…
-
Unscored —
drivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals)…
-
Unscored —
The unimac_mdio_probe function in drivers/net/phy/mdio-bcm-unimac.c in the Linux kernel through 4.15.8 does not validat…