Summary
[5.4.17-2136.307.3.4]
- io_uring: always use original task when preparing req identity (Jens Axboe)
[Orabug: 34186552] {CVE-2022-1786}
[5.4.17-2136.307.3.3]
- debug: Lock down kgdb (Stephen Brennan) [Orabug: 34152699] {CVE-2022-21499}
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kernel-uek-container | 0:5.4.17-2136.307.3.4.el8 |
| Oracle Linux · 7 | kernel-uek-container-debug | 0:5.4.17-2136.307.3.4.el8 |
Vulnerabilities 2
-
Medium 6.7
KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker w…
-
Unscored —
A use-after-free flaw was found in the Linux kernel’s io_uring subsystem in the way a user sets up a ring with IORING_S…