Skip to content
OpenAdvisories
High ELSA-2021-9009 4 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jan 12, 2021 · Updated Jan 12, 2021

Summary

[4.1.12-124.46.4.1]
- target: fix XCOPY NAA identifier lookup (Mike Christie) [Orabug: 32248041] {CVE-2020-28374}

[4.1.12-124.46.4]
- xen/events: block rogue events for some time (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/events: defer eoi in case of excessive number of events (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/events: use a common cpu hotplug hook for event channels (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/events: switch user event channels to lateeoi model (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/pciback: use lateeoi irq binding (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/scsiback: use lateeoi irq binding (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/netback: use lateeoi irq binding (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/blkback: use lateeoi irq binding (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/events: add a new 'late EOI' evtchn framework (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross) [Orabug: 31984335] {CVE-2020-27673}
- xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz) [Orabug: 32223358] {CVE-2020-29569}

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.1.12-124.46.4.1.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-124.46.4.1.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-124.46.4.1.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-124.46.4.1.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-124.46.4.1.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-124.46.4.1.el7uek

Vulnerabilities 4