Skip to content
OpenAdvisories
High 2 exploited CVEs ELSA-2022-9014 3 CVEs

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published Jan 10, 2022 · Updated Jan 10, 2022

Summary

[4.1.12-124.59.1.2]
- fix regression in 'epoll: Keep a reference on files added to the check list' (Al Viro) [Orabug: 33679854] {CVE-2021-1048}
- fget: check that the fd still exists after getting a ref to it (Linus Torvalds) [Orabug: 33679806] {CVE-2021-0920}
- fs: add fget_many() and fput_many() (Jens Axboe) [Orabug: 33679806]
- af_unix: fix garbage collect vs MSG_PEEK (Miklos Szeredi) [Orabug: 33679806] {CVE-2021-0920}
- net: split out functions related to registering inflight socket files (Jens Axboe) [Orabug: 33679806]

[4.1.12-124.59.1.1]
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Darrick J. Wong) [Orabug: 33703630] {CVE-2021-4155}

Fixed packages 6

ReleasePackageFixed in
Oracle Linux · 7 kernel-uek 0:4.1.12-124.59.1.2.el7uek
Oracle Linux · 7 kernel-uek-debug 0:4.1.12-124.59.1.2.el7uek
Oracle Linux · 7 kernel-uek-debug-devel 0:4.1.12-124.59.1.2.el7uek
Oracle Linux · 7 kernel-uek-devel 0:4.1.12-124.59.1.2.el7uek
Oracle Linux · 7 kernel-uek-doc 0:4.1.12-124.59.1.2.el7uek
Oracle Linux · 7 kernel-uek-firmware 0:4.1.12-124.59.1.2.el7uek

Vulnerabilities 3