Summary
kernel-uek
[3.8.13-118.36.1]
- tun: call dev_get_valid_name() before register_netdevice() (Cong Wang) [Orabug: 29925557] {CVE-2018-7191}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.36.1.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.36.1.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.36.1.el7uek |
Vulnerabilities 1
-
Unscored —
In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. Th…