Summary
[4.1.12-124.50.2]
- btrfs: fix race when cloning extent buffer during rewind of an old root (Filipe Manana) [Orabug: 32669454] {CVE-2021-28964}
- xen-blkback: don't leak persistent grants from xen_blkbk_map() (Jan Beulich) [Orabug: 32697855] {CVE-2021-28688}
- netfilter: x_tables: Use correct memory barriers. (Mark Tomlinson) [Orabug: 32709125] {CVE-2021-29650}
- netfilter: x_tables: make xt_replace_table wait until old rules are not used anymore (Florian Westphal) [Orabug: 32709125] {CVE-2021-29650}
- do_epoll_ctl(): clean the failure exits up a bit (Al Viro) [Orabug: 32759496] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Marc Zyngier) [Orabug: 32759496] {CVE-2020-0466}
- HID: core: Sanitize event code and type when mapping input (Marc Zyngier) [Orabug: 32759553] {CVE-2020-0465}
[4.1.12-124.50.1]
- floppy: fix lock_fdc() signal handling (Jiri Kosina) [Orabug: 32624116] {CVE-2021-20261}
- Xen/gnttab: handle p2m update errors on a per-slot basis (Jan Beulich) [Orabug: 32651478] {CVE-2021-28038}
- n_tty: Fix stall at n_tty_receive_char_special(). (Tetsuo Handa) [Orabug: 32656942] {CVE-2021-20219}
- fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent (Eddy Wu) [Orabug: 32695783] {CVE-2020-35508}
- Return EBUSY from BLKRRPART for mounted whole-dev fs (Eric Sandeen) [Orabug: 32696741]
- SecureBoot Digicert 2021 certificates update (Brian Maly) [Orabug: 32734505]
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.50.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.50.2.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.50.2.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.50.2.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.50.2.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.50.2.el7uek |
Vulnerabilities 9
-
Unscored —
In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —
In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This co…
-
Unscored —
A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child…
-
Unscored —
A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. I…
-
Unscored —
A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The…
-
Unscored —
An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver l…
-
Unscored —
The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or…
-
Unscored —
A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attac…
-
Unscored —
An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial …