Summary
kernel-uek
[3.8.13-118.46.1]
- ipv6: only static routes qualify for equal cost multipathing (Hannes Frederic Sowa) [Orabug: 30977687] {CVE-2013-4125}
- USB: adutux: fix use-after-free on disconnect (Johan Hovold) [Orabug: 31240296] {CVE-2019-19523}
- USB: core: Fix races in character device registration and deregistraion (Alan Stern) [Orabug: 31317668] {CVE-2019-19537}
- USB: iowarrior: fix use-after-free on disconnect (Johan Hovold) [Orabug: 31351063] {CVE-2019-19528}
- usb: iowarrior: fix deadlock on disconnect (Oliver Neukum) [Orabug: 31351063] {CVE-2019-19528}
- mremap: properly flush TLB before releasing the page (Linus Torvalds) [Orabug: 31352012] {CVE-2018-18281}
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.46.1.el6uek | 0:0.4.5-3.el6 |
| Oracle Linux · 7 | dtrace-modules-3.8.13-118.46.1.el7uek | 0:0.4.5-3.el7 |
| Oracle Linux · 7 | kernel-uek | 0:3.8.13-118.46.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:3.8.13-118.46.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:3.8.13-118.46.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:3.8.13-118.46.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:3.8.13-118.46.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:3.8.13-118.46.1.el7uek |
Vulnerabilities 5
-
Unscored —
The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not prope…
-
Unscored —
Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall …
-
Unscored —
In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…
-
Unscored —
In the Linux kernel before 5.3.7, there is a use-after-free bug that can be caused by a malicious USB device in the dri…
-
Unscored —
In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the US…