ELSA-2022-9212 — Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

Summary

[5.4.17-2136.304.4.5]
- lib/iov_iter: initialize 'flags' in new pipe_buffer (Max Kellermann) [Orabug: 33942329] {CVE-2022-0847}
- bpf: Disallow unprivileged bpf by default (Pawan Gupta) [Orabug: 33942374]

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 7	kernel-uek-container	0:5.4.17-2136.304.4.5.el8
Oracle Linux · 7	kernel-uek-container-debug	0:5.4.17-2136.304.4.5.el8

Vulnerabilities 1

High 7.8

CVE-2022-0847 Exploited Public exploit EPSS 93%

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Mar 7, 2022
KEV Apr 25, 2022

Important: Unbreakable Enterprise kernel-container security update (Oracle Linux 7)

Summary

Fixed packages 2

Vulnerabilities 1

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…