Skip to content
OpenAdvisories
High ELSA-2021-9114 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Mar 17, 2021 · Updated Mar 17, 2021

Ecosystem: Oracle Linux

Summary

[5.4.17-2036.104.5]
- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan) [Orabug: 32603379] {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:5.4.17-2036.104.5.el8uek
Oracle Linux · 7 kernel-uek-debug 0:5.4.17-2036.104.5.el8uek
Oracle Linux · 7 kernel-uek-debug-devel 0:5.4.17-2036.104.5.el8uek
Oracle Linux · 7 kernel-uek-devel 0:5.4.17-2036.104.5.el8uek
Oracle Linux · 7 kernel-uek-doc 0:5.4.17-2036.104.5.el8uek
Oracle Linux · 7 kernel-uek-tools 0:5.4.17-2036.104.5.el7uek
Oracle Linux · 7 kernel-uek-tools-libs 0:5.4.17-2036.104.5.el7uek
Oracle Linux · 7 perf 0:5.4.17-2036.104.5.el7uek
Oracle Linux · 7 python-perf 0:5.4.17-2036.104.5.el7uek

Vulnerabilities 3