Summary
[4.1.12-124.36.1]
- iscsi-target: graceful disconnect on invalid mapping to iovec (Imran Haider) [Orabug: 30459537]
- x86/microcode: Issue update message only once (Borislav Petkov) [Orabug: 30528904]
- x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov) [Orabug: 30528904]
- KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) (Paolo Bonzini) [Orabug: 30658695] {CVE-2019-19332}
- rtlwifi: Fix potential overflow on P2P code (Laura Abbott) [Orabug: 30807748] {CVE-2019-17666}
[4.1.12-124.35.5]
- x86: microcode: propagate return value to siblings (Mihai Carabas) [Orabug: 30557086]
- x86/bugs: TSX not disabled at late loading (Mihai Carabas) [Orabug: 30557086]
- mlx5: lock mlx5_core to prevent module unload (Brian Maly) [Orabug: 30566775]
- rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon) [Orabug: 30576433]
- x86: bugs: replace static_ with boot_ for CPU bugs mitigations (Mihai Carabas) [Orabug: 30649400]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.36.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.36.1.el7uek |
Vulnerabilities 2
-
Medium 6.1
An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kerne…
-
Unscored —CVE-2019-17666 Public exploit
rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bou…