Summary
[4.1.12-124.53.5]
- seq_file: disallow extremely large seq buffer allocations (Eric Sandeen) [Orabug: 33143006] {CVE-2021-33909}
[4.1.12-124.53.3]
- net/mlx4: Fix EEPROM dump support (Vladyslav Tarasiuk) [Orabug: 31895301] {CVE-2020-14304}
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query (Erez Alfasi) [Orabug: 31895301] {CVE-2020-14304}
- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [Orabug: 33093028] {CVE-2021-22555}
- xen/blkback: Make sure all vbd fields are initialized (Boris Ostrovsky) [Orabug: 33131620]
[4.1.12-124.53.2]
- scsi: lpfc: Fix driver crash in target reset handler (James Smart) [Orabug: 33048899]
[4.1.12-124.53.1]
- xfs: fix lockup issue (Junxiao Bi) [Orabug: 32836026]
- bluetooth: eliminate the potential race condition when removing the HCI controller (Lin Ma) [Orabug: 32912036] {CVE-2021-32399} {CVE-2021-32399}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.53.5.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.53.5.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.53.5.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.53.5.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.53.5.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.53.5.el7uek |
Vulnerabilities 4
-
High 8.3
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space
KEV Oct 6, 2025 -
Medium 4.4
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of t…
-
Unscored —CVE-2021-32399 Public exploit
net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller.
-
Unscored —CVE-2021-33909 Public exploit
fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, …