Skip to content
OpenAdvisories
High ELSA-2021-9112 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Mar 17, 2021 · Updated Mar 17, 2021

Ecosystem: Oracle Linux

Summary

[4.14.35-2047.501.2]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan) [Orabug: 32634994] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 kernel-uek-headers 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 kernel-uek-tools 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 kernel-uek-tools-libs-devel 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 perf 0:4.14.35-2047.501.2.el7uek
Oracle Linux · 7 python-perf 0:4.14.35-2047.501.2.el7uek

Vulnerabilities 3