Summary
[4.1.12-124.69.5.1]
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34883048] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34883048] {CVE-2022-4378}
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek | 0:4.1.12-124.69.5.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug | 0:4.1.12-124.69.5.1.el7uek |
| Oracle Linux · 7 | kernel-uek-debug-devel | 0:4.1.12-124.69.5.1.el7uek |
| Oracle Linux · 7 | kernel-uek-devel | 0:4.1.12-124.69.5.1.el7uek |
| Oracle Linux · 7 | kernel-uek-doc | 0:4.1.12-124.69.5.1.el7uek |
| Oracle Linux · 7 | kernel-uek-firmware | 0:4.1.12-124.69.5.1.el7uek |
Vulnerabilities 1
-
High 7.8
A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters …