Summary
[4.1.12-124.48.6]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603382]
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603382] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [Orabug: 32603382] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches) [Orabug: 32603382]
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan) [Orabug: 32603382] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.48.6.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.48.6.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.48.6.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.48.6.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.48.6.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.48.6.el7uek |
Vulnerabilities 3
-
Unscored —
An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address …
-
Unscored —
An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected b…
-
Unscored —CVE-2021-27365 Public exploit
An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate lengt…