High ELSA-2022-9409 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published May 20, 2022 · Updated May 20, 2022

Ecosystem: Oracle Linux

Summary

[5.4.17-2136.307.3.2]
- perf: Fix sys_perf_event_open() race against self (Peter Zijlstra) [Orabug: 34172709] {CVE-2022-1729}

Fixed packages 9

Release	Package	Fixed in
Oracle Linux · 7	kernel-uek	0:5.4.17-2136.307.3.2.el8uek
Oracle Linux · 7	kernel-uek-debug	0:5.4.17-2136.307.3.2.el8uek
Oracle Linux · 7	kernel-uek-debug-devel	0:5.4.17-2136.307.3.2.el8uek
Oracle Linux · 7	kernel-uek-devel	0:5.4.17-2136.307.3.2.el8uek
Oracle Linux · 7	kernel-uek-doc	0:5.4.17-2136.307.3.2.el8uek
Oracle Linux · 7	kernel-uek-tools	0:5.4.17-2136.307.3.2.el7uek
Oracle Linux · 7	kernel-uek-tools-libs	0:5.4.17-2136.307.3.2.el7uek
Oracle Linux · 7	perf	0:5.4.17-2136.307.3.2.el7uek
Oracle Linux · 7	python-perf	0:5.4.17-2136.307.3.2.el7uek

Vulnerabilities 1

Unscored —

CVE-2022-1729

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain…

linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu

Sep 1, 2022