Skip to content
OpenAdvisories
High ELSA-2020-5535 2 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Feb 12, 2020 · Updated Feb 12, 2020

Summary

[4.1.12-124.36.1]
- iscsi-target: graceful disconnect on invalid mapping to iovec (Imran Haider) [Orabug: 30459537]
- x86/microcode: Issue update message only once (Borislav Petkov) [Orabug: 30528904]
- x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov) [Orabug: 30528904]
- KVM: x86: fix out-of-bounds write in KVM_GET_EMULATED_CPUID (CVE-2019-19332) (Paolo Bonzini) [Orabug: 30658695] {CVE-2019-19332}
- rtlwifi: Fix potential overflow on P2P code (Laura Abbott) [Orabug: 30807748] {CVE-2019-17666}

[4.1.12-124.35.5]
- x86: microcode: propagate return value to siblings (Mihai Carabas) [Orabug: 30557086]
- x86/bugs: TSX not disabled at late loading (Mihai Carabas) [Orabug: 30557086]
- mlx5: lock mlx5_core to prevent module unload (Brian Maly) [Orabug: 30566775]
- rds: RDS/TCP does not initiate a connection (Ka-Cheong Poon) [Orabug: 30576433]
- x86: bugs: replace static_ with boot_ for CPU bugs mitigations (Mihai Carabas) [Orabug: 30649400]

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.1.12-124.36.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-124.36.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-124.36.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-124.36.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-124.36.1.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-124.36.1.el7uek

Vulnerabilities 2