Summary
kernel-uek
[3.8.13-118.30.1]
- ext4: validate that metadata blocks do not overlap superblock (Theodore Ts'o) [Orabug: 28220451] {CVE-2018-1094}
- ext4: always initialize the crc32c checksum driver (Theodore Ts'o) [Orabug: 28220451] {CVE-2018-1094} {CVE-2018-1094}
- vfs: Add sb_rdonly(sb) to query the MS_RDONLY flag on s_flags (David Howells) [Orabug: 28220451] {CVE-2018-1094}
- ocfs2: should wait dio before inode lock in ocfs2_setattr() (alex chen) [Orabug: 28852830] {CVE-2017-18204}
- Make file credentials available to the seqfile interfaces (Linus Torvalds) [Orabug: 29114878] {CVE-2018-17972}
- proc: restrict kernel stack dumps to root (Jann Horn) [Orabug: 29114878] {CVE-2018-17972}
- btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized (Qu Wenruo) [Orabug: 29301105] {CVE-2018-14609}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.30.1.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.30.1.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.30.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.30.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.30.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.30.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.30.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.30.1.el7uek |
Vulnerabilities 4
-
Unscored —
The ocfs2_setattr function in fs/ocfs2/file.c in the Linux kernel before 4.14.2 allows local users to cause a denial of…
-
Unscored —
The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.15.15 does not always initialize the crc3…
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in __del_reloc_roo…
-
Unscored —
An issue was discovered in the proc_pid_stack function in fs/proc/base.c in the Linux kernel through 4.18.11. It does n…