High ELSA-2022-9423 1 CVE

Important: Unbreakable Enterprise kernel security update (Oracle Linux 7)

Published May 24, 2022 · Updated May 24, 2022

Ecosystem: Oracle Linux

Summary

[4.14.35-2047.513.2.2]
- debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152700] {CVE-2022-21499}

Fixed packages 11

Release	Package	Fixed in
Oracle Linux · 7	kernel-uek	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	kernel-uek-debug	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	kernel-uek-debug-devel	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	kernel-uek-devel	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	kernel-uek-doc	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	kernel-uek-headers	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	kernel-uek-tools	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	kernel-uek-tools-libs	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	kernel-uek-tools-libs-devel	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	perf	0:4.14.35-2047.513.2.2.el7uek
Oracle Linux · 7	python-perf	0:4.14.35-2047.513.2.2.el7uek

Vulnerabilities 1

Medium 6.7

CVE-2022-21499

KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker w…

Oracle Oracle Linux Oracle VM linux-raspi2 Linux Debian Ubuntu

Jun 9, 2022