Skip to content
OpenAdvisories
High ELSA-2019-4729 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jul 29, 2019 · Updated Jul 29, 2019

Summary

[4.1.12-124.29.3]
- mlx4_core: change log_num_{qp,rdmarc} with scale_profile (Mukesh Kacker) [Orabug: 30064080]

[4.1.12-124.29.2]
- scsi: storvsc: Fix scsi_cmd error assignments in storvsc_handle_error (Cathy Avery) [Orabug: 30052805]

[4.1.12-124.29.1]
- USB: check usb_get_extra_descriptor for proper size (Mathias Payer) [Orabug: 29755247] {CVE-2018-20169}
- rds: ib: Fix dereference of conn when NULL and cleanup thereof (Hakon Bugge) [Orabug: 29924849]
- ext4: zero out the unused memory region in the extent tree block (Sriram Rajagopalan) [Orabug: 29925523] {CVE-2019-11833} {CVE-2019-11833}
- ip_sockglue: Fix missing-check bug in ip_ra_control() (Gen Zhang) [Orabug: 29926005] {CVE-2019-12381}
- ipv6_sockglue: Fix a missing-check bug in ip6_ra_control() (Gen Zhang) [Orabug: 29926057] {CVE-2019-12378}
- x86/microcode: fix x86_spec_ctrl_mask on late loading. (Mihai Carabas) [Orabug: 29941248]
- net: rds: fix rds recv memory leak (Zhu Yanjun) [Orabug: 30034815]

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.1.12-124.29.3.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-124.29.3.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-124.29.3.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-124.29.3.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-124.29.3.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-124.29.3.el7uek

Vulnerabilities 4