Summary
[4.1.12-124.28.6]
- scsi: libfc: Fixup disc_mutex handling in fcoe module (Hannes Reinecke) [Orabug: 29511036]
- scsi: libfc: sanitize E_D_TOV and R_A_TOV setting in fcp (Hannes Reinecke) [Orabug: 29511036]
- sysctl: Fix kabi breakage (Shuning Zhang) [Orabug: 29689925]
- proc: Fix proc_sys_prune_dcache to hold a sb reference (Eric W. Biederman) [Orabug: 29689925]
- proc/sysctl: Don't grab i_lock under sysctl_lock. (Eric W. Biederman) [Orabug: 29689925]
- proc/sysctl: prune stale dentries during unregistering (Konstantin Khlebnikov) [Orabug: 29689925]
- scsi: smartpqi: correct lun reset issues (Kevin Barnett) [Orabug: 29848621]
- fork: record start_time late (David Herrmann) [Orabug: 29850581] {CVE-2019-6133}
- mm: avoid taking zone lock in pagetypeinfo_showmixed() (Vinayak Menon) [Orabug: 29905302]
- x86/retpoline/ia32entry: Convert to non-speculative calls (Ankur Arora) [Orabug: 29909295] {CVE-2017-5715}
- tun: call dev_get_valid_name() before register_netdevice() (Cong Wang) [Orabug: 29925555] {CVE-2018-7191}
- mm/madvise.c: fix madvise() infinite loop under special circumstances (chenjie) [Orabug: 29925610] {CVE-2017-18208}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.28.6.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.28.6.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.28.6.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.28.6.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.28.6.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.28.6.el7uek |
Vulnerabilities 4
-
Medium 5.6
Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…
-
Unscored —
The madvise_willneed function in mm/madvise.c in the Linux kernel before 4.14.4 allows local users to cause a denial of…
-
Unscored —
In the tun subsystem in the Linux kernel before 4.13.14, dev_get_valid_name is not called before register_netdevice. Th…
-
Unscored —
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, an…